Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24EOw-83uELK1WE41U25eo9rdqg.cer
File:                     24EOw-83uELK1WE41U25eo9rdqg.cer (raw, json)
Hash identifier:          8x2Vag83EMAIfFG2eIvM0lEHUR6yTEcvuXPQ2O4lD2s=
Subject key identifier:   DB:81:0E:C3:EF:37:B8:42:CA:D5:61:38:D5:4D:B9:7A:8F:6B:76:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701E34ACD5E1182B3EA0D077E34F17DA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/24EOw-83uELK1WE41U25eo9rdqg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:35:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 79.110.234.0/24
                          IP: 2a12:2700::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:34:ac:d5:e1:18:2b:3e:a0:d0:77:e3:4f:17:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:35:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=db810ec3ef37b842cad56138d54db97a8f6b76a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e0:0e:16:52:ac:b7:8a:5b:fd:d9:6c:ce:8d:
                    2e:5f:eb:20:74:e5:51:fc:8a:ea:bf:6e:7a:ff:3b:
                    0b:39:34:27:0f:63:04:49:4f:32:0b:11:fa:48:c5:
                    d6:44:d9:8d:d1:d2:0d:e3:6d:c8:b1:9b:cc:09:30:
                    7e:58:b6:9e:d3:4b:fe:11:40:be:ff:9e:84:26:8f:
                    f7:ce:94:f8:f0:6a:3e:c8:95:75:93:2c:fd:02:a0:
                    4d:09:0c:1b:84:c3:0d:2e:59:86:c5:74:c4:d3:fa:
                    f9:52:d8:ec:bc:f1:66:b4:30:3b:4e:ed:c9:d3:c4:
                    6e:d4:1a:78:0b:cc:33:d3:88:ca:8c:24:20:4e:71:
                    01:bb:4e:67:60:6c:39:f5:4e:3b:ff:bb:14:f6:4d:
                    d4:4f:43:e9:f3:b0:70:03:cf:0d:96:00:5b:65:60:
                    0b:f1:ae:e7:62:61:d1:16:64:1a:88:1a:f0:95:dd:
                    8b:d7:75:1a:b5:c1:b8:23:b1:96:06:08:8a:5d:84:
                    10:c0:7a:23:3f:9d:32:ef:36:60:db:e7:0f:42:50:
                    50:3b:e6:18:bb:17:b9:ca:0a:4b:e8:00:c2:ca:38:
                    bc:66:f4:66:e7:b7:0f:74:0d:de:d3:e3:e5:46:43:
                    a3:33:a0:6f:60:5b:99:33:40:67:df:4e:f4:76:16:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:81:0E:C3:EF:37:B8:42:CA:D5:61:38:D5:4D:B9:7A:8F:6B:76:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/24EOw-83uELK1WE41U25eo9rdqg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.234.0/24
                IPv6:
                  2a12:2700::/29

    Signature Algorithm: sha256WithRSAEncryption
         01:7a:af:38:3c:ad:03:9a:80:31:1b:e0:bc:af:84:f1:fc:ce:
         3d:2d:78:43:66:a6:5c:ce:ab:a3:ec:ee:22:1e:37:a2:6f:34:
         d7:c7:8b:12:c9:0f:93:01:8f:37:22:61:01:e8:09:14:8b:d2:
         20:e3:bc:15:99:c3:82:b7:6c:77:ed:e3:a0:21:5a:f1:b4:24:
         9a:c6:c2:bc:fe:22:d6:f9:41:c9:95:c7:3f:03:2a:f2:1e:0a:
         df:06:49:91:65:86:96:39:d4:18:22:d8:fa:b9:be:a9:a1:bc:
         4e:2e:a2:34:4f:27:3e:87:e8:ba:01:9a:af:76:a2:66:f5:ca:
         4c:9c:be:d8:70:a2:5e:8c:3a:90:ff:79:7e:e8:8a:9c:f7:8b:
         78:12:c6:50:4f:8e:4a:17:85:08:bd:65:a0:66:b0:25:f9:f2:
         2d:3d:e6:81:cd:af:df:2c:ca:ce:b0:1b:e4:df:49:6a:61:80:
         89:75:81:ca:df:37:15:7e:8a:fb:03:6c:0a:03:96:68:79:a0:
         29:10:f0:fb:bb:2c:f5:11:3c:b0:6c:e3:36:14:95:e8:99:a2:
         3a:dc:cb:85:fd:f9:05:b2:40:75:56:a4:6e:7e:91:fc:14:96:
         34:ee:f2:a0:0c:da:8a:a4:49:c9:67:4d:e1:b5:b4:97:18:57:
         0b:5c:28:3a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVwHjSs1eEYKz6g0HfjTxfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDEzNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjgxMGVjM2VmMzdiODQyY2FkNTYxMzhkNTRkYjk3YThmNmI3NmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeAOFlKst4pb/dlszo0uX+sgdOVR
/Irqv256/zsLOTQnD2MESU8yCxH6SMXWRNmN0dIN423IsZvMCTB+WLae00v+EUC+
/56EJo/3zpT48Go+yJV1kyz9AqBNCQwbhMMNLlmGxXTE0/r5UtjsvPFmtDA7Tu3J
08Ru1Bp4C8wz04jKjCQgTnEBu05nYGw59U47/7sU9k3UT0Pp87BwA88NlgBbZWAL
8a7nYmHRFmQaiBrwld2L13UatcG4I7GWBgiKXYQQwHojP50y7zZg2+cPQlBQO+YY
uxe5ygpL6ADCyji8ZvRm57cPdA3e0+PlRkOjM6BvYFuZM0Bn3070dhYreQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNuBDsPvN7hCytVhONVNuXqPa3aoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzI0ZDQ1
OC04Zjc3LTQzZDctODVjNS0xYTlkNzBlZDI4NDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvMjRkNDU4
LThmNzctNDNkNy04NWM1LTFhOWQ3MGVkMjg0Ny8xLzI0RU93LTgzdUVMSzFXRTQx
VTI1ZW85cmRxZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAT27qMA0EAgACMAcDBQMqEicAMA0GCSqGSIb3
DQEBCwUAA4IBAQABeq84PK0DmoAxG+C8r4Tx/M49LXhDZqZczquj7O4iHjeibzTX
x4sSyQ+TAY83ImEB6AkUi9Ig47wVmcOCt2x37eOgIVrxtCSaxsK8/iLW+UHJlcc/
AyryHgrfBkmRZYaWOdQYItj6ub6pobxOLqI0Tyc+h+i6AZqvdqJm9cpMnL7YcKJe
jDqQ/3l+6Iqc94t4EsZQT45KF4UIvWWgZrAl+fItPeaBza/fLMrOsBvk30lqYYCJ
dYHK3zcVfor7A2wKA5ZoeaApEPD7uyz1ETywbOM2FJXomaI63MuF/fkFskB1VqRu
fpH8FJY07vKgDNqKpEnJZ03htbSXGFcLXCg6
-----END CERTIFICATE-----