Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2DpeSd2ewPRU54kwJn0NHJMHKOM.cer
File:                     2DpeSd2ewPRU54kwJn0NHJMHKOM.cer (raw, json)
Hash identifier:          tkINx2UiKmBTcIfLCquoydzWGFaif3LCsq9dAjPhT/g=
Subject key identifier:   D8:3A:5E:49:DD:9E:C0:F4:54:E7:89:30:26:7D:0D:1C:93:07:28:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571689C36E854C510D6C9523FDA235910
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/2DpeSd2ewPRU54kwJn0NHJMHKOM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:35:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 94.124.75.0/24
                          IP: 2a11:7d80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:9c:36:e8:54:c5:10:d6:c9:52:3f:da:23:59:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:35:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d83a5e49dd9ec0f454e78930267d0d1c930728e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:7f:4b:2d:0b:96:19:42:c3:c0:11:5b:1b:
                    cc:b9:f4:7a:e0:6f:ec:c7:10:df:68:f2:ba:8e:c4:
                    0f:27:bf:90:b2:70:ce:98:61:64:56:b1:6d:29:31:
                    3e:e9:4f:f0:bd:45:4d:7c:fa:34:23:52:02:c4:3f:
                    0c:83:94:97:e9:4f:e1:a0:eb:2b:2f:f8:55:a2:f8:
                    20:68:e0:fd:97:3e:c5:bf:b3:8b:57:6e:aa:24:7d:
                    16:0d:43:67:b0:43:29:62:12:f5:35:dc:b9:8e:ec:
                    2c:58:f7:02:ca:67:c8:ce:66:b6:83:df:95:c5:4c:
                    35:50:ca:4e:c4:b0:9f:05:a4:82:e5:24:9a:70:62:
                    06:e6:46:8d:09:9c:41:30:c8:0c:a7:04:ec:1c:f2:
                    95:2c:b4:b6:40:19:8b:55:37:d5:1d:f2:48:a4:d0:
                    61:da:05:61:76:17:91:87:1d:d8:98:7e:f3:0c:cf:
                    d8:d4:f9:57:5c:a6:91:de:63:9e:ce:65:a3:5b:45:
                    4e:40:1b:19:95:7e:31:c1:e6:19:d5:12:f0:88:20:
                    1b:da:d2:fa:92:db:c0:44:56:32:ac:10:ea:95:54:
                    97:5c:b2:1c:48:5d:a3:ed:bf:12:c4:be:ca:ad:80:
                    ca:80:08:63:d2:b5:d7:51:2b:ed:4d:0b:c3:19:86:
                    5b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3A:5E:49:DD:9E:C0:F4:54:E7:89:30:26:7D:0D:1C:93:07:28:E3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/2DpeSd2ewPRU54kwJn0NHJMHKOM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.75.0/24
                IPv6:
                  2a11:7d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         ad:97:29:4a:be:c1:e6:18:8e:cc:f9:33:d5:9a:f4:33:ae:0c:
         83:79:36:23:60:01:68:4f:29:46:3e:6f:2f:d0:04:0c:a5:90:
         27:4d:3d:a5:4b:67:7c:63:c4:70:0a:48:f5:04:c8:7f:13:bf:
         b1:de:a1:16:89:b5:fe:a3:6b:a7:02:cc:f8:b3:c4:ae:2c:63:
         a1:4e:50:45:9b:0b:ab:9a:74:f0:f0:58:ff:90:31:90:22:77:
         d6:be:3a:bf:ef:0a:9d:f9:08:0d:a6:8b:6c:bc:2c:0e:32:9c:
         9a:5b:b1:94:79:c9:d8:50:6d:56:a2:e4:52:91:20:db:6b:ee:
         2b:70:22:f2:3c:03:6d:f5:e4:0e:6f:7a:07:24:e3:e9:78:89:
         c8:42:ac:3d:22:7d:88:24:36:e1:8b:37:10:21:74:bd:cc:62:
         fc:4d:b3:7f:df:31:5b:64:13:24:81:48:35:36:80:2c:c1:bf:
         55:48:88:8c:82:80:9b:6f:ea:42:3d:95:60:f4:5e:9a:52:f2:
         7c:93:0c:a2:2c:f5:54:85:98:59:ce:03:ed:0d:27:20:40:07:
         47:e7:8d:90:09:16:42:d6:e0:5a:9e:c9:0f:f9:4c:29:6c:00:
         d8:52:60:20:42:c6:ff:66:b0:67:ee:88:7f:eb:d3:50:bd:a4:
         44:18:93:35
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVxaJw26FTFENbJUj/aI1kQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODNhNWU0OWRkOWVjMGY0NTRlNzg5MzAyNjdkMGQxYzkzMDcyOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWF/Sy0LlhlCw8ARWxvMufR64G/s
xxDfaPK6jsQPJ7+QsnDOmGFkVrFtKTE+6U/wvUVNfPo0I1ICxD8Mg5SX6U/hoOsr
L/hVovggaOD9lz7Fv7OLV26qJH0WDUNnsEMpYhL1Ndy5juwsWPcCymfIzma2g9+V
xUw1UMpOxLCfBaSC5SSacGIG5kaNCZxBMMgMpwTsHPKVLLS2QBmLVTfVHfJIpNBh
2gVhdheRhx3YmH7zDM/Y1PlXXKaR3mOezmWjW0VOQBsZlX4xweYZ1RLwiCAb2tL6
ktvARFYyrBDqlVSXXLIcSF2j7b8SxL7KrYDKgAhj0rXXUSvtTQvDGYZb/QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNg6XkndnsD0VOeJMCZ9DRyTByjjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzL2RmMThj
OS1hZjcwLTQzMGQtYjdmOS03M2M3ZWQyOTM4ODQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvZGYxOGM5
LWFmNzAtNDMwZC1iN2Y5LTczYzdlZDI5Mzg4NC8xLzJEcGVTZDJld1BSVTU0a3dK
bjBOSEpNSEtPTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAXnxLMA0EAgACMAcDBQMqEX2AMA0GCSqGSIb3
DQEBCwUAA4IBAQCtlylKvsHmGI7M+TPVmvQzrgyDeTYjYAFoTylGPm8v0AQMpZAn
TT2lS2d8Y8RwCkj1BMh/E7+x3qEWibX+o2unAsz4s8SuLGOhTlBFmwurmnTw8Fj/
kDGQInfWvjq/7wqd+QgNpotsvCwOMpyaW7GUecnYUG1WouRSkSDba+4rcCLyPANt
9eQOb3oHJOPpeInIQqw9In2IJDbhizcQIXS9zGL8TbN/3zFbZBMkgUg1NoAswb9V
SIiMgoCbb+pCPZVg9F6aUvJ8kwyiLPVUhZhZzgPtDScgQAdH542QCRZC1uBanskP
+UwpbADYUmAgQsb/ZrBn7oh/69NQvaREGJM1
-----END CERTIFICATE-----