Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0lGnPCqbtvnVyI4LOYiMipXFf4I.cer
File:                     0lGnPCqbtvnVyI4LOYiMipXFf4I.cer (raw, json)
Hash identifier:          OOLpuYtMvuIDRtqmrvM+pVrYg8j9dBUMnRcMsD1iVwo=
Subject key identifier:   D2:51:A7:3C:2A:9B:B6:F9:D5:C8:8E:0B:39:88:8C:8A:95:C5:7F:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185F239410D3F1AE95367417A99F160530D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/0lGnPCqbtvnVyI4LOYiMipXFf4I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 27 Jan 2023 07:55:16 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.23.188.0/24
                          IP: 2a13:9200::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:f2:39:41:0d:3f:1a:e9:53:67:41:7a:99:f1:60:53:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 27 07:55:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d251a73c2a9bb6f9d5c88e0b39888c8a95c57f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:64:30:b3:a7:07:97:f3:a3:03:dd:45:0b:1e:
                    43:64:34:69:0c:d8:fa:87:85:2b:c2:ba:22:71:4c:
                    51:99:1b:66:05:e3:8d:83:2d:b9:d0:37:f9:7a:f3:
                    50:f5:f8:a5:1c:3a:58:0a:b0:f8:63:61:0b:5e:a3:
                    fb:5d:6e:af:b5:22:5f:d5:aa:6c:c0:e5:81:55:c4:
                    8f:bd:11:80:98:d4:ab:ee:a7:97:e3:a1:a5:44:58:
                    15:fb:7a:d5:c0:de:92:8a:25:38:dd:a6:e8:45:13:
                    49:41:df:11:d1:10:4d:c3:83:33:bb:b0:6a:56:d8:
                    2d:41:50:4b:c3:4d:78:38:87:d9:9d:4f:63:55:52:
                    2c:c9:78:8f:b8:e8:ed:3a:83:fb:3e:6e:91:52:82:
                    72:17:84:6f:a3:e0:65:39:f2:c3:6b:07:8c:00:19:
                    52:b7:f3:8b:7a:4d:e9:d5:ad:eb:20:18:e1:f4:35:
                    d7:8b:ff:80:c7:0b:3a:5e:81:41:ff:bc:66:71:8d:
                    f3:3f:27:cd:b2:37:8f:9f:71:30:1e:a7:fc:20:4a:
                    68:b5:de:bb:72:10:eb:62:b0:25:8e:97:df:70:48:
                    b2:6a:f0:5b:5e:dc:7e:4d:46:5e:8d:ac:62:ec:d5:
                    fe:25:c3:9b:0f:cc:22:ae:ff:ce:7f:20:fd:a7:af:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:51:A7:3C:2A:9B:B6:F9:D5:C8:8E:0B:39:88:8C:8A:95:C5:7F:82
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/0lGnPCqbtvnVyI4LOYiMipXFf4I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.23.188.0/24
                IPv6:
                  2a13:9200::/29

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:42:73:d1:14:b9:bd:fd:fc:ba:0e:19:80:d5:65:fc:64:
         17:2a:56:16:de:ca:dc:5f:5f:b9:c8:34:7e:d2:71:54:24:80:
         5a:68:40:30:c2:5c:11:84:be:c6:f5:19:f5:db:3b:37:7c:05:
         12:7a:c8:d3:c9:48:2e:f2:c6:18:d4:b6:96:23:8d:07:1e:1a:
         c4:26:23:d6:2f:7a:42:f7:60:dc:7b:86:bc:9a:13:eb:bf:84:
         46:f1:78:05:fe:0d:e3:48:ae:99:b1:89:ee:e5:75:d7:1a:90:
         8c:1a:44:94:41:4c:32:fa:f0:03:b1:10:d7:9c:d0:4e:ee:cd:
         43:49:9b:0e:69:ba:2e:5e:da:ab:6a:bb:13:13:e5:f9:b6:35:
         ff:d9:d7:56:bc:4f:5f:91:d0:60:9e:73:aa:df:39:d0:60:c1:
         6b:4d:38:9c:e7:b4:45:ff:48:28:55:cb:15:59:e0:d5:5f:4d:
         9c:2f:b9:04:98:ea:fb:2a:5e:e7:89:4c:9a:b4:b8:f0:e2:9d:
         55:6f:77:eb:e4:38:39:e5:f6:e3:af:c1:c0:67:33:86:ec:01:
         0a:6c:9e:4c:70:64:cf:28:e7:0f:d6:0c:ce:7d:a2:9a:76:90:
         8b:69:02:cb:a4:00:f3:ef:10:42:70:8a:67:7b:de:d7:82:8d:
         42:f1:11:d4
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYXyOUENPxrpU2dBepnxYFMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTI3MDc1NTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjUxYTczYzJhOWJiNmY5ZDVjODhlMGIzOTg4OGM4YTk1YzU3ZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWQws6cHl/OjA91FCx5DZDRpDNj6
h4UrwroicUxRmRtmBeONgy250Df5evNQ9filHDpYCrD4Y2ELXqP7XW6vtSJf1aps
wOWBVcSPvRGAmNSr7qeX46GlRFgV+3rVwN6SiiU43aboRRNJQd8R0RBNw4Mzu7Bq
VtgtQVBLw014OIfZnU9jVVIsyXiPuOjtOoP7Pm6RUoJyF4Rvo+BlOfLDaweMABlS
t/OLek3p1a3rIBjh9DXXi/+Axws6XoFB/7xmcY3zPyfNsjePn3EwHqf8IEpotd67
chDrYrAljpffcEiyavBbXtx+TUZejaxi7NX+JcObD8wirv/OfyD9p6+UtwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNJRpzwqm7b51ciOCzmIjIqVxX+CMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2RlMDhh
MS1mMDgzLTQzNDAtYWYzZS1iZmU4MDFhNDVmMWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZGUwOGEx
LWYwODMtNDM0MC1hZjNlLWJmZTgwMWE0NWYxZS8xLzBsR25QQ3FidHZuVnlJNExP
WWlNaXBYRmY0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAshe8MA0EAgACMAcDBQMqE5IAMA0GCSqGSIb3
DQEBCwUAA4IBAQArUEJz0RS5vf38ug4ZgNVl/GQXKlYW3srcX1+5yDR+0nFUJIBa
aEAwwlwRhL7G9Rn12zs3fAUSesjTyUgu8sYY1LaWI40HHhrEJiPWL3pC92Dce4a8
mhPrv4RG8XgF/g3jSK6ZsYnu5XXXGpCMGkSUQUwy+vADsRDXnNBO7s1DSZsOabou
XtqrarsTE+X5tjX/2ddWvE9fkdBgnnOq3znQYMFrTTic57RF/0goVcsVWeDVX02c
L7kEmOr7Kl7niUyatLjw4p1Vb3fr5Dg55fbjr8HAZzOG7AEKbJ5McGTPKOcP1gzO
faKadpCLaQLLpADz7xBCcIpne97Xgo1C8RHU
-----END CERTIFICATE-----