Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-bOTc3G4mQjfzuieQSxeSzSvPsA.cer
File:                     1-bOTc3G4mQjfzuieQSxeSzSvPsA.cer (raw, json)
Hash identifier:          AD9/p+x2glsn9N3+KuV7D6iJMWn+2+67LjytP94MHeQ=
Subject key identifier:   F9:B3:93:73:71:B8:99:08:DF:CE:E8:9E:41:2C:5E:4B:34:AF:3E:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D546FB86D6AEFD499C6E71401B853E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/1-bOTc3G4mQjfzuieQSxeSzSvPsA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:34:40 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.171.0/24
                          IP: 2a12:dd00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d5:46:fb:86:d6:ae:fd:49:9c:6e:71:40:1b:85:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:34:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9b3937371b89908dfcee89e412c5e4b34af3ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:c4:b7:3b:44:1a:cc:53:d2:9f:96:f5:f0:
                    6c:a9:d7:a7:98:ee:63:00:de:f9:5b:e8:d0:c4:86:
                    fd:2c:97:12:b0:16:4d:68:e9:05:84:5a:06:91:6d:
                    a7:b6:91:19:16:27:38:66:a8:5f:3f:26:af:4b:6b:
                    64:18:d0:28:e1:de:97:71:0d:5a:23:d6:b3:78:c7:
                    64:93:2c:d7:43:21:75:fa:95:e7:07:89:f8:2a:2b:
                    07:90:74:3b:6c:b4:fe:b4:fa:ad:47:18:ba:c8:0e:
                    22:23:b3:2f:f1:f2:90:24:26:a2:15:9a:2e:00:49:
                    50:7d:8f:5f:73:d8:7f:a5:92:fe:16:3e:32:06:d9:
                    3b:68:f5:58:c2:01:87:c1:f5:1c:aa:83:38:b6:58:
                    c9:b4:35:7a:14:4c:21:97:00:57:c4:80:44:7b:95:
                    db:3e:29:bf:8b:22:0b:2a:63:fe:f2:18:0e:cf:5d:
                    a3:59:a4:7e:94:5a:44:f2:40:d3:2f:be:ed:d7:65:
                    1e:30:7e:32:d3:e6:27:75:15:4a:5f:7b:6f:ce:d8:
                    17:4b:44:2b:c0:fd:b1:b2:42:38:b0:b1:2e:52:40:
                    53:ee:d4:50:31:45:09:88:f2:85:5f:2c:25:3e:dd:
                    a9:6d:d6:5e:1b:35:1f:f6:78:25:e7:48:29:3e:b5:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B3:93:73:71:B8:99:08:DF:CE:E8:9E:41:2C:5E:4B:34:AF:3E:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/1-bOTc3G4mQjfzuieQSxeSzSvPsA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.171.0/24
                IPv6:
                  2a12:dd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         7c:4f:68:dc:6b:03:b6:38:9e:ba:29:26:53:b0:1c:05:da:c8:
         fe:78:2e:9f:ab:f0:7e:8a:be:46:95:9d:c0:c0:e6:5f:b5:59:
         e4:9f:15:ee:81:88:14:65:34:0e:dc:cc:f9:27:b2:f0:c6:56:
         52:13:61:69:13:ba:68:1e:d9:be:27:c5:59:0e:d4:b5:c8:0a:
         f8:8c:7b:09:81:0b:00:19:0c:d0:57:4b:c2:97:e5:7a:1b:9d:
         68:8d:69:72:8b:00:57:e5:f5:a3:fb:57:ac:4b:3a:a4:80:d2:
         d2:67:ee:8c:1f:14:48:a3:d9:b1:50:0b:d0:fb:f5:99:9f:da:
         02:27:81:37:d2:e3:0d:70:29:42:d3:f3:90:9d:97:1a:6b:ee:
         ed:bc:33:1e:6d:5e:86:1d:f5:3a:e8:a5:25:8d:66:0c:74:ce:
         ee:3b:05:80:9b:e7:2b:14:a4:15:b4:e4:ee:f0:10:32:f4:e2:
         6d:d6:2b:6c:fc:a0:8d:83:d5:58:16:e0:45:21:c1:42:f8:59:
         5c:24:bb:56:27:0d:05:f3:28:5b:64:97:f9:77:43:d5:94:04:
         d7:0d:85:38:be:0a:64:f3:05:93:ab:3f:8c:0c:72:ac:d2:d1:
         25:ae:99:2d:31:d4:bb:06:07:62:2a:13:9b:ea:d2:4c:c0:91:
         5c:17:c8:30
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAYVx1Ub7htau/UmcbnFAG4U+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWIzOTM3MzcxYjg5OTA4ZGZjZWU4OWU0MTJjNWU0YjM0YWYzZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB7EtztEGsxT0p+W9fBsqdenmO5j
AN75W+jQxIb9LJcSsBZNaOkFhFoGkW2ntpEZFic4ZqhfPyavS2tkGNAo4d6XcQ1a
I9azeMdkkyzXQyF1+pXnB4n4KisHkHQ7bLT+tPqtRxi6yA4iI7Mv8fKQJCaiFZou
AElQfY9fc9h/pZL+Fj4yBtk7aPVYwgGHwfUcqoM4tljJtDV6FEwhlwBXxIBEe5Xb
Pim/iyILKmP+8hgOz12jWaR+lFpE8kDTL77t12UeMH4y0+YndRVKX3tvztgXS0Qr
wP2xskI4sLEuUkBT7tRQMUUJiPKFXywlPt2pbdZeGzUf9ngl50gpPrWOoQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFPmzk3NxuJkI387onkEsXks0rz7AMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2M1M2I3
OS05N2QwLTQ4Y2ItOGE5Yi00MjM0ZTZhOTVkNGEvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYzUzYjc5
LTk3ZDAtNDhjYi04YTliLTQyMzRlNmE5NWQ0YS8xLzEtYk9UYzNHNG1RamZ6dWll
UVN4ZVN6U3ZQc0EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEAJITqzANBAIAAjAHAwUDKhLdADANBgkqhkiG
9w0BAQsFAAOCAQEAfE9o3GsDtjieuikmU7AcBdrI/ngun6vwfoq+RpWdwMDmX7VZ
5J8V7oGIFGU0DtzM+Sey8MZWUhNhaRO6aB7ZvifFWQ7UtcgK+Ix7CYELABkM0FdL
wpflehudaI1pcosAV+X1o/tXrEs6pIDS0mfujB8USKPZsVAL0Pv1mZ/aAieBN9Lj
DXApQtPzkJ2XGmvu7bwzHm1ehh31OuilJY1mDHTO7jsFgJvnKxSkFbTk7vAQMvTi
bdYrbPygjYPVWBbgRSHBQvhZXCS7VicNBfMoW2SX+XdD1ZQE1w2FOL4KZPMFk6s/
jAxyrNLRJa6ZLTHUuwYHYioTm+rSTMCRXBfIMA==
-----END CERTIFICATE-----