Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.cer
File:                     3ZJh_gdUXYk_rbCZlmkfPLB1fVE.cer (raw, json)
Hash identifier:          LVpb7+kaUKPkn8rYKcSFidi+7WQiBxyz7HjUrDs4TC0=
Subject key identifier:   DD:92:61:FE:07:54:5D:89:3F:AD:B0:99:96:69:1F:3C:B0:75:7D:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C3EFB77D1696AEDB4B73407EDF2FD794C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 06 Dec 2023 11:55:16 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.52.1.0/24
                          IP: 2a14:1a80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3e:fb:77:d1:69:6a:ed:b4:b7:34:07:ed:f2:fd:79:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  6 11:55:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd9261fe07545d893fadb09996691f3cb0757d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ab:a4:0c:9f:8d:cd:3a:0a:8e:2a:cc:d6:5c:
                    19:d2:8e:68:0c:33:c9:39:e2:d4:a3:7f:3c:ce:2f:
                    36:94:96:b3:f4:2f:da:02:1b:d5:dd:9f:07:b5:f5:
                    8f:81:a3:78:71:b7:4e:e1:9d:21:bc:43:a2:78:75:
                    c2:0e:dd:d4:ed:5b:86:7a:a0:b1:d3:d1:ac:99:cc:
                    64:7e:89:06:7c:80:22:63:5a:6c:1c:8f:48:91:49:
                    82:f1:3b:2c:0b:74:d9:65:9a:5a:e4:f0:5b:d9:5f:
                    23:db:dc:70:35:6f:84:36:a2:4e:16:5c:76:e1:f7:
                    a7:30:c2:c7:41:21:a0:f4:f3:3c:30:8c:8d:dd:86:
                    93:80:67:1e:79:b8:ea:c2:a7:87:b3:cb:e9:66:2c:
                    47:ca:33:22:a8:bd:12:78:bc:c9:87:49:52:5f:c7:
                    b2:df:e3:e2:2d:fb:c9:5c:19:63:02:a8:67:c9:f9:
                    25:52:1f:7e:07:57:ed:61:16:c1:ab:9c:9c:df:7c:
                    0b:1b:96:f0:3c:2f:e1:91:96:dc:eb:0b:4e:6c:c1:
                    76:5e:d2:37:aa:ba:8f:bf:86:55:72:00:7e:c2:69:
                    37:5c:be:ab:23:c5:21:0f:c5:2b:b7:7f:8a:0f:d4:
                    df:bf:99:73:b4:b1:dd:51:2a:9e:8f:be:c1:6e:11:
                    f5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:92:61:FE:07:54:5D:89:3F:AD:B0:99:96:69:1F:3C:B0:75:7D:51
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.1.0/24
                IPv6:
                  2a14:1a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         9e:8c:a4:38:73:01:d7:19:61:43:2a:ce:37:a3:cd:14:ec:db:
         aa:fb:c5:22:d3:33:ff:a0:19:32:a1:fd:20:6f:35:69:0d:cc:
         e6:8d:53:a8:e4:b0:54:bf:2f:21:02:a3:aa:cc:5d:88:e3:ce:
         c3:b8:c1:90:ee:b4:1c:00:7c:6f:97:a1:c4:8b:d3:fd:83:86:
         ed:bb:83:e7:0c:f4:70:c1:f4:8c:ec:0e:17:87:08:42:29:c5:
         65:4b:21:fa:47:b4:96:b9:0a:a9:34:23:df:f7:b7:b8:08:ef:
         98:69:11:39:54:79:a8:22:f6:dc:99:49:77:6b:00:8f:60:20:
         ed:22:74:fa:f0:af:ae:2b:f6:b1:8f:a2:07:fc:39:1a:34:09:
         11:fd:a9:6d:be:57:28:a1:41:12:f0:33:80:5c:35:b7:0f:43:
         b0:70:bf:7f:bb:d6:8c:fd:0a:e3:54:14:06:fb:08:a4:0c:5f:
         96:b5:43:88:46:17:5b:c2:88:63:31:bd:88:96:8e:67:44:a8:
         37:02:e8:7c:4a:1c:f4:c6:5a:dd:fd:26:23:75:fe:15:40:0d:
         56:48:6b:54:bc:8e:96:2f:48:e5:5d:29:1b:29:46:80:39:6b:
         8e:74:c8:c4:4a:d0:08:6b:79:c0:9b:7b:15:e5:58:61:90:00:
         1c:be:1c:96
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYw++3fRaWrttLc0B+3y/XlMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMjA2MTE1NTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDkyNjFmZTA3NTQ1ZDg5M2ZhZGIwOTk5NjY5MWYzY2IwNzU3ZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aukDJ+NzToKjirM1lwZ0o5oDDPJ
OeLUo388zi82lJaz9C/aAhvV3Z8HtfWPgaN4cbdO4Z0hvEOieHXCDt3U7VuGeqCx
09GsmcxkfokGfIAiY1psHI9IkUmC8TssC3TZZZpa5PBb2V8j29xwNW+ENqJOFlx2
4fenMMLHQSGg9PM8MIyN3YaTgGceebjqwqeHs8vpZixHyjMiqL0SeLzJh0lSX8ey
3+PiLfvJXBljAqhnyfklUh9+B1ftYRbBq5yc33wLG5bwPC/hkZbc6wtObMF2XtI3
qrqPv4ZVcgB+wmk3XL6rI8UhD8Urt3+KD9Tfv5lztLHdUSqej77BbhH1mQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFN2SYf4HVF2JP62wmZZpHzywdX1RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5Lzg2NzU0
OS0yNTg4LTQ1ODktOWZkNC05MDg5YzkyYWMwNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvODY3NTQ5
LTI1ODgtNDU4OS05ZmQ0LTkwODljOTJhYzA0NS8xLzNaSmhfZ2RVWFlrX3JiQ1ps
bWtmUExCMWZWRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1DQBMA0EAgACMAcDBQMqFBqAMA0GCSqGSIb3
DQEBCwUAA4IBAQCejKQ4cwHXGWFDKs43o80U7Nuq+8Ui0zP/oBkyof0gbzVpDczm
jVOo5LBUvy8hAqOqzF2I487DuMGQ7rQcAHxvl6HEi9P9g4btu4PnDPRwwfSM7A4X
hwhCKcVlSyH6R7SWuQqpNCPf97e4CO+YaRE5VHmoIvbcmUl3awCPYCDtInT68K+u
K/axj6IH/DkaNAkR/altvlcooUES8DOAXDW3D0OwcL9/u9aM/QrjVBQG+wikDF+W
tUOIRhdbwohjMb2Ilo5nRKg3Auh8Shz0xlrd/SYjdf4VQA1WSGtUvI6WL0jlXSkb
KUaAOWuOdMjEStAIa3nAm3sV5VhhkAAcvhyW
-----END CERTIFICATE-----