Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4VXm-Fz29EN-MJTUeP2FG8eBzCg.cer
File:                     4VXm-Fz29EN-MJTUeP2FG8eBzCg.cer (raw, json)
Hash identifier:          2/JZX8U4S45gv2Bq3yKQ8vS8lROdbCjBXpLSQ2QZzfM=
Subject key identifier:   E1:55:E6:F8:5C:F6:F4:43:7E:30:94:D4:78:FD:85:1B:C7:81:CC:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D57582A8EFD2A6E45EBD76440BD80F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/aa/ea0e4c-fd55-42c4-b0e5-91b99f6a8d87/1/4VXm-Fz29EN-MJTUeP2FG8eBzCg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/aa/ea0e4c-fd55-42c4-b0e5-91b99f6a8d87/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:34:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 212928

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d5:75:82:a8:ef:d2:a6:e4:5e:bd:76:44:0b:d8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e155e6f85cf6f4437e3094d478fd851bc781cc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:5f:65:8b:e5:63:92:54:77:11:26:83:e5:
                    f7:9f:62:5c:b6:13:88:53:09:bf:4d:73:4a:ce:c3:
                    43:ae:c5:7c:c1:5e:37:d8:d1:58:40:a6:49:ee:21:
                    a2:0a:47:a8:85:25:fc:d7:ea:3b:b6:02:b1:97:31:
                    5b:12:36:9d:f5:d1:4d:4d:f8:66:fd:4b:8d:4f:3e:
                    87:12:0c:c6:9e:84:4d:f1:c7:c1:4d:82:00:69:0f:
                    13:a6:1e:d8:cf:e6:48:d6:a6:a0:9c:d1:e9:12:cd:
                    4c:3a:3f:b5:7b:40:ee:d7:38:f3:a6:e3:d2:8c:b4:
                    ec:a5:ae:d0:21:bb:7c:34:9f:16:55:9c:fe:c0:22:
                    c5:7a:d9:28:7d:7b:ea:d5:24:90:49:3a:d3:f8:e5:
                    51:c0:f4:16:e6:43:e8:1e:33:8f:98:f9:fb:e3:cc:
                    c5:e2:cf:91:55:76:1a:e1:f9:57:6e:ae:e8:e2:2c:
                    68:d8:42:c4:27:64:6b:86:1e:da:34:c4:a4:31:c8:
                    d2:6a:1c:ac:9b:bb:38:31:2e:25:f9:69:78:ca:0d:
                    74:28:b3:97:e1:24:5c:d2:48:1d:44:f1:ef:2a:30:
                    17:6d:b3:a9:78:89:43:dc:0a:b2:17:7b:93:f9:00:
                    0c:07:43:5c:3e:fe:7b:17:4d:87:2f:60:58:e6:94:
                    c2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:55:E6:F8:5C:F6:F4:43:7E:30:94:D4:78:FD:85:1B:C7:81:CC:28
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea0e4c-fd55-42c4-b0e5-91b99f6a8d87/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea0e4c-fd55-42c4-b0e5-91b99f6a8d87/1/4VXm-Fz29EN-MJTUeP2FG8eBzCg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212928

    Signature Algorithm: sha256WithRSAEncryption
         a9:21:3c:43:0b:91:c7:97:0a:73:89:e3:2a:a0:3d:2b:61:41:
         80:7e:cc:18:e7:67:b5:8c:0c:ee:98:41:41:7d:9c:31:9c:97:
         01:5b:81:d0:c8:a8:64:11:a7:86:a9:72:61:6b:5d:e5:bd:b0:
         c5:33:09:8f:b0:b8:99:7a:53:b9:6c:53:08:58:47:71:39:93:
         c9:30:01:5a:21:0d:ad:95:ea:25:0b:c6:fb:8e:dc:d6:8d:70:
         b0:82:ed:75:8a:73:63:14:d2:2a:87:a6:24:1c:60:73:46:02:
         45:da:e0:8c:42:d4:03:01:25:dd:c4:a8:08:33:e9:fa:e0:f5:
         5e:91:44:d3:9d:76:e9:b7:db:7c:6a:7b:51:c9:0a:6b:b8:1a:
         92:c2:c9:bd:44:df:c0:fd:de:be:19:57:ea:c3:dd:0b:10:86:
         af:3c:9c:72:ff:e3:66:ad:b6:0d:2f:58:af:94:00:e1:34:b7:
         18:47:c2:a6:50:b3:0b:68:b3:7e:6b:f1:6e:59:23:68:75:fb:
         63:0c:06:12:90:af:53:c4:c0:2d:ae:54:ce:4f:62:c3:88:4d:
         9e:20:7d:67:35:3d:e5:b1:1c:0b:77:4b:21:3d:f9:fb:23:8c:
         3d:72:fb:bd:43:db:52:e6:c0:52:99:9f:d6:1b:ca:ca:ac:e7:
         16:87:53:d5
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVx1XWCqO/SpuRevXZEC9gPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTU1ZTZmODVjZjZmNDQzN2UzMDk0ZDQ3OGZkODUxYmM3ODFjYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYVfZYvlY5JUdxEmg+X3n2JcthOI
Uwm/TXNKzsNDrsV8wV432NFYQKZJ7iGiCkeohSX81+o7tgKxlzFbEjad9dFNTfhm
/UuNTz6HEgzGnoRN8cfBTYIAaQ8Tph7Yz+ZI1qagnNHpEs1MOj+1e0Du1zjzpuPS
jLTspa7QIbt8NJ8WVZz+wCLFetkofXvq1SSQSTrT+OVRwPQW5kPoHjOPmPn748zF
4s+RVXYa4flXbq7o4ixo2ELEJ2Rrhh7aNMSkMcjSahysm7s4MS4l+Wl4yg10KLOX
4SRc0kgdRPHvKjAXbbOpeIlD3AqyF3uT+QAMB0NcPv57F02HL2BY5pTCMQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOFV5vhc9vRDfjCU1Hj9hRvHgcwoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2VhMGU0
Yy1mZDU1LTQyYzQtYjBlNS05MWI5OWY2YThkODcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvZWEwZTRj
LWZkNTUtNDJjNC1iMGU1LTkxYjk5ZjZhOGQ4Ny8xLzRWWG0tRnoyOUVOLU1KVFVl
UDJGRzhlQnpDZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM/wDANBgkqhkiG9w0BAQsFAAOCAQEAqSE8QwuRx5cK
c4njKqA9K2FBgH7MGOdntYwM7phBQX2cMZyXAVuB0MioZBGnhqlyYWtd5b2wxTMJ
j7C4mXpTuWxTCFhHcTmTyTABWiENrZXqJQvG+47c1o1wsILtdYpzYxTSKoemJBxg
c0YCRdrgjELUAwEl3cSoCDPp+uD1XpFE05126bfbfGp7UckKa7gaksLJvUTfwP3e
vhlX6sPdCxCGrzyccv/jZq22DS9Yr5QA4TS3GEfCplCzC2izfmvxblkjaHX7YwwG
EpCvU8TALa5Uzk9iw4hNniB9ZzU95bEcC3dLIT35+yOMPXL7vUPbUubAUpmf1hvK
yqznFodT1Q==
-----END CERTIFICATE-----