Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0PlCJjIbrfCuyazsI3biRq2dGXM.cer
File:                     0PlCJjIbrfCuyazsI3biRq2dGXM.cer (raw, json)
Hash identifier:          hwNnF0FFawLLsHuu6VWLw5ZwSWwiylscwPRvx+yWuWs=
Subject key identifier:   D0:F9:42:26:32:1B:AD:F0:AE:C9:AC:EC:23:76:E2:46:AD:9D:19:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701E31241202A40DD16F8FB7472F1E91
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/0PlCJjIbrfCuyazsI3biRq2dGXM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:35:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 207925
                          IP: 193.143.226.0/24
                          IP: 2a10:8700::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:31:24:12:02:a4:0d:d1:6f:8f:b7:47:2f:1e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:35:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d0f94226321badf0aec9acec2376e246ad9d1973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:15:02:30:4f:3e:3a:27:d5:dc:31:f6:6c:
                    82:47:84:d9:ce:87:2e:c6:46:a0:26:c1:ba:b7:2e:
                    3f:94:b1:bc:ef:4c:e2:06:03:94:2d:a1:d5:dd:bf:
                    d2:2a:11:c4:f3:b8:88:e6:f1:78:2a:15:4b:71:3e:
                    04:39:0b:99:3b:8f:45:0c:40:28:6d:96:9d:23:bc:
                    ec:1b:f0:bc:f7:20:e8:1b:db:e7:ad:0f:32:bd:3e:
                    9d:80:61:62:fe:89:a1:36:cf:bd:03:a8:db:fa:35:
                    ee:fa:c2:ef:e9:eb:88:80:99:65:e3:94:53:10:17:
                    2e:55:72:7c:d3:1c:8c:8c:a0:8c:39:81:64:5b:90:
                    e5:3d:02:e0:15:e6:19:9b:bb:d2:e5:60:71:55:a4:
                    f0:15:e9:97:ae:05:ae:3b:54:9d:16:b2:9e:79:61:
                    f7:b5:8f:80:37:c4:ec:b8:f5:c3:7d:5f:0e:29:d1:
                    06:f4:0d:79:c7:07:47:15:6b:5e:9c:54:21:6b:7e:
                    d4:d0:29:de:f1:98:f7:b0:92:fd:40:fa:14:f1:c0:
                    18:84:89:45:72:a3:fa:92:c4:10:a6:f3:4e:5b:2a:
                    4b:55:7b:8e:27:29:1d:f0:e5:cd:ec:4f:a3:1a:fc:
                    80:53:be:ce:26:86:9d:c2:06:96:f6:65:06:d8:27:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F9:42:26:32:1B:AD:F0:AE:C9:AC:EC:23:76:E2:46:AD:9D:19:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/0PlCJjIbrfCuyazsI3biRq2dGXM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.143.226.0/24
                IPv6:
                  2a10:8700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207925

    Signature Algorithm: sha256WithRSAEncryption
         83:10:1f:50:45:8d:61:ef:87:ae:9f:06:0e:df:f0:11:14:bc:
         c5:39:39:be:9d:ae:4c:2d:70:77:1e:50:ab:20:95:7f:54:cb:
         53:c1:27:aa:6d:f5:62:93:45:37:a5:83:46:89:30:40:b5:23:
         ae:c0:24:7e:e7:bd:9f:64:1c:c8:20:73:db:40:9d:b8:51:10:
         d7:52:1f:1d:0b:d6:bf:96:72:1d:ec:9f:9b:28:34:ad:7a:4e:
         ef:81:ff:7d:c8:e3:a5:7d:f3:d4:c2:43:3b:6e:4a:47:15:e3:
         ca:6c:a7:1d:ba:19:e5:ca:7b:5b:2f:b6:f6:14:8c:24:39:3b:
         7b:7e:80:93:03:99:63:58:b6:65:6a:41:f0:3e:ab:69:68:9a:
         8c:7d:b8:ac:85:5e:16:aa:15:19:20:d8:43:02:8c:b0:3f:df:
         a9:8f:fd:1f:0b:66:c5:39:4f:ac:de:37:61:e4:5c:7b:c7:26:
         59:0e:f9:74:e0:39:dd:69:8f:05:a8:7f:0e:96:65:f8:b0:19:
         ca:43:9e:c1:b3:a8:17:02:f9:43:07:fc:21:a8:50:19:2b:49:
         0d:8b:e5:be:1a:c9:2d:8e:1e:54:ef:27:6a:69:23:9e:57:9e:
         57:80:c9:e3:33:5e:68:76:ea:6d:16:ef:5e:f7:af:cf:a8:44:
         2c:5f:ca:a9
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYVwHjEkEgKkDdFvj7dHLx6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDEzNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGY5NDIyNjMyMWJhZGYwYWVjOWFjZWMyMzc2ZTI0NmFkOWQxOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KUVAjBPPjon1dwx9myCR4TZzocu
xkagJsG6ty4/lLG870ziBgOULaHV3b/SKhHE87iI5vF4KhVLcT4EOQuZO49FDEAo
bZadI7zsG/C89yDoG9vnrQ8yvT6dgGFi/omhNs+9A6jb+jXu+sLv6euIgJll45RT
EBcuVXJ80xyMjKCMOYFkW5DlPQLgFeYZm7vS5WBxVaTwFemXrgWuO1SdFrKeeWH3
tY+AN8TsuPXDfV8OKdEG9A15xwdHFWtenFQha37U0Cne8Zj3sJL9QPoU8cAYhIlF
cqP6ksQQpvNOWypLVXuOJykd8OXN7E+jGvyAU77OJoadwgaW9mUG2CeRuwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFND5QiYyG63wrsms7CN24katnRlzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzZmOWE2
ZC05YjFhLTRmY2MtYWQxZi1lYmFiN2MzYTM1ZGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNmY5YTZk
LTliMWEtNGZjYy1hZDFmLWViYWI3YzNhMzVkZS8xLzBQbENKaklicmZDdXlhenNJ
M2JpUnEyZEdYTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwY/iMA0EAgACMAcDBQMqEIcAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMsNTANBgkqhkiG9w0BAQsFAAOCAQEAgxAfUEWNYe+H
rp8GDt/wERS8xTk5vp2uTC1wdx5QqyCVf1TLU8Enqm31YpNFN6WDRokwQLUjrsAk
fue9n2QcyCBz20CduFEQ11IfHQvWv5ZyHeyfmyg0rXpO74H/fcjjpX3z1MJDO25K
RxXjymynHboZ5cp7Wy+29hSMJDk7e36AkwOZY1i2ZWpB8D6raWiajH24rIVeFqoV
GSDYQwKMsD/fqY/9HwtmxTlPrN43YeRce8cmWQ75dOA53WmPBah/DpZl+LAZykOe
wbOoFwL5Qwf8IahQGStJDYvlvhrJLY4eVO8namkjnleeV4DJ4zNeaHbqbRbvXvev
z6hELF/KqQ==
-----END CERTIFICATE-----