Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0bS1qglWi2vgU2UNh2s6lJoSZFI.cer
File:                     0bS1qglWi2vgU2UNh2s6lJoSZFI.cer (raw, json)
Hash identifier:          0/ZAxxq40LPFhQHrIGEpSwQSI5MGpVFa/F7J5SclE20=
Subject key identifier:   D1:B4:B5:AA:09:56:8B:6B:E0:53:65:0D:87:6B:3A:94:9A:12:64:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1B4FEA1D68A830D0E751AFB0803C88
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/0bS1qglWi2vgU2UNh2s6lJoSZFI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:33:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.18.123.0/24
                          IP: 2a12:dc00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1b:4f:ea:1d:68:a8:30:d0:e7:51:af:b0:80:3c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:33:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d1b4b5aa09568b6be053650d876b3a949a126452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:ae:de:ef:94:c9:a4:f9:33:88:71:be:44:
                    dd:8f:2d:60:11:cc:fe:5a:9d:19:b7:75:bd:cb:7c:
                    e5:18:34:53:a3:5a:78:d7:42:f4:ed:54:cc:da:b0:
                    14:19:16:06:40:bd:76:88:54:ef:3f:19:52:61:1a:
                    b4:e9:5d:e3:6e:04:cb:9b:06:76:89:26:b1:7a:9c:
                    05:22:2f:b4:0c:1b:7a:62:2e:a9:38:8c:6a:4a:9e:
                    56:43:74:7f:b4:04:01:67:07:5d:81:2b:92:ae:51:
                    76:e1:35:80:cd:48:7b:cd:bd:18:a7:ab:24:5e:49:
                    81:c1:71:3c:d7:ec:8e:e0:a8:cf:1d:9e:e2:89:2d:
                    e6:04:ea:8c:01:14:4f:e7:6e:33:f0:9f:81:17:05:
                    fb:e1:c4:93:f9:7f:3c:c9:7f:d1:ed:d9:2e:c7:f9:
                    e5:a4:2d:34:3b:99:92:73:dd:f8:8c:4d:b6:2f:ff:
                    98:09:4d:c8:75:20:79:a9:ff:a6:26:26:c8:db:fa:
                    75:12:71:1c:5a:5f:f6:67:a4:0d:cf:d0:c5:5d:1d:
                    8d:8a:5c:7a:d8:6c:21:59:64:76:cd:b3:a2:26:67:
                    db:c3:22:ee:64:f1:09:9b:c1:15:01:b6:20:b8:92:
                    d9:1e:76:3a:a1:b2:fc:fe:7e:2e:08:8e:ae:9d:76:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B4:B5:AA:09:56:8B:6B:E0:53:65:0D:87:6B:3A:94:9A:12:64:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/0bS1qglWi2vgU2UNh2s6lJoSZFI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.123.0/24
                IPv6:
                  2a12:dc00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a7:d9:50:d5:75:00:91:20:4a:04:c6:31:fb:1c:8c:d6:7c:2f:
         03:1e:31:46:ab:16:1b:38:6a:03:6f:88:83:ce:bd:f6:d1:24:
         2a:c0:30:86:27:a0:8e:0c:e1:5f:f8:fb:cd:14:fa:37:b4:5e:
         51:4b:9d:28:48:0c:15:c4:b0:ae:b5:86:05:ec:7f:0f:11:d6:
         c0:d4:d3:16:42:62:0b:ab:61:d9:f1:51:ba:5f:a1:5f:bd:aa:
         6a:c2:11:f5:00:67:ee:ef:66:2a:20:23:d6:37:f4:6d:f6:79:
         56:dc:21:27:dc:27:94:b8:8c:90:35:b5:f5:7b:34:83:12:f6:
         59:6f:5e:71:a5:5f:56:ce:18:96:9b:04:0d:18:01:ca:1c:48:
         82:60:4e:5b:b5:62:91:96:00:e5:e5:cc:33:85:0b:a8:8d:e5:
         51:64:0b:70:67:37:f7:47:51:10:f0:be:cc:96:5d:66:28:0d:
         19:31:14:22:67:84:fa:9a:18:11:57:9e:6e:83:98:e5:0a:9a:
         52:f1:88:3c:73:91:35:c6:fc:c6:a3:e9:b3:45:bb:ae:ba:69:
         39:07:59:39:62:63:b4:bc:3c:70:6c:47:1b:c2:e7:07:8f:14:
         69:ba:33:9a:ee:7a:6d:26:e5:13:6c:aa:90:2d:14:e2:ee:34:
         22:c3:4a:94
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVtG0/qHWioMNDnUa+wgDyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWI0YjVhYTA5NTY4YjZiZTA1MzY1MGQ4NzZiM2E5NDlhMTI2NDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukGu3u+UyaT5M4hxvkTdjy1gEcz+
Wp0Zt3W9y3zlGDRTo1p410L07VTM2rAUGRYGQL12iFTvPxlSYRq06V3jbgTLmwZ2
iSaxepwFIi+0DBt6Yi6pOIxqSp5WQ3R/tAQBZwddgSuSrlF24TWAzUh7zb0Yp6sk
XkmBwXE81+yO4KjPHZ7iiS3mBOqMARRP524z8J+BFwX74cST+X88yX/R7dkux/nl
pC00O5mSc934jE22L/+YCU3IdSB5qf+mJibI2/p1EnEcWl/2Z6QNz9DFXR2Nilx6
2GwhWWR2zbOiJmfbwyLuZPEJm8EVAbYguJLZHnY6obL8/n4uCI6unXavVwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNG0taoJVotr4FNlDYdrOpSaEmRSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzEzYTIx
My00Yzk4LTRkOTUtOGYxZC0xMjdkMzhkMDhiMmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMTNhMjEz
LTRjOTgtNGQ5NS04ZjFkLTEyN2QzOGQwOGIyYi8xLzBiUzFxZ2xXaTJ2Z1UyVU5o
MnM2bEpvU1pGSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1BJ7MA0EAgACMAcDBQMqEtwAMA0GCSqGSIb3
DQEBCwUAA4IBAQCn2VDVdQCRIEoExjH7HIzWfC8DHjFGqxYbOGoDb4iDzr320SQq
wDCGJ6CODOFf+PvNFPo3tF5RS50oSAwVxLCutYYF7H8PEdbA1NMWQmILq2HZ8VG6
X6FfvapqwhH1AGfu72YqICPWN/Rt9nlW3CEn3CeUuIyQNbX1ezSDEvZZb15xpV9W
zhiWmwQNGAHKHEiCYE5btWKRlgDl5cwzhQuojeVRZAtwZzf3R1EQ8L7Mll1mKA0Z
MRQiZ4T6mhgRV55ug5jlCppS8Yg8c5E1xvzGo+mzRbuuumk5B1k5YmO0vDxwbEcb
wucHjxRpujOa7nptJuUTbKqQLRTi7jQiw0qU
-----END CERTIFICATE-----