Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6fX9q9TqpiLJOJOB0itj7PXsTmk.cer
File:                     6fX9q9TqpiLJOJOB0itj7PXsTmk.cer (raw, json)
Hash identifier:          Hrfu85SH/QZ9q426vWmIaGAjtz6XrM6J/CTUsPTlzY8=
Subject key identifier:   E9:F5:FD:AB:D4:EA:A6:22:C9:38:93:81:D2:2B:63:EC:F5:EC:4E:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED39DF0F01F5B5B5A1F9EF6A86ADAAB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/6fX9q9TqpiLJOJOB0itj7PXsTmk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:00 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 94.154.116.0/24
                          IP: 2a11:4840::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:9d:f0:f0:1f:5b:5b:5a:1f:9e:f6:a8:6a:da:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9f5fdabd4eaa622c9389381d22b63ecf5ec4e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:c5:94:bb:a3:a8:37:d4:54:d7:0d:28:1c:
                    4d:f3:32:fa:0a:cf:fc:b8:d8:46:76:ef:22:cb:c1:
                    72:31:5a:5f:e8:82:b9:a7:b7:ed:ab:68:99:6f:b5:
                    b0:50:cf:0f:ea:3a:27:ff:bc:75:8b:f8:3c:8f:3a:
                    4b:05:7d:a2:58:b6:d9:12:2a:6a:a1:4d:3a:50:67:
                    4d:cf:0f:1c:50:e1:fd:bd:92:2b:d1:13:4d:25:f0:
                    1c:6d:fa:0a:44:b7:66:48:66:60:8f:75:9f:51:62:
                    53:b9:30:e5:4b:01:13:bb:c1:e1:93:26:9f:1e:0b:
                    e4:25:9b:7d:0e:86:7a:8f:22:c1:f6:84:8c:e8:e6:
                    ca:dc:bf:73:61:7d:83:ba:7c:0b:89:6e:9a:12:8b:
                    dc:d8:9e:26:1f:f7:b8:55:26:42:39:7a:ea:15:ec:
                    ed:a2:e0:57:60:78:da:de:6c:80:79:c0:78:cf:54:
                    21:93:c3:7d:45:0c:6d:63:9f:77:e0:44:12:a9:a9:
                    1c:81:0c:ad:04:9a:8b:75:2d:83:d1:27:1c:59:34:
                    1d:88:3e:dd:4a:a5:54:d3:98:41:d0:0e:9e:49:c2:
                    52:ae:d7:66:42:98:80:96:99:4f:77:97:d8:8c:32:
                    69:e1:a9:26:ab:e8:3b:63:8b:35:83:2b:1e:fc:17:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F5:FD:AB:D4:EA:A6:22:C9:38:93:81:D2:2B:63:EC:F5:EC:4E:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/6fX9q9TqpiLJOJOB0itj7PXsTmk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.116.0/24
                IPv6:
                  2a11:4840::/29

    Signature Algorithm: sha256WithRSAEncryption
         2a:90:3f:ac:c7:b7:ba:a2:d6:b9:0b:3b:a0:85:bc:f9:68:79:
         98:d7:65:43:89:7d:18:e5:fa:b9:f8:f6:58:69:96:66:ff:40:
         95:64:bf:f9:17:25:cd:4f:8c:4a:d3:9b:41:67:c1:d0:f9:66:
         16:06:91:5a:23:02:6a:89:21:fe:32:23:80:67:59:11:93:bc:
         4a:7c:1c:9e:17:11:b1:8c:c9:1e:56:4d:30:09:a8:91:25:5c:
         43:30:e1:48:f1:ac:da:e8:a0:cd:22:6d:a3:4d:fb:5a:3b:e5:
         85:01:46:78:49:86:36:6c:39:3c:1c:9b:d6:f4:f0:78:82:4b:
         2d:51:1b:4e:58:58:71:d1:46:9c:12:56:4f:6a:40:82:c8:dc:
         d4:20:e3:3a:29:35:08:84:f3:de:c7:36:60:3e:15:c9:e1:76:
         f8:17:82:a3:db:50:f9:21:91:ea:9f:82:72:94:e2:6d:71:91:
         d9:74:91:4c:ca:79:8b:05:ed:1a:5b:61:21:0d:2e:12:73:d5:
         2d:4f:05:98:1b:34:9b:42:61:3e:1e:28:e4:ac:17:87:0e:9f:
         8f:ee:c0:5d:1c:31:37:2b:d1:0c:47:68:11:33:a9:ea:43:cf:
         9d:2e:a8:b6:67:01:2f:02:c7:3a:7a:3a:23:d4:c7:5a:88:22:
         3b:e3:75:4c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu053w8B9bW1ofnvaoatqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWY1ZmRhYmQ0ZWFhNjIyYzkzODkzODFkMjJiNjNlY2Y1ZWM0ZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTfFlLujqDfUVNcNKBxN8zL6Cs/8
uNhGdu8iy8FyMVpf6IK5p7ftq2iZb7WwUM8P6jon/7x1i/g8jzpLBX2iWLbZEipq
oU06UGdNzw8cUOH9vZIr0RNNJfAcbfoKRLdmSGZgj3WfUWJTuTDlSwETu8Hhkyaf
HgvkJZt9DoZ6jyLB9oSM6ObK3L9zYX2DunwLiW6aEovc2J4mH/e4VSZCOXrqFezt
ouBXYHja3myAecB4z1Qhk8N9RQxtY5934EQSqakcgQytBJqLdS2D0SccWTQdiD7d
SqVU05hB0A6eScJSrtdmQpiAlplPd5fYjDJp4akmq+g7Y4s1gyse/BearwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFOn1/avU6qYiyTiTgdIrY+z17E5pMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzc1NmQw
Yy01ZWZiLTRiNDAtYWU3Ni0wYTM3ZWMyZGExNGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvNzU2ZDBj
LTVlZmItNGI0MC1hZTc2LTBhMzdlYzJkYTE0Yi8xLzZmWDlxOVRxcGlMSk9KT0Iw
aXRqN1BYc1Rtay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAXpp0MA0EAgACMAcDBQMqEUhAMA0GCSqGSIb3
DQEBCwUAA4IBAQAqkD+sx7e6ota5Czughbz5aHmY12VDiX0Y5fq5+PZYaZZm/0CV
ZL/5FyXNT4xK05tBZ8HQ+WYWBpFaIwJqiSH+MiOAZ1kRk7xKfByeFxGxjMkeVk0w
CaiRJVxDMOFI8aza6KDNIm2jTftaO+WFAUZ4SYY2bDk8HJvW9PB4gkstURtOWFhx
0UacElZPakCCyNzUIOM6KTUIhPPexzZgPhXJ4Xb4F4Kj21D5IZHqn4JylOJtcZHZ
dJFMynmLBe0aW2EhDS4Sc9UtTwWYGzSbQmE+HijkrBeHDp+P7sBdHDE3K9EMR2gR
M6nqQ8+dLqi2ZwEvAsc6ejoj1MdaiCI743VM
-----END CERTIFICATE-----