Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3P24cdmbd7RyRSokUSTuAaJTk48.cer
File:                     3P24cdmbd7RyRSokUSTuAaJTk48.cer (raw, json)
Hash identifier:          X9gVavn03Y3kbMK0THDPIicsXlpX4AORX8pFlXdbyTI=
Subject key identifier:   DC:FD:B8:71:D9:9B:77:B4:72:45:2A:24:51:24:EE:01:A2:53:93:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D568843B99745AA5B9C798B06B0C04B79
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/14/DCFDB871D99B77B472452A245124EE01A253938F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/14
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 29 Jan 2024 18:43:07 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 193.163.15.0/24

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 13:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:56:88:43:b9:97:45:aa:5b:9c:79:8b:06:b0:c0:4b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 29 18:43:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=dcfdb871d99b77b472452a245124ee01a253938f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ca:4b:55:7b:f3:5b:e8:37:2b:cb:23:d5:76:
                    73:aa:5a:8e:1a:b4:26:9f:9d:b6:c7:6d:e5:a0:83:
                    e1:60:f5:52:bb:f0:13:79:19:33:d0:77:32:29:98:
                    53:27:ce:52:34:57:d2:a3:92:45:61:fb:3d:62:db:
                    17:7a:38:b9:9d:e1:44:d7:9a:1b:f6:c5:ca:ea:6e:
                    f4:db:83:41:d0:1f:3b:d0:75:e5:22:b4:05:87:37:
                    5e:a7:14:07:c7:e5:91:b0:b5:64:ed:67:a2:28:55:
                    62:7c:5a:12:44:ce:63:ad:65:89:a0:8b:b0:b0:9a:
                    1d:dc:a6:ff:84:fc:8b:b0:f5:92:b1:9c:ff:27:dd:
                    83:56:e2:c6:b6:41:42:64:70:4c:a4:81:c0:05:eb:
                    7f:88:00:59:66:bc:f0:c8:eb:ca:b8:0d:c1:e4:4a:
                    e6:2f:e7:f3:3c:e6:11:92:33:b2:12:02:d5:57:53:
                    93:99:17:a6:5b:a4:36:98:88:a3:5b:e1:b7:e7:2d:
                    dd:21:9f:1a:36:08:7c:b4:77:cc:29:cf:59:6b:c7:
                    44:ca:32:0d:3b:a0:bd:5e:a2:ec:ee:03:ca:39:ee:
                    fc:d4:17:7c:18:51:1d:d5:b7:79:78:5a:06:78:43:
                    a4:89:cb:ad:94:58:22:8a:4a:c2:e2:91:61:e1:ff:
                    4e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FD:B8:71:D9:9B:77:B4:72:45:2A:24:51:24:EE:01:A2:53:93:8F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/14
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/14/DCFDB871D99B77B472452A245124EE01A253938F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:c5:40:80:73:d1:1e:ec:17:a0:e6:eb:31:84:04:6e:3b:
         00:fd:b9:5f:7c:91:64:f9:3e:35:de:e9:69:1c:36:05:68:8e:
         5b:6c:46:cf:6b:62:b8:25:8d:ac:0d:70:60:78:74:ea:4a:a0:
         a0:d9:1f:96:ad:c9:d6:5c:84:af:97:d3:6b:09:59:ca:ff:ba:
         6a:19:3a:93:94:ba:d8:a6:8d:87:4e:24:21:f2:4a:83:8b:92:
         c3:13:a1:81:56:c2:ce:ec:09:b6:bb:70:8e:a0:b8:b4:37:48:
         39:36:7b:d1:b6:b3:f9:6b:b6:92:31:03:eb:07:f6:de:30:42:
         37:a9:ff:56:91:33:fb:fc:78:57:e0:55:d2:9a:78:0b:57:5d:
         fe:70:39:ed:b8:fe:e0:e9:01:32:5a:ad:e4:40:c9:79:ec:03:
         04:a4:e9:77:80:27:60:a9:35:da:4f:c5:6f:18:68:82:77:3b:
         8f:9c:df:cb:30:b3:12:76:42:5f:79:91:2f:42:47:46:d5:30:
         62:9f:10:76:3b:e9:0c:5f:59:c5:bc:c4:83:a7:05:62:c7:6c:
         d5:4c:3b:6e:62:09:44:66:a1:42:9b:3b:eb:73:db:2d:ff:f1:
         b6:9b:2e:8f:fd:6d:5c:6b:f7:b8:65:99:06:1e:01:79:ac:d0:
         22:8d:2b:7a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAY1WiEO5l0WqW5x5iwawwEt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTI5MTg0MzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2ZkYjg3MWQ5OWI3N2I0NzI0NTJhMjQ1MTI0ZWUwMWEyNTM5MzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/MpLVXvzW+g3K8sj1XZzqlqOGrQm
n522x23loIPhYPVSu/ATeRkz0HcyKZhTJ85SNFfSo5JFYfs9YtsXeji5neFE15ob
9sXK6m7024NB0B870HXlIrQFhzdepxQHx+WRsLVk7WeiKFVifFoSRM5jrWWJoIuw
sJod3Kb/hPyLsPWSsZz/J92DVuLGtkFCZHBMpIHABet/iABZZrzwyOvKuA3B5Erm
L+fzPOYRkjOyEgLVV1OTmRemW6Q2mIijW+G35y3dIZ8aNgh8tHfMKc9Za8dEyjIN
O6C9XqLs7gPKOe781Bd8GFEd1bd5eFoGeEOkicutlFgiikrC4pFh4f9OPQIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFNz9uHHZm3e0ckUqJFEk7gGiU5OPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFBBggrBgEFBQcBCwSCATMwggEvMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y5MjM1
MDU1LTE5MDQtNDRiNC05OThiLWZmMWM5ZTMxMWM0OS8xNDCBjQYIKwYBBQUHMAqG
gYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y5
MjM1MDU1LTE5MDQtNDRiNC05OThiLWZmMWM5ZTMxMWM0OS8xNC9EQ0ZEQjg3MUQ5
OUI3N0I0NzI0NTJBMjQ1MTI0RUUwMUEyNTM5MzhGLm1mdDA8BggrBgEFBQcwDYYw
aHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1s
MFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNybDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAwaMPMA0GCSqGSIb3DQEBCwUAA4IBAQBT18VAgHPRHuwXoObrMYQEbjsA/blf
fJFk+T413ulpHDYFaI5bbEbPa2K4JY2sDXBgeHTqSqCg2R+WrcnWXISvl9NrCVnK
/7pqGTqTlLrYpo2HTiQh8kqDi5LDE6GBVsLO7Am2u3COoLi0N0g5NnvRtrP5a7aS
MQPrB/beMEI3qf9WkTP7/HhX4FXSmngLV13+cDntuP7g6QEyWq3kQMl57AMEpOl3
gCdgqTXaT8VvGGiCdzuPnN/LMLMSdkJfeZEvQkdG1TBinxB2O+kMX1nFvMSDpwVi
x2zVTDtuYglEZqFCmzvrc9st//G2my6P/W1ca/e4ZZkGHgF5rNAijSt6
-----END CERTIFICATE-----