Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8C0hySXt19gR4b6W8PKH18zS81s.cer
File:                     8C0hySXt19gR4b6W8PKH18zS81s.cer (raw, json)
Hash identifier:          jWWfkjprE/LcsXu//q36NvB1imQAVKq3hDm61vJFKx8=
Subject key identifier:   F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1B148ECA9684DF8702FE9A38833E9C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/8C0hySXt19gR4b6W8PKH18zS81s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:32:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 202119
                          IP: 185.20.4.0/22
                          IP: 2a00:4ce0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1b:14:8e:ca:96:84:df:87:02:fe:9a:38:83:3e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:32:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f02d21c925edd7d811e1be96f0f287d7ccd2f35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:bf:ff:83:81:f0:98:0a:4f:a8:51:06:a0:
                    40:43:18:cc:a3:dc:f9:54:f7:4b:7e:fb:fb:6b:49:
                    43:20:f7:b8:7d:37:ee:61:52:cf:5b:7b:87:53:32:
                    b3:de:a4:06:f5:49:38:aa:eb:61:41:00:89:10:45:
                    83:df:d3:da:72:8d:77:6d:ca:2f:74:b1:a3:11:78:
                    86:9a:31:cf:8a:4e:9c:86:e8:d0:0d:25:0e:ce:77:
                    5f:64:75:ae:7b:c0:66:ee:ef:01:ac:65:f2:4e:84:
                    99:a2:71:20:03:fe:bc:a2:4d:e3:54:eb:ac:47:48:
                    fb:16:94:e4:fc:dc:29:fd:a0:5f:98:dc:7a:e8:a3:
                    08:91:ce:37:5a:bd:fb:92:03:74:8a:a0:c4:41:7a:
                    e2:2b:c0:24:43:3f:c6:f7:64:9f:1f:20:4f:59:96:
                    58:d4:1e:cd:7f:aa:df:f1:cd:cc:3b:a3:ff:62:d1:
                    cd:43:dd:d0:cd:40:73:8a:0a:a3:62:cf:18:d2:8c:
                    81:60:01:6c:b0:de:40:10:f5:26:ad:c4:5f:3f:e0:
                    36:bb:86:e7:ef:38:b9:03:8e:8e:14:85:58:57:46:
                    06:c7:b9:69:05:14:d0:1c:bf:fd:83:d3:22:6f:87:
                    5b:3e:3e:37:f1:ba:be:eb:d0:f6:c3:f7:cc:17:c8:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/8C0hySXt19gR4b6W8PKH18zS81s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.20.4.0/22
                IPv6:
                  2a00:4ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202119

    Signature Algorithm: sha256WithRSAEncryption
         34:ee:51:11:7a:26:d9:e8:ab:a4:87:61:8f:c3:82:d9:bd:98:
         8c:18:36:a5:9a:bc:aa:c9:90:c1:22:bd:ff:3e:a6:2d:af:33:
         23:c8:23:12:ec:9c:c2:91:cc:2e:eb:10:92:74:e4:3b:25:53:
         0d:b2:e4:fc:1a:c8:68:9c:ca:fc:2d:0d:20:92:e4:88:98:fa:
         d4:7b:f3:1f:3c:2d:29:73:df:61:4e:fa:3e:89:a5:e5:74:a2:
         7e:18:bc:78:2b:51:a2:90:95:a2:31:b6:2a:45:21:86:fd:90:
         15:ed:9e:3c:01:65:39:e7:2a:51:06:2e:82:7f:63:d2:a4:71:
         77:63:f8:9c:fe:3e:09:4a:d3:24:bd:2b:bb:38:8a:12:38:8c:
         5a:63:54:58:30:a7:d1:d8:fc:70:a7:3b:c5:c5:60:03:ab:2a:
         95:42:01:0f:ff:6f:3b:3e:87:54:79:a8:e3:75:d5:c4:b0:c9:
         d2:8b:84:61:75:44:df:54:da:8d:2b:cf:ae:04:e1:cc:be:7c:
         11:75:e9:8a:a5:15:29:5e:fd:08:77:f3:0a:79:84:a2:82:c7:
         52:b1:b1:9f:bd:f8:5c:f4:79:10:f9:39:88:63:29:a8:9f:d8:
         18:bd:44:0d:98:48:05:d7:94:8e:bb:e4:fb:69:d6:8e:b4:87:
         3e:b9:22:95
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYVtGxSOypaE34cC/po4gz6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDJkMjFjOTI1ZWRkN2Q4MTFlMWJlOTZmMGYyODdkN2NjZDJmMzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYO//4OB8JgKT6hRBqBAQxjMo9z5
VPdLfvv7a0lDIPe4fTfuYVLPW3uHUzKz3qQG9Uk4quthQQCJEEWD39Paco13bcov
dLGjEXiGmjHPik6chujQDSUOzndfZHWue8Bm7u8BrGXyToSZonEgA/68ok3jVOus
R0j7FpTk/Nwp/aBfmNx66KMIkc43Wr37kgN0iqDEQXriK8AkQz/G92SfHyBPWZZY
1B7Nf6rf8c3MO6P/YtHNQ93QzUBzigqjYs8Y0oyBYAFssN5AEPUmrcRfP+A2u4bn
7zi5A46OFIVYV0YGx7lpBRTQHL/9g9Mib4dbPj438bq+69D2w/fMF8jpTwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPAtIckl7dfYEeG+lvDyh9fM0vNbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzJlZTc4
Zi0wMmVhLTQ2ZWItYjUyOS00MzlkMGRhNmEyNmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMmVlNzhm
LTAyZWEtNDZlYi1iNTI5LTQzOWQwZGE2YTI2ZS8xLzhDMGh5U1h0MTlnUjRiNlc4
UEtIMTh6Uzgxcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuRQEMA0EAgACMAcDBQAqAEzgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMVhzANBgkqhkiG9w0BAQsFAAOCAQEANO5REXom2eir
pIdhj8OC2b2YjBg2pZq8qsmQwSK9/z6mLa8zI8gjEuycwpHMLusQknTkOyVTDbLk
/BrIaJzK/C0NIJLkiJj61HvzHzwtKXPfYU76Poml5XSifhi8eCtRopCVojG2KkUh
hv2QFe2ePAFlOecqUQYugn9j0qRxd2P4nP4+CUrTJL0ruziKEjiMWmNUWDCn0dj8
cKc7xcVgA6sqlUIBD/9vOz6HVHmo43XVxLDJ0ouEYXVE31TajSvPrgThzL58EXXp
iqUVKV79CHfzCnmEooLHUrGxn734XPR5EPk5iGMpqJ/YGL1EDZhIBdeUjrvk+2nW
jrSHPrkilQ==
-----END CERTIFICATE-----