Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9gJQ3GYh9pdk-ntfOZy6gsNEUHI.cer
File:                     9gJQ3GYh9pdk-ntfOZy6gsNEUHI.cer (raw, json)
Hash identifier:          gyIZd1EEHDRN/167a/OPcqX9p6PMkfzs3KwSwOrknn0=
Subject key identifier:   F6:02:50:DC:66:21:F6:97:64:FA:7B:5F:39:9C:BA:82:C3:44:50:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B8A07F255A6DB6F237F5805FD080CDC95
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/415945-5dce-40d7-b800-9072411e2498/1/9gJQ3GYh9pdk-ntfOZy6gsNEUHI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/415945-5dce-40d7-b800-9072411e2498/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Nov 2023 08:37:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 80.83.144.0/20
                          IP: 83.217.96.0/19
                          IP: 217.150.96.0/19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8a:07:f2:55:a6:db:6f:23:7f:58:05:fd:08:0c:dc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  1 08:37:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f60250dc6621f69764fa7b5f399cba82c3445072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5b:6c:7d:85:b5:7e:8b:42:d5:e0:50:5e:6a:
                    a6:ed:37:56:cc:a7:6d:cb:49:cb:a4:eb:03:87:92:
                    01:3c:16:04:44:14:bc:e6:f8:b9:ae:c2:33:3f:be:
                    ae:74:4a:61:48:7f:b7:3e:81:1f:11:88:20:9b:97:
                    fa:c8:81:59:24:c6:5f:22:aa:56:a2:d1:6c:4a:1d:
                    e6:a9:fc:e1:44:ca:18:1a:29:d8:f1:48:b7:31:c4:
                    1a:f3:79:0c:6d:3d:7b:ad:5b:0f:b0:e2:5e:ad:15:
                    17:ab:22:37:b6:7b:e3:eb:b4:b6:88:b3:e7:4f:ce:
                    96:12:43:dd:80:73:07:ac:28:e1:21:2a:96:7d:10:
                    38:5c:6e:a5:a5:18:c6:e6:b5:10:70:c6:1f:56:f1:
                    73:39:25:90:5a:d7:1f:5a:0b:c1:93:d1:0b:75:52:
                    9f:97:81:bc:f7:56:76:1e:94:6d:d0:de:18:de:93:
                    61:4e:a8:44:e0:0e:a6:83:9d:e7:07:1d:07:7f:a6:
                    83:69:61:50:7a:2e:17:1b:3f:7f:3c:ad:a5:a9:2e:
                    ab:9a:a1:0a:00:5e:d7:c6:e3:e6:e8:2a:df:ba:91:
                    4b:a5:2a:dc:8d:12:34:99:9f:1d:26:7b:ed:7c:c0:
                    00:a0:14:d0:85:2b:1c:0c:28:2b:91:1a:5f:be:4f:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:02:50:DC:66:21:F6:97:64:FA:7B:5F:39:9C:BA:82:C3:44:50:72
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/415945-5dce-40d7-b800-9072411e2498/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/415945-5dce-40d7-b800-9072411e2498/1/9gJQ3GYh9pdk-ntfOZy6gsNEUHI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.83.144.0/20
                  83.217.96.0/19
                  217.150.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:6d:11:44:e1:6c:94:e8:75:d8:55:4a:ee:ca:3a:1f:b5:7c:
         c3:42:17:5b:2e:35:77:ee:22:ac:48:cb:ec:05:2c:30:25:66:
         88:db:fc:4c:84:9f:fa:18:15:9b:8b:41:6b:25:16:c9:9e:3e:
         38:e9:90:66:8a:95:33:bb:b3:0a:80:cf:73:ba:14:e2:33:a0:
         5a:c7:d1:a1:19:7d:a4:b3:45:48:33:e1:52:cb:50:69:2b:dd:
         8d:68:e7:dc:9e:44:8c:a9:5c:5b:c4:17:7b:f1:40:e2:0c:96:
         14:35:58:9b:61:6e:b6:85:1f:f7:1e:9c:84:61:58:bd:bf:86:
         aa:3b:c1:dc:6f:ac:d1:a3:76:f8:fc:73:06:65:27:cd:a1:d8:
         9b:7d:b7:d4:7d:f5:6f:5b:09:83:9e:5f:9f:1f:35:d2:ae:78:
         98:e1:f9:71:d8:cc:46:5e:af:b0:f9:ee:ea:aa:3e:cc:16:96:
         4a:07:fe:40:e5:42:95:a6:4a:bf:46:6b:a3:73:7f:c7:58:df:
         6e:df:e6:e3:c0:f5:4b:c8:24:69:f0:00:03:28:6d:d7:18:97:
         30:64:8d:1c:60:10:eb:e5:78:55:e6:99:82:43:66:4c:e6:82:
         af:fa:0f:86:4c:58:06:de:14:a5:8c:d9:9e:ba:f9:23:51:f8:
         31:10:0b:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAYuKB/JVpttvI39YBf0IDNyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMTAxMDgzNzM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjAyNTBkYzY2MjFmNjk3NjRmYTdiNWYzOTljYmE4MmMzNDQ1MDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1tsfYW1fotC1eBQXmqm7TdWzKdt
y0nLpOsDh5IBPBYERBS85vi5rsIzP76udEphSH+3PoEfEYggm5f6yIFZJMZfIqpW
otFsSh3mqfzhRMoYGinY8Ui3McQa83kMbT17rVsPsOJerRUXqyI3tnvj67S2iLPn
T86WEkPdgHMHrCjhISqWfRA4XG6lpRjG5rUQcMYfVvFzOSWQWtcfWgvBk9ELdVKf
l4G891Z2HpRt0N4Y3pNhTqhE4A6mg53nBx0Hf6aDaWFQei4XGz9/PK2lqS6rmqEK
AF7XxuPm6CrfupFLpSrcjRI0mZ8dJnvtfMAAoBTQhSscDCgrkRpfvk+sNQIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFPYCUNxmIfaXZPp7XzmcuoLDRFByMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzQxNTk0
NS01ZGNlLTQwZDctYjgwMC05MDcyNDExZTI0OTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvNDE1OTQ1
LTVkY2UtNDBkNy1iODAwLTkwNzI0MTFlMjQ5OC8xLzlnSlEzR1loOXBkay1udGZP
Wnk2Z3NORVVISS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQEUFOQAwQFU9lgAwQF2ZZgMA0GCSqGSIb3DQEB
CwUAA4IBAQAXbRFE4WyU6HXYVUruyjoftXzDQhdbLjV37iKsSMvsBSwwJWaI2/xM
hJ/6GBWbi0FrJRbJnj446ZBmipUzu7MKgM9zuhTiM6Bax9GhGX2ks0VIM+FSy1Bp
K92NaOfcnkSMqVxbxBd78UDiDJYUNVibYW62hR/3HpyEYVi9v4aqO8Hcb6zRo3b4
/HMGZSfNodibfbfUffVvWwmDnl+fHzXSrniY4flx2MxGXq+w+e7qqj7MFpZKB/5A
5UKVpkq/Rmujc3/HWN9u3+bjwPVLyCRp8AADKG3XGJcwZI0cYBDr5XhV5pmCQ2ZM
5oKv+g+GTFgG3hSljNmeuvkjUfgxEAvH
-----END CERTIFICATE-----