Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
File:                     66hVhrmRz3DgrxnAOkN24n0Cb0M.cer (raw, json)
Hash identifier:          B5ytRsQfHYg2g5HM6WyvX38RHkyNsB4MUuw7nXxwZ+s=
Subject key identifier:   EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED41370EAE65AD6A0DFE6DC3921F302
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.149.0/24
                          IP: 2a12:cb00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:13:70:ea:e6:5a:d6:a0:df:e6:dc:39:21:f3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eba85586b991cf70e0af19c03a4376e27d026f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:a2:32:42:01:97:05:87:75:80:4f:69:ca:
                    8e:71:ae:df:54:1c:e8:1a:03:59:dc:3c:c5:59:50:
                    d6:91:bd:9b:82:14:da:f5:65:ba:80:96:3e:53:4b:
                    01:8b:43:cc:55:2f:b9:be:7d:aa:66:3a:22:f4:17:
                    1a:74:45:bc:de:e6:17:d2:9d:f0:82:37:b5:33:41:
                    37:14:34:5e:2c:7b:6c:11:98:72:0a:6b:c5:85:87:
                    f5:c5:89:3f:18:4f:8e:0e:ee:5e:0e:9d:24:24:05:
                    1c:07:d4:0e:f6:bc:d0:d9:42:4b:50:02:6e:62:02:
                    e6:04:57:a9:86:73:b5:f9:e5:13:96:9b:24:fc:e4:
                    36:7f:39:5f:2e:7c:83:39:a1:43:e1:67:02:97:38:
                    34:0b:a7:43:3c:f6:2e:35:98:8a:21:da:bc:c7:b2:
                    b7:51:83:a2:c3:35:a9:c9:00:11:a0:9a:b0:32:d0:
                    6d:bc:96:78:0a:67:96:96:90:6d:4e:72:72:57:04:
                    24:c4:e0:77:e8:38:81:a7:c1:0d:38:81:89:ef:9e:
                    47:2f:6a:b6:18:6f:92:3f:ee:43:61:3c:3c:86:f6:
                    70:79:30:c5:c6:75:c6:b8:85:1d:84:76:0c:6c:69:
                    d8:58:e1:78:8c:e2:7a:85:fe:e9:14:18:e4:ff:74:
                    8e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.149.0/24
                IPv6:
                  2a12:cb00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a6:f2:48:bd:43:e5:1a:05:08:65:78:16:8d:30:f7:17:36:03:
         ab:79:c6:38:91:fe:a9:49:8f:9c:30:6c:0e:c0:ed:6a:0b:3d:
         07:ea:de:91:4f:a0:6a:55:eb:71:65:82:23:c5:6d:f7:ee:f8:
         28:4a:f4:e6:3e:95:48:f4:42:07:0e:77:b9:14:3a:f0:31:bd:
         db:87:9c:aa:88:ee:e9:f3:af:d4:79:f8:ac:d4:b1:67:f0:37:
         7b:48:d0:76:f4:69:f6:0e:e7:45:36:4c:66:f5:85:cf:32:27:
         41:d9:37:e9:de:5c:4e:b6:34:35:99:3c:6d:9c:90:30:c3:58:
         85:b5:2d:1d:b0:78:cc:e7:0e:2c:b9:0e:64:ca:53:da:4b:c1:
         4a:6c:9e:d3:6a:6a:1b:83:62:d0:88:58:42:30:67:d3:23:27:
         a4:20:d6:d3:fe:34:e6:cf:a2:00:b1:3d:58:0e:35:12:cb:cf:
         c0:ae:d2:fb:cc:61:da:16:6e:f5:dd:14:56:36:e0:93:60:cb:
         7c:0b:5b:a9:96:f8:fd:ed:5b:f1:9a:af:13:bb:b4:1d:b5:98:
         fb:58:62:ef:b3:61:00:c6:1f:da:bd:5f:c2:f5:c5:f1:cd:1b:
         d9:32:72:27:aa:ba:1f:4d:bf:37:65:6b:46:2a:1b:73:28:fe:
         60:3c:3b:c5
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu1BNw6uZa1qDf5tw5IfMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmE4NTU4NmI5OTFjZjcwZTBhZjE5YzAzYTQzNzZlMjdkMDI2ZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIOiMkIBlwWHdYBPacqOca7fVBzo
GgNZ3DzFWVDWkb2bghTa9WW6gJY+U0sBi0PMVS+5vn2qZjoi9BcadEW83uYX0p3w
gje1M0E3FDReLHtsEZhyCmvFhYf1xYk/GE+ODu5eDp0kJAUcB9QO9rzQ2UJLUAJu
YgLmBFephnO1+eUTlpsk/OQ2fzlfLnyDOaFD4WcClzg0C6dDPPYuNZiKIdq8x7K3
UYOiwzWpyQARoJqwMtBtvJZ4CmeWlpBtTnJyVwQkxOB36DiBp8ENOIGJ755HL2q2
GG+SP+5DYTw8hvZweTDFxnXGuIUdhHYMbGnYWOF4jOJ6hf7pFBjk/3SO4wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFOuoVYa5kc9w4K8ZwDpDduJ9Am9DMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzE4MjEw
NC00NTcwLTQ4Y2UtYTk3ZC05NmViNDlkMTk1NWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMTgyMTA0
LTQ1NzAtNDhjZS1hOTdkLTk2ZWI0OWQxOTU1Yy8xLzY2aFZocm1SejNEZ3J4bkFP
a04yNG4wQ2IwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhOVMA0EAgACMAcDBQMqEssAMA0GCSqGSIb3
DQEBCwUAA4IBAQCm8ki9Q+UaBQhleBaNMPcXNgOrecY4kf6pSY+cMGwOwO1qCz0H
6t6RT6BqVetxZYIjxW337vgoSvTmPpVI9EIHDne5FDrwMb3bh5yqiO7p86/Uefis
1LFn8Dd7SNB29Gn2DudFNkxm9YXPMidB2Tfp3lxOtjQ1mTxtnJAww1iFtS0dsHjM
5w4suQ5kylPaS8FKbJ7Tamobg2LQiFhCMGfTIyekINbT/jTmz6IAsT1YDjUSy8/A
rtL7zGHaFm713RRWNuCTYMt8C1uplvj97Vvxmq8Tu7QdtZj7WGLvs2EAxh/avV/C
9cXxzRvZMnInqrofTb83ZWtGKhtzKP5gPDvF
-----END CERTIFICATE-----