Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1xq5Vz7fhxcsxNYb3PBICCbyE8w.cer
File:                     1xq5Vz7fhxcsxNYb3PBICCbyE8w.cer (raw, json)
Hash identifier:          wdPaDglXok3kTSdE8GAN6dtOU5zcWJ38wDetFuwZFuY=
Subject key identifier:   D7:1A:B9:57:3E:DF:87:17:2C:C4:D6:1B:DC:F0:48:08:26:F2:13:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E656320DEF620B2CDFA3F3996102280
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/1xq5Vz7fhxcsxNYb3PBICCbyE8w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.212.136.0/24
                          IP: 2a12:2280::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:63:20:de:f6:20:b2:cd:fa:3f:39:96:10:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d71ab9573edf87172cc4d61bdcf0480826f213cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:59:24:e4:f7:48:35:7f:6b:bb:a9:ff:73:
                    96:2f:a5:2d:b2:cc:4d:71:39:3e:4b:20:48:bc:42:
                    70:b6:37:4f:4d:2b:8e:8b:b2:72:de:70:d3:f3:a8:
                    89:41:4d:58:04:bb:86:c1:26:de:47:b5:0d:db:37:
                    22:e3:81:8d:76:c2:fa:cd:07:1c:2a:42:5d:5a:2c:
                    57:b4:07:82:b3:ef:fc:14:4d:0e:5d:1b:a4:57:bb:
                    63:a6:44:c3:59:53:be:2a:41:ca:d1:4c:33:e1:75:
                    c9:04:40:88:26:e9:8a:9f:4a:e0:d1:7b:52:85:39:
                    a2:7b:8f:3a:7f:44:ee:d8:53:57:81:5a:26:d9:1d:
                    60:66:17:b4:cf:d9:bc:39:94:69:8c:ca:32:5d:2d:
                    f4:2a:ca:eb:9c:62:94:9e:66:c2:d4:0f:1e:c5:26:
                    1b:f5:82:ff:c7:ef:51:1e:db:a5:32:db:b3:bf:a9:
                    7a:af:88:19:57:e0:40:b7:de:07:60:25:9f:b9:9d:
                    2f:3b:23:01:c6:02:e2:5c:81:e5:ba:4f:52:97:4f:
                    ee:42:89:04:af:61:3b:ed:a0:2d:ef:17:28:46:c0:
                    de:eb:97:5a:a6:da:56:0c:e0:e3:4a:63:3f:f0:18:
                    18:a7:15:31:7b:62:cf:3a:62:0a:de:93:27:67:4a:
                    62:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1A:B9:57:3E:DF:87:17:2C:C4:D6:1B:DC:F0:48:08:26:F2:13:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/1xq5Vz7fhxcsxNYb3PBICCbyE8w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.136.0/24
                IPv6:
                  2a12:2280::/29

    Signature Algorithm: sha256WithRSAEncryption
         06:05:49:88:88:9e:b7:d0:04:cb:ae:65:a9:90:34:a3:8e:9b:
         41:46:ea:8c:5b:0b:15:3f:fb:3b:b2:d2:b2:57:dc:d2:4c:6a:
         53:2b:4f:b2:2e:59:47:f7:85:52:94:a6:2a:db:13:81:c5:6f:
         ce:44:b8:dc:9b:db:fe:57:65:30:a0:ba:a7:df:ba:40:2b:4c:
         db:8e:f9:1e:c2:68:60:a9:a3:0e:f0:85:5f:08:c8:02:f1:f0:
         f0:6f:6f:7a:26:66:09:5b:13:a8:54:c4:a4:11:2f:ce:a4:44:
         36:7a:72:2c:4f:ed:45:57:ca:92:c7:d9:d1:67:1e:71:26:ff:
         11:c4:47:e9:31:bf:b5:a4:db:4b:b6:fd:17:0b:9d:47:06:b6:
         ea:73:b3:2c:68:73:f4:51:7b:18:7e:81:d5:87:5d:b1:fc:cc:
         06:e3:32:2d:63:b8:c0:55:df:31:15:7e:a4:4b:46:71:97:da:
         d4:0e:bc:fe:6d:1a:ee:b8:29:16:52:bd:d3:56:ee:78:34:16:
         36:09:b9:66:58:dc:48:02:38:c8:e3:31:32:1a:e9:4f:02:67:
         62:61:0c:9f:fc:93:8f:f0:40:8f:0c:2d:e9:a9:1e:ba:5e:41:
         0a:b2:d9:0f:01:b3:81:26:ba:66:57:a2:6c:bb:92:fe:b8:28:
         14:7d:10:ff
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVuZWMg3vYgss36PzmWECKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTczMzM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzFhYjk1NzNlZGY4NzE3MmNjNGQ2MWJkY2YwNDgwODI2ZjIxM2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRdZJOT3SDV/a7up/3OWL6UtssxN
cTk+SyBIvEJwtjdPTSuOi7Jy3nDT86iJQU1YBLuGwSbeR7UN2zci44GNdsL6zQcc
KkJdWixXtAeCs+/8FE0OXRukV7tjpkTDWVO+KkHK0Uwz4XXJBECIJumKn0rg0XtS
hTmie486f0Tu2FNXgVom2R1gZhe0z9m8OZRpjMoyXS30KsrrnGKUnmbC1A8exSYb
9YL/x+9RHtulMtuzv6l6r4gZV+BAt94HYCWfuZ0vOyMBxgLiXIHluk9Sl0/uQokE
r2E77aAt7xcoRsDe65daptpWDODjSmM/8BgYpxUxe2LPOmIK3pMnZ0piuwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNcauVc+34cXLMTWG9zwSAgm8hPMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4Lzc0N2Q3
NS1lNGM5LTQxZmYtYWU4Yi01NTAyMjQ0Zjc2NGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvNzQ3ZDc1
LWU0YzktNDFmZi1hZThiLTU1MDIyNDRmNzY0Yy8xLzF4cTVWejdmaHhjc3hOWWIz
UEJJQ0NieUU4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAstSIMA0EAgACMAcDBQMqEiKAMA0GCSqGSIb3
DQEBCwUAA4IBAQAGBUmIiJ630ATLrmWpkDSjjptBRuqMWwsVP/s7stKyV9zSTGpT
K0+yLllH94VSlKYq2xOBxW/ORLjcm9v+V2UwoLqn37pAK0zbjvkewmhgqaMO8IVf
CMgC8fDwb296JmYJWxOoVMSkES/OpEQ2enIsT+1FV8qSx9nRZx5xJv8RxEfpMb+1
pNtLtv0XC51HBrbqc7MsaHP0UXsYfoHVh12x/MwG4zItY7jAVd8xFX6kS0Zxl9rU
Drz+bRruuCkWUr3TVu54NBY2CblmWNxIAjjI4zEyGulPAmdiYQyf/JOP8ECPDC3p
qR66XkEKstkPAbOBJrpmV6Jsu5L+uCgUfRD/
-----END CERTIFICATE-----