Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3zJySYNf7hZ7GDSw53wSwYHYXfc.cer
File:                     3zJySYNf7hZ7GDSw53wSwYHYXfc.cer (raw, json)
Hash identifier:          7GeAJ6aVlkVUDR88kb4J1BK8Wu9h/9czzYqKAP+kqFc=
Subject key identifier:   DF:32:72:49:83:5F:EE:16:7B:18:34:B0:E7:7C:12:C1:81:D8:5D:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC500E196B64917B89B5E14A23BA36FA1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/82040e-2a2a-487f-857b-a2bb8f5ef85d/1/3zJySYNf7hZ7GDSw53wSwYHYXfc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/82040e-2a2a-487f-857b-a2bb8f5ef85d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:30:18 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 46.182.56.0/21
                          IP: 185.42.152.0/22
                          IP: 2a02:29c8::/32

Validation:               Failed, certificate revoked on Wed 28 Feb 2024 12:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:e1:96:b6:49:17:b8:9b:5e:14:a2:3b:a3:6f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:30:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=df327249835fee167b1834b0e77c12c181d85df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:bb:11:b6:c5:3b:a1:e3:99:70:8a:3d:d2:
                    17:35:9a:a4:28:f9:0e:5a:b0:e1:be:33:38:29:f1:
                    3a:50:b2:1c:97:8f:94:fe:be:97:06:ae:00:ea:f7:
                    99:d7:89:2e:4e:b8:57:ba:6e:14:66:4e:af:df:50:
                    42:6b:f9:47:d6:8d:e8:92:80:01:4a:19:c9:77:22:
                    07:cd:32:5b:c1:26:17:14:db:4f:7d:02:f1:e8:ac:
                    8a:58:14:35:b2:0f:29:7c:f9:25:09:c4:dc:11:f7:
                    e0:cc:e0:ab:f8:cc:92:d4:e7:54:00:0c:6e:91:06:
                    ab:98:89:93:0b:a4:10:ec:99:67:7f:32:f8:8e:b8:
                    6f:f2:a8:f4:cc:62:75:9f:0f:09:78:ac:29:f8:fe:
                    e3:9e:00:8d:ec:7a:b0:c5:91:b4:2d:a5:46:f4:94:
                    c5:24:90:bb:57:41:b8:aa:95:21:e4:3b:ec:d4:5c:
                    57:9f:98:3e:fb:37:8f:ec:73:1f:15:e8:2c:1c:65:
                    51:73:0d:40:a1:bf:ea:4d:69:45:13:a5:ff:bb:91:
                    58:01:3d:f5:e9:b7:f5:6f:53:ec:c5:0a:70:bd:a4:
                    6c:d3:51:75:dd:82:bc:b7:68:63:d6:fc:5d:4a:8d:
                    be:9f:1a:4a:d6:dd:81:09:c1:d6:0e:ec:d8:75:a0:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:32:72:49:83:5F:EE:16:7B:18:34:B0:E7:7C:12:C1:81:D8:5D:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/82040e-2a2a-487f-857b-a2bb8f5ef85d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/82040e-2a2a-487f-857b-a2bb8f5ef85d/1/3zJySYNf7hZ7GDSw53wSwYHYXfc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.182.56.0/21
                  185.42.152.0/22
                IPv6:
                  2a02:29c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:0a:0e:f0:4b:3f:a6:42:ab:ee:8e:52:91:d8:0e:d7:22:c7:
         e6:86:1c:d0:40:86:6c:54:2d:83:92:e3:c8:2f:d5:c6:da:8e:
         57:7e:57:c9:63:92:ba:7a:3c:dd:e2:ce:3b:81:f6:f6:66:29:
         d3:dc:e4:54:7b:1f:50:1b:54:7e:4d:b6:11:04:6c:44:7b:21:
         fa:ef:0a:2b:aa:14:90:e2:a5:ae:b0:39:82:0a:c3:b2:3e:af:
         fe:6c:6f:bf:d4:9f:af:cf:34:1b:40:96:0c:4a:1c:38:f2:86:
         67:71:64:c6:29:7c:bf:ea:0a:21:32:6b:8a:55:f8:ab:00:fd:
         c6:a9:a1:4e:5e:cf:03:06:3e:2d:f8:a3:c5:dd:56:6d:a3:c8:
         23:34:37:bd:40:a2:fe:eb:61:e0:c4:df:a0:9a:85:0d:f5:66:
         79:4d:ae:87:ac:e2:01:98:43:27:27:16:cc:56:f9:e6:20:3a:
         fd:94:3c:1d:82:59:f4:1b:3d:8b:cf:a8:24:98:d5:7f:96:d7:
         ac:1e:0c:1a:7e:be:16:0f:e1:99:c1:ff:6c:9c:5a:58:5b:94:
         84:2f:93:f9:70:09:c3:bf:87:4a:db:74:1e:ce:16:59:e3:89:
         27:13:0f:a3:32:42:fd:72:3d:f1:1e:71:af:e6:30:5d:77:11:
         0c:58:4c:6c
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAYzFAOGWtkkXuJteFKI7o2+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjMyNzI0OTgzNWZlZTE2N2IxODM0YjBlNzdjMTJjMTgxZDg1ZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte27EbbFO6HjmXCKPdIXNZqkKPkO
WrDhvjM4KfE6ULIcl4+U/r6XBq4A6veZ14kuTrhXum4UZk6v31BCa/lH1o3okoAB
ShnJdyIHzTJbwSYXFNtPfQLx6KyKWBQ1sg8pfPklCcTcEffgzOCr+MyS1OdUAAxu
kQarmImTC6QQ7JlnfzL4jrhv8qj0zGJ1nw8JeKwp+P7jngCN7HqwxZG0LaVG9JTF
JJC7V0G4qpUh5Dvs1FxXn5g++zeP7HMfFegsHGVRcw1Aob/qTWlFE6X/u5FYAT31
6bf1b1PsxQpwvaRs01F13YK8t2hj1vxdSo2+nxpK1t2BCcHWDuzYdaAISQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFN8yckmDX+4Wexg0sOd8EsGB2F33MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiLzgyMDQw
ZS0yYTJhLTQ4N2YtODU3Yi1hMmJiOGY1ZWY4NWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvODIwNDBl
LTJhMmEtNDg3Zi04NTdiLWEyYmI4ZjVlZjg1ZC8xLzN6SnlTWU5mN2haN0dEU3c1
M3dTd1lIWVhmYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDLrY4AwQCuSqYMA0EAgACMAcDBQAqAinIMA0G
CSqGSIb3DQEBCwUAA4IBAQCNCg7wSz+mQqvujlKR2A7XIsfmhhzQQIZsVC2DkuPI
L9XG2o5XflfJY5K6ejzd4s47gfb2ZinT3ORUex9QG1R+TbYRBGxEeyH67worqhSQ
4qWusDmCCsOyPq/+bG+/1J+vzzQbQJYMShw48oZncWTGKXy/6gohMmuKVfirAP3G
qaFOXs8DBj4t+KPF3VZto8gjNDe9QKL+62HgxN+gmoUN9WZ5Ta6HrOIBmEMnJxbM
VvnmIDr9lDwdgln0Gz2Lz6gkmNV/ltesHgwafr4WD+GZwf9snFpYW5SEL5P5cAnD
v4dK23QezhZZ44knEw+jMkL9cj3xHnGv5jBddxEMWExs
-----END CERTIFICATE-----