Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.cer
File:                     0mdB0x0o04Zd1Tgd-9C-ovZv8yM.cer (raw, json)
Hash identifier:          oPz4bu9effTMF8mplkYF2nODLCWAJkk/vqrxm2OfHLY=
Subject key identifier:   D2:67:41:D3:1D:28:D3:86:5D:D5:38:1D:FB:D0:BE:A2:F6:6F:F3:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BCE6E4A4D1C90AF8905E6CDAF78F02
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:34:09 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 208824
                          IP: 2001:67c:1804::/48

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 07:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:e6:e4:a4:d1:c9:0a:f8:90:5e:6c:da:f7:8f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:34:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d26741d31d28d3865dd5381dfbd0bea2f66ff323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:6a:b3:2e:d3:b0:bd:6c:56:5a:c3:2d:e9:
                    c2:e0:2c:fe:ed:fe:65:fa:09:30:51:17:32:07:79:
                    b1:b6:c0:f1:22:f4:de:78:92:a8:27:56:47:b7:a6:
                    46:44:99:3b:fd:a7:21:01:d7:b5:83:b2:87:2c:21:
                    14:1f:e5:a0:9b:39:5c:a2:61:fa:f3:46:27:c6:8a:
                    76:b7:a7:37:82:a9:94:f3:e7:75:57:44:a1:77:03:
                    cc:6c:da:44:d3:91:04:ab:99:21:d9:c6:a5:83:d3:
                    73:3a:64:7d:de:66:e2:1b:27:a0:d9:d7:85:98:07:
                    52:a7:04:66:e6:81:15:fd:02:d1:44:e4:23:b6:4f:
                    f4:d4:18:88:31:ef:57:d8:ff:87:5d:c6:cd:e9:ef:
                    d9:69:17:25:b6:3a:54:22:0c:69:b3:14:2a:9b:a0:
                    a0:36:bd:43:03:d5:fe:34:4d:64:ae:8b:4f:64:f8:
                    ea:fa:74:24:89:d6:1d:95:09:c2:e7:8b:7f:73:00:
                    97:c8:2c:05:32:7d:93:b3:37:62:99:24:32:b2:71:
                    cd:9f:bc:71:fe:fe:38:95:f4:72:3c:55:6a:4f:f6:
                    4b:ed:ba:36:dc:96:d4:fe:7a:1b:7f:75:8f:0a:87:
                    5e:7d:a9:b9:5f:fa:44:13:96:8a:1f:20:1e:33:f4:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:41:D3:1D:28:D3:86:5D:D5:38:1D:FB:D0:BE:A2:F6:6F:F3:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1804::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208824

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:5f:23:59:6d:67:a1:ef:71:06:84:6e:83:8f:cf:59:d4:
         a0:c3:45:ae:58:3e:b4:c7:94:c5:2e:60:77:eb:37:3c:f6:ff:
         00:94:00:46:2e:db:55:6c:a8:a8:d1:f3:ef:aa:5b:24:8b:e2:
         96:34:9a:ca:de:02:6f:7b:21:8f:b6:02:73:34:a7:c0:36:3b:
         e9:6c:48:61:ae:1a:1f:48:f8:23:e0:06:80:19:89:f1:67:d7:
         9b:cd:6d:25:f9:86:6f:20:51:52:dd:3f:fc:d2:aa:06:d2:1b:
         b8:9b:a9:9b:34:5c:1f:b4:7d:85:31:c7:41:50:ef:a9:d1:a7:
         49:1e:83:fd:f0:ea:91:15:c4:a4:43:f0:ce:84:0e:16:7e:94:
         34:1a:64:cf:89:1d:68:43:b2:fd:a2:10:93:f5:f8:bb:db:8f:
         c6:12:23:48:f8:bb:0e:75:7f:41:32:58:78:e8:f5:c0:60:d4:
         33:28:30:e7:f7:21:d9:e7:fe:ff:ad:3c:69:0f:dd:85:5a:d2:
         0f:1c:c9:b9:82:66:ff:f5:46:b0:bf:a4:28:c1:d7:59:ad:18:
         09:78:f9:ae:7c:c6:46:a3:8a:81:75:6d:30:f5:48:b8:c8:4f:
         83:4b:b3:61:39:91:e4:b4:84:83:29:7c:3d:1c:59:c0:05:d8:
         79:40:0e:8e
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzJvObkpNHJCviQXmza948CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzNDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjY3NDFkMzFkMjhkMzg2NWRkNTM4MWRmYmQwYmVhMmY2NmZmMzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+5qsy7TsL1sVlrDLenC4Cz+7f5l
+gkwURcyB3mxtsDxIvTeeJKoJ1ZHt6ZGRJk7/achAde1g7KHLCEUH+WgmzlcomH6
80Ynxop2t6c3gqmU8+d1V0ShdwPMbNpE05EEq5kh2calg9NzOmR93mbiGyeg2deF
mAdSpwRm5oEV/QLRROQjtk/01BiIMe9X2P+HXcbN6e/ZaRcltjpUIgxpsxQqm6Cg
Nr1DA9X+NE1krotPZPjq+nQkidYdlQnC54t/cwCXyCwFMn2TszdimSQysnHNn7xx
/v44lfRyPFVqT/ZL7bo23JbU/nobf3WPCodefam5X/pEE5aKHyAeM/SdQQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFNJnQdMdKNOGXdU4HfvQvqL2b/MjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5LzBhNTFi
Ny02YjVlLTQyMWEtYmRlMi1jM2RhNThiNGVjNGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvMGE1MWI3
LTZiNWUtNDIxYS1iZGUyLWMzZGE1OGI0ZWM0ZC8xLzBtZEIweDBvMDRaZDFUZ2Qt
OUMtb3Zadjh5TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBgEMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMvuDANBgkqhkiG9w0BAQsFAAOCAQEAWzJfI1ltZ6HvcQaEboOPz1nUoMNF
rlg+tMeUxS5gd+s3PPb/AJQARi7bVWyoqNHz76pbJIviljSayt4Cb3shj7YCczSn
wDY76WxIYa4aH0j4I+AGgBmJ8WfXm81tJfmGbyBRUt0//NKqBtIbuJupmzRcH7R9
hTHHQVDvqdGnSR6D/fDqkRXEpEPwzoQOFn6UNBpkz4kdaEOy/aIQk/X4u9uPxhIj
SPi7DnV/QTJYeOj1wGDUMygw5/ch2ef+/608aQ/dhVrSDxzJuYJm//VGsL+kKMHX
Wa0YCXj5rnzGRqOKgXVtMPVIuMhPg0uzYTmR5LSEgyl8PRxZwAXYeUAOjg==
-----END CERTIFICATE-----