Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3vyqvaaHMKLO08wQOzyAiuLqIcQ.cer
File:                     3vyqvaaHMKLO08wQOzyAiuLqIcQ.cer (raw, json)
Hash identifier:          ORCvfMB6QFkCitJ0009l/em2xmiogNn3GPaAhB1Laxs=
Subject key identifier:   DE:FC:AA:BD:A6:87:30:A2:CE:D3:CC:10:3B:3C:80:8A:E2:EA:21:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FB10BDE775AF1801DAD4EA32555BB6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/377d70-c05f-4ff6-851a-558acf3501a6/1/3vyqvaaHMKLO08wQOzyAiuLqIcQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/377d70-c05f-4ff6-851a-558acf3501a6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2001:678:258::/48

Validation:               Failed, certificate revoked on Tue 24 Jan 2023 13:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:10:bd:e7:75:af:18:01:da:d4:ea:32:55:5b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=defcaabda68730a2ced3cc103b3c808ae2ea21c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:6d:e8:25:a4:a7:8b:94:94:33:8b:9c:97:
                    10:95:66:27:0b:28:e5:be:4d:ca:95:c9:9d:ba:4e:
                    42:88:84:13:73:fe:9a:56:1c:a6:48:a9:b3:f1:f8:
                    1b:bc:3b:09:6f:5e:84:49:a5:b3:9f:6a:60:e0:4b:
                    fb:5b:58:0c:13:a9:64:45:18:70:4c:e5:a9:c0:7f:
                    17:4c:15:36:5f:7f:6f:05:12:56:3f:f2:39:d1:75:
                    76:c5:d7:e8:15:d3:29:6a:43:a5:20:55:fb:a9:f4:
                    bf:1d:61:1f:dc:90:22:47:d9:4d:c5:6b:38:29:18:
                    35:c1:eb:a9:dc:fb:af:bd:64:38:2a:25:5b:a8:16:
                    5c:70:27:15:a3:dd:d7:3c:ce:dc:4b:bd:0e:b1:21:
                    e2:fc:0e:7f:11:ad:99:2f:bf:51:d9:95:78:c5:b2:
                    09:1a:31:06:1e:68:6a:a5:83:48:1d:fd:0f:40:82:
                    b6:3c:4d:a5:c7:0b:ca:ad:bf:07:55:d2:47:39:80:
                    bc:5b:78:2a:aa:df:c1:bd:77:f3:f1:b2:2d:19:47:
                    d4:49:0a:9b:f8:a5:72:ed:1b:54:47:fc:bb:81:66:
                    0f:49:a5:15:7a:92:9f:e2:55:3b:11:4b:a4:cd:72:
                    e3:30:a3:27:fd:5e:ff:46:2f:17:37:03:a0:25:e2:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FC:AA:BD:A6:87:30:A2:CE:D3:CC:10:3B:3C:80:8A:E2:EA:21:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/377d70-c05f-4ff6-851a-558acf3501a6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/377d70-c05f-4ff6-851a-558acf3501a6/1/3vyqvaaHMKLO08wQOzyAiuLqIcQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:258::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:74:82:4d:49:f1:d3:a4:da:7c:e3:37:ed:ba:a2:0f:61:8b:
         76:fd:1c:8c:c7:53:bc:1d:03:01:8a:71:b5:11:b5:23:06:d9:
         e2:e7:f4:86:cf:91:9b:c9:8c:0f:2c:0a:bd:35:8a:b7:8d:82:
         08:bf:cf:4f:a7:79:d0:f3:7c:9d:da:d5:f4:cb:71:6f:50:d3:
         33:25:31:6e:68:8f:b9:a3:23:54:32:79:4c:1e:a8:92:e7:ed:
         11:d7:9b:79:d6:43:48:b8:3b:91:68:d9:70:28:22:95:33:1a:
         e4:86:cd:a8:45:b5:9b:15:69:ee:6b:54:de:12:ff:f3:e6:07:
         28:2d:a5:da:ba:da:9a:66:a9:c4:e1:03:46:95:c4:43:87:5f:
         80:15:a9:ae:52:e8:c0:38:39:92:a3:fc:d3:e3:ea:fe:71:e7:
         89:42:49:a8:06:a3:8b:0a:f5:38:cd:e6:01:1c:86:a2:83:0c:
         98:dd:3b:8b:cf:0e:31:fb:3b:12:3a:c5:72:48:75:8d:df:44:
         03:cf:14:71:ef:86:8c:74:6a:e6:2a:e9:15:1f:fd:64:5f:fb:
         c3:82:24:59:08:38:35:7c:fc:9b:88:0c:ea:c4:cd:1c:e1:b9:
         98:4b:a3:3f:da:08:51:2c:b4:7d:42:3d:60:6b:65:a4:a0:e5:
         c8:7e:ca:d5
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAYVw+xC953WvGAHa1OoyVVu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNjIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWZjYWFiZGE2ODczMGEyY2VkM2NjMTAzYjNjODA4YWUyZWEyMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu35t6CWkp4uUlDOLnJcQlWYnCyjl
vk3Klcmduk5CiIQTc/6aVhymSKmz8fgbvDsJb16ESaWzn2pg4Ev7W1gME6lkRRhw
TOWpwH8XTBU2X39vBRJWP/I50XV2xdfoFdMpakOlIFX7qfS/HWEf3JAiR9lNxWs4
KRg1weup3PuvvWQ4KiVbqBZccCcVo93XPM7cS70OsSHi/A5/Ea2ZL79R2ZV4xbIJ
GjEGHmhqpYNIHf0PQIK2PE2lxwvKrb8HVdJHOYC8W3gqqt/BvXfz8bItGUfUSQqb
+KVy7RtUR/y7gWYPSaUVepKf4lU7EUukzXLjMKMn/V7/Ri8XNwOgJeIK2QIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFN78qr2mhzCiztPMEDs8gIri6iHEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzM3N2Q3
MC1jMDVmLTRmZjYtODUxYS01NThhY2YzNTAxYTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvMzc3ZDcw
LWMwNWYtNGZmNi04NTFhLTU1OGFjZjM1MDFhNi8xLzN2eXF2YWFITUtMTzA4d1FP
enlBaXVMcUljUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAJYMA0GCSqGSIb3DQEBCwUAA4IBAQCk
dIJNSfHTpNp84zftuqIPYYt2/RyMx1O8HQMBinG1EbUjBtni5/SGz5GbyYwPLAq9
NYq3jYIIv89Pp3nQ83yd2tX0y3FvUNMzJTFuaI+5oyNUMnlMHqiS5+0R15t51kNI
uDuRaNlwKCKVMxrkhs2oRbWbFWnua1TeEv/z5gcoLaXautqaZqnE4QNGlcRDh1+A
FamuUujAODmSo/zT4+r+ceeJQkmoBqOLCvU4zeYBHIaigwyY3TuLzw4x+zsSOsVy
SHWN30QDzxRx74aMdGrmKukVH/1kX/vDgiRZCDg1fPybiAzqxM0c4bmYS6M/2ghR
LLR9Qj1ga2WkoOXIfsrV
-----END CERTIFICATE-----