Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8OIGzm1T8EkIo2Rj2J6bIacMQ44.cer
File:                     8OIGzm1T8EkIo2Rj2J6bIacMQ44.cer (raw, json)
Hash identifier:          TKiHm3YCcw0WGfWjacJrJ7BbyUOZWclE+xXtbHvQhfk=
Subject key identifier:   F0:E2:06:CE:6D:53:F0:49:08:A3:64:63:D8:9E:9B:21:A7:0C:43:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAFCAC8ECE3A15DD3CD37364701A2D9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/9df8fe-e68e-49c9-8371-e456cb60fbe6/1/8OIGzm1T8EkIo2Rj2J6bIacMQ44.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/9df8fe-e68e-49c9-8371-e456cb60fbe6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:34:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.23.223.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:af:ca:c8:ec:e3:a1:5d:d3:cd:37:36:47:01:a2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:34:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f0e206ce6d53f04908a36463d89e9b21a70c438e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:7f:d9:12:36:4e:f3:07:8a:0a:6a:16:e3:
                    2e:d4:de:46:7c:aa:fc:97:a6:db:e7:53:a3:6f:7d:
                    d7:bd:35:17:54:cc:12:8b:6d:a1:88:47:43:42:e2:
                    c1:d9:2f:f9:d7:e0:cc:e3:d7:3e:06:21:f7:51:29:
                    6f:dc:79:97:10:91:38:9c:c6:0f:d8:53:d3:99:23:
                    de:ed:d4:f8:67:27:61:48:9f:c2:da:d5:c2:33:fa:
                    d6:d5:77:9c:2d:cb:f6:8e:8b:68:09:ac:f5:5e:de:
                    fa:92:da:98:9b:e8:63:ca:74:df:16:e1:c2:e3:db:
                    3d:11:87:c4:67:d6:64:50:55:d7:51:81:e4:24:4c:
                    32:95:ae:cb:5f:f0:c4:c9:07:93:26:6d:80:8b:e6:
                    f2:30:78:61:cb:cc:b5:58:c7:71:3f:6f:68:cc:bf:
                    bb:11:a0:d6:41:58:05:f8:9c:d4:e7:e3:02:50:5d:
                    00:8f:bc:0d:04:6d:48:11:b6:50:cc:23:9d:40:a5:
                    e8:d1:cd:21:e5:44:c5:be:c9:8f:11:6c:b3:2b:31:
                    cb:8b:c5:a2:56:d6:11:5e:9e:1b:6e:a0:1d:68:e7:
                    21:66:78:78:0e:8a:fb:70:cb:37:9f:7c:71:de:5e:
                    56:b9:76:88:3d:ea:6f:1a:11:f9:91:21:c9:d1:22:
                    e1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E2:06:CE:6D:53:F0:49:08:A3:64:63:D8:9E:9B:21:A7:0C:43:8E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9df8fe-e68e-49c9-8371-e456cb60fbe6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9df8fe-e68e-49c9-8371-e456cb60fbe6/1/8OIGzm1T8EkIo2Rj2J6bIacMQ44.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:be:2a:ff:94:de:a6:c3:25:26:ed:3e:e2:91:a4:59:c3:10:
         28:95:8a:d3:a1:86:46:60:67:56:e9:23:9b:30:74:63:d0:bc:
         ee:77:a6:9e:87:fc:03:01:47:39:90:5d:cf:e3:0b:e5:e5:aa:
         06:f4:43:3d:72:6c:55:70:25:61:67:7c:90:88:2b:3e:96:dc:
         33:34:ea:d8:a1:8e:25:7d:67:2c:8b:71:e2:f4:0f:ec:ca:53:
         77:6d:66:36:d9:16:30:d7:aa:f2:b5:a8:65:f6:b9:4b:3b:d5:
         b2:c1:a4:66:99:df:ea:40:73:30:67:ac:3a:58:41:a2:53:92:
         6a:97:6b:40:ef:f0:80:c1:80:7f:14:5d:2b:b3:07:9a:2d:16:
         12:cd:e0:5b:dd:1b:8b:27:11:63:dc:0f:77:7d:ef:bc:e3:9b:
         0c:d0:07:65:d2:e4:58:f4:a2:2e:e0:8b:b7:82:9b:6c:06:4c:
         c2:14:72:cd:b5:64:22:40:0e:fd:c6:36:0b:7d:0b:dd:9e:3e:
         61:8c:09:3b:fc:96:29:6a:2a:af:4e:c6:e7:d6:61:72:ab:8b:
         d8:12:f8:58:53:45:c2:c1:69:98:98:15:ca:90:36:f3:9c:f7:
         ed:78:30:d1:93:ac:1e:98:32:21:be:54:10:73:e5:0e:7c:02:
         74:77:fd:51
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVvr8rI7OOhXdPNNzZHAaLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGUyMDZjZTZkNTNmMDQ5MDhhMzY0NjNkODllOWIyMWE3MGM0MzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFB/2RI2TvMHigpqFuMu1N5GfKr8
l6bb51Ojb33XvTUXVMwSi22hiEdDQuLB2S/51+DM49c+BiH3USlv3HmXEJE4nMYP
2FPTmSPe7dT4ZydhSJ/C2tXCM/rW1XecLcv2jotoCaz1Xt76ktqYm+hjynTfFuHC
49s9EYfEZ9ZkUFXXUYHkJEwyla7LX/DEyQeTJm2Ai+byMHhhy8y1WMdxP29ozL+7
EaDWQVgF+JzU5+MCUF0Aj7wNBG1IEbZQzCOdQKXo0c0h5UTFvsmPEWyzKzHLi8Wi
VtYRXp4bbqAdaOchZnh4Dor7cMs3n3xx3l5WuXaIPepvGhH5kSHJ0SLhwwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPDiBs5tU/BJCKNkY9iemyGnDEOOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzlkZjhm
ZS1lNjhlLTQ5YzktODM3MS1lNDU2Y2I2MGZiZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOWRmOGZl
LWU2OGUtNDljOS04MzcxLWU0NTZjYjYwZmJlNi8xLzhPSUd6bTFUOEVrSW8yUmoy
SjZiSWFjTVE0NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA1BffMA0GCSqGSIb3DQEBCwUAA4IBAQBpvir/
lN6mwyUm7T7ikaRZwxAolYrToYZGYGdW6SObMHRj0Lzud6aeh/wDAUc5kF3P4wvl
5aoG9EM9cmxVcCVhZ3yQiCs+ltwzNOrYoY4lfWcsi3Hi9A/sylN3bWY22RYw16ry
tahl9rlLO9WywaRmmd/qQHMwZ6w6WEGiU5Jql2tA7/CAwYB/FF0rsweaLRYSzeBb
3RuLJxFj3A93fe+845sM0Adl0uRY9KIu4Iu3gptsBkzCFHLNtWQiQA79xjYLfQvd
nj5hjAk7/JYpaiqvTsbn1mFyq4vYEvhYU0XCwWmYmBXKkDbznPfteDDRk6wemDIh
vlQQc+UOfAJ0d/1R
-----END CERTIFICATE-----