Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer
File:                     6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer (raw, json)
Hash identifier:          YuxKzDQQUGvTLvy0aa+35IXROeF8VL0ztFI4QEpoZqE=
Subject key identifier:   E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FAE1C40BC6D51AA617CB72E5D010F7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/6ftt1aXL_YTaguJ1n2lVYiwe6TI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:08 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.233.46.0/24
                          IP: 2a11:a140::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:e1:c4:0b:c6:d5:1a:a6:17:cb:72:e5:d0:10:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9fb6dd5a5cbfd84da82e2759f6955622c1ee932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:f8:a5:74:08:b0:80:ac:32:69:1f:52:da:
                    90:68:91:bb:24:71:71:b9:a7:66:41:4f:de:7d:d5:
                    4c:cd:6b:d5:39:0d:0a:8a:49:07:1a:59:3f:11:19:
                    aa:b9:a8:14:2a:06:58:0f:d8:78:da:74:d2:02:a1:
                    06:5d:2a:d8:40:6f:78:9c:ae:c9:37:2f:c7:e9:d1:
                    0a:36:de:9a:da:89:11:32:8b:3e:7f:94:69:86:9d:
                    88:89:4c:3a:b5:f4:91:76:d9:59:46:8f:9c:e0:66:
                    02:60:01:39:fa:01:06:de:90:36:5f:3c:36:b8:ae:
                    12:2e:73:7e:fe:3b:2a:0f:52:4b:e3:6e:dc:79:8d:
                    38:24:1a:3a:80:16:4b:90:ce:ff:e2:ca:44:64:2c:
                    cf:10:93:e7:7a:40:f1:3e:f7:31:c0:0b:e1:46:35:
                    14:2e:a2:f8:b1:1b:61:34:c8:07:1f:30:93:87:a4:
                    17:7a:e8:bc:82:b6:76:bd:77:7e:ba:0d:da:9c:20:
                    e8:95:2a:6f:5a:51:49:0d:2a:35:c8:9d:98:91:68:
                    45:e6:0c:f9:5a:4f:9f:01:34:c3:c1:e0:a1:a4:65:
                    9a:ea:1b:31:ca:53:8b:b8:6c:98:62:b2:9e:c3:fb:
                    b5:39:3e:61:fb:81:69:26:b6:8f:f8:c4:f1:9b:9d:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/6ftt1aXL_YTaguJ1n2lVYiwe6TI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.46.0/24
                IPv6:
                  2a11:a140::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:89:bb:04:3d:b3:2a:2d:48:28:dc:ff:cf:6a:9e:29:14:f7:
         c2:b2:d9:dc:06:09:2e:c5:c0:b2:37:1f:7a:39:4d:72:bf:d3:
         f9:d1:9e:dd:f4:9e:42:b7:07:c3:58:f7:7e:06:ff:3d:30:00:
         03:8e:e5:de:9d:35:82:57:da:c6:3d:2d:34:32:e6:d7:c5:99:
         ba:93:b4:cd:f1:60:2d:d3:c7:b3:c7:d8:bb:a6:7e:a4:24:74:
         14:bb:e7:29:3e:fb:65:ef:7e:a0:35:df:c8:1c:af:34:c3:10:
         c3:ce:ec:3d:1f:9c:17:68:58:f2:5a:cc:80:70:52:67:3a:bc:
         14:8c:d4:e8:76:3f:e2:b1:74:2a:6f:3d:60:d6:16:61:9b:af:
         ae:e3:6c:b7:8b:0d:27:1e:29:30:61:11:40:2e:ec:02:a8:e7:
         7f:b2:38:40:98:74:b2:8d:14:0c:bd:a4:48:ca:05:20:e2:81:
         e1:7b:59:61:27:73:25:a2:fe:4c:25:7b:5d:5c:c0:0f:ed:ec:
         f0:38:33:72:99:85:7f:bb:b6:69:23:65:37:db:da:ed:1d:06:
         9b:e5:f1:07:73:84:28:fc:c4:71:6a:d0:0c:ff:fa:e0:82:5b:
         35:ce:f8:04:1c:d7:a7:22:64:d9:34:fb:7d:3e:0d:62:d0:ee:
         7c:dc:0e:b7
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVw+uHEC8bVGqYXy3Ll0BD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWZiNmRkNWE1Y2JmZDg0ZGE4MmUyNzU5ZjY5NTU2MjJjMWVlOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjX4pXQIsICsMmkfUtqQaJG7JHFx
uadmQU/efdVMzWvVOQ0KikkHGlk/ERmquagUKgZYD9h42nTSAqEGXSrYQG94nK7J
Ny/H6dEKNt6a2okRMos+f5Rphp2IiUw6tfSRdtlZRo+c4GYCYAE5+gEG3pA2Xzw2
uK4SLnN+/jsqD1JL427ceY04JBo6gBZLkM7/4spEZCzPEJPnekDxPvcxwAvhRjUU
LqL4sRthNMgHHzCTh6QXeui8grZ2vXd+ug3anCDolSpvWlFJDSo1yJ2YkWhF5gz5
Wk+fATTDweChpGWa6hsxylOLuGyYYrKew/u1OT5h+4FpJraP+MTxm53D0wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFOn7bdWly/2E2oLidZ9pVWIsHukyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2M3OGYx
Mi0yZDE0LTQyNzYtOGM4ZS04YmRjOGZiYmQ0MGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvYzc4ZjEy
LTJkMTQtNDI3Ni04YzhlLThiZGM4ZmJiZDQwZC8xLzZmdHQxYVhMX1lUYWd1SjFu
MmxWWWl3ZTZUSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAPukuMA0EAgACMAcDBQMqEaFAMA0GCSqGSIb3
DQEBCwUAA4IBAQCoibsEPbMqLUgo3P/Pap4pFPfCstncBgkuxcCyNx96OU1yv9P5
0Z7d9J5CtwfDWPd+Bv89MAADjuXenTWCV9rGPS00MubXxZm6k7TN8WAt08ezx9i7
pn6kJHQUu+cpPvtl736gNd/IHK80wxDDzuw9H5wXaFjyWsyAcFJnOrwUjNTodj/i
sXQqbz1g1hZhm6+u42y3iw0nHikwYRFALuwCqOd/sjhAmHSyjRQMvaRIygUg4oHh
e1lhJ3Mlov5MJXtdXMAP7ezwODNymYV/u7ZpI2U329rtHQab5fEHc4Qo/MRxatAM
//rggls1zvgEHNenImTZNPt9Pg1i0O583A63
-----END CERTIFICATE-----