Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer
File:                     9iUymQAfLRoBpRcFbNV39Bw063E.cer (raw, json)
Hash identifier:          6c0F+kbuySNDmoV0zLXNkWqJ1ZSjD/KhTrNCY7opizg=
Subject key identifier:   F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01887C282910B1ED10DCA231FC21DA30A270
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 12:49:46 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.18.114.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7c:28:29:10:b1:ed:10:dc:a2:31:fc:21:da:30:a2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  2 12:49:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f6253299001f2d1a01a517056cd577f41c34eb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:53:79:f4:b8:3e:27:90:47:7e:df:5c:61:
                    c3:d9:f5:d6:8a:c5:1f:61:d1:3f:e7:0c:39:ed:25:
                    87:55:ed:4d:31:e6:21:a5:1f:eb:de:a9:ea:8d:dc:
                    88:b3:e9:ab:81:4e:b4:7a:69:fb:4a:31:e4:de:6d:
                    bc:fe:7d:38:9f:2a:75:88:a3:88:3d:13:83:a9:85:
                    6f:06:33:f2:a9:0b:b5:09:af:cf:e9:04:47:11:84:
                    04:b8:01:4b:56:5d:c4:56:0f:35:f7:d8:23:29:2b:
                    c5:8c:06:ea:9c:18:f7:77:30:bb:6a:27:6c:7c:57:
                    6a:10:0a:54:e7:f8:a9:ca:35:ec:8f:33:7c:bf:96:
                    bd:d0:d7:a9:e2:28:31:46:1c:9d:dc:53:8c:51:be:
                    6e:86:07:76:e3:13:db:d4:d2:f8:b5:e2:77:b6:9e:
                    d7:f1:17:74:71:9f:89:f3:bd:0f:58:45:f1:d9:96:
                    68:59:ce:54:0f:c9:85:07:fb:0c:c6:82:97:55:35:
                    e4:76:c6:62:54:95:66:a9:27:21:2c:0b:6e:63:6f:
                    17:a5:63:fe:40:fc:34:82:16:8d:89:1a:3f:df:77:
                    b6:e1:7b:10:00:05:12:d7:79:50:52:9f:a9:fd:f9:
                    bf:94:94:46:46:b2:e4:85:6e:cc:b3:cc:9b:69:97:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:51:a9:a1:95:d9:e9:2c:51:48:ed:35:d2:ec:19:b0:f4:32:
         67:91:64:21:fb:a6:32:d3:6c:85:f0:b4:e1:44:1b:4b:2f:0c:
         c1:a6:cf:b2:76:ad:4b:f4:6e:9f:ee:01:ff:43:00:85:cd:86:
         52:06:2b:32:63:2f:a3:27:13:a0:e3:7f:c8:ab:ee:07:ee:5e:
         86:4d:9d:03:57:cf:30:d0:c7:ad:f2:ae:01:37:24:8c:e0:54:
         9b:ef:98:fc:95:2b:62:ec:36:87:9e:d6:ae:82:30:f4:10:b8:
         48:ea:06:cf:a5:15:5d:40:26:0c:52:9b:a9:d3:99:4d:24:19:
         73:d0:23:85:07:ad:f4:f8:2e:b1:e1:01:c6:b8:36:b2:82:2a:
         c0:5f:fd:d9:4f:26:66:74:03:1b:a5:48:22:70:c8:cb:7d:97:
         39:4d:0a:65:0c:4b:e4:47:44:a7:d3:78:52:0a:32:20:3f:31:
         89:10:f1:43:37:87:ce:a2:49:bd:e6:0e:f5:c4:3c:1f:b0:c5:
         99:eb:2b:98:22:aa:ac:f3:94:fb:67:04:a0:0a:8c:3a:4d:4e:
         ae:91:d6:c8:55:ab:ed:12:26:5e:d9:71:69:1b:76:22:cc:19:
         d2:e5:51:68:7e:11:9a:98:d6:ba:45:3a:ce:10:ba:b6:00:6f:
         1a:3c:1f:bd
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYh8KCkQse0Q3KIx/CHaMKJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNjAyMTI0OTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjI1MzI5OTAwMWYyZDFhMDFhNTE3MDU2Y2Q1NzdmNDFjMzRlYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPxTefS4PieQR37fXGHD2fXWisUf
YdE/5ww57SWHVe1NMeYhpR/r3qnqjdyIs+mrgU60emn7SjHk3m28/n04nyp1iKOI
PRODqYVvBjPyqQu1Ca/P6QRHEYQEuAFLVl3EVg8199gjKSvFjAbqnBj3dzC7aids
fFdqEApU5/ipyjXsjzN8v5a90Nep4igxRhyd3FOMUb5uhgd24xPb1NL4teJ3tp7X
8Rd0cZ+J870PWEXx2ZZoWc5UD8mFB/sMxoKXVTXkdsZiVJVmqSchLAtuY28XpWP+
QPw0ghaNiRo/33e24XsQAAUS13lQUp+p/fm/lJRGRrLkhW7Ms8ybaZdu+QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFPYlMpkAHy0aAaUXBWzVd/QcNOtxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzI1MzQ2
ZjMyLWY4MGUtNDRiNy04Nzc3LTUyYzk0NTFhMWNjOC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjUz
NDZmMzItZjgwZS00NGI3LTg3NzctNTJjOTQ1MWExY2M4LzAvRjYyNTMyOTkwMDFG
MkQxQTAxQTUxNzA1NkNENTc3RjQxQzM0RUI3MS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANQScjANBgkqhkiG9w0BAQsFAAOCAQEAZ1GpoZXZ6SxRSO010uwZsPQyZ5FkIfum
MtNshfC04UQbSy8MwabPsnatS/Run+4B/0MAhc2GUgYrMmMvoycToON/yKvuB+5e
hk2dA1fPMNDHrfKuATckjOBUm++Y/JUrYuw2h57WroIw9BC4SOoGz6UVXUAmDFKb
qdOZTSQZc9AjhQet9PguseEBxrg2soIqwF/92U8mZnQDG6VIInDIy32XOU0KZQxL
5EdEp9N4UgoyID8xiRDxQzeHzqJJveYO9cQ8H7DFmesrmCKqrPOU+2cEoAqMOk1O
rpHWyFWr7RImXtlxaRt2IswZ0uVRaH4RmpjWukU6zhC6tgBvGjwfvQ==
-----END CERTIFICATE-----