Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
File:                     AR5P_8S467AmSz4T-zzEdm86ihQ.cer (raw, json)
Hash identifier:          2fywoGEPlBxDwSRO7pkHJem58Uly6jIZa5ko4mMmq8E=
Subject key identifier:   01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED435696BFCA55DB57A02EF59E468C8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:39 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 210478
                          IP: 146.19.125.0/24
                          IP: 2a12:9f00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:35:69:6b:fc:a5:5d:b5:7a:02:ef:59:e4:68:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:0c:22:27:f9:ff:d2:48:19:de:08:ff:c4:
                    b4:4e:52:4e:2b:b8:38:64:aa:2e:6d:0f:b3:17:71:
                    9a:43:b2:70:1f:16:3e:eb:c9:69:1e:d7:91:74:ad:
                    e2:af:d6:5e:9e:82:1a:a1:f8:70:79:40:d0:6e:eb:
                    cc:29:03:2e:06:82:21:a9:4c:c7:c3:3c:ca:d5:3f:
                    3e:38:c9:a0:f4:16:c9:4f:37:dd:98:da:9d:67:13:
                    47:11:05:bb:1a:c8:b4:89:96:12:ac:fd:67:ff:8b:
                    aa:0a:7e:ed:cb:c4:b9:0d:a3:47:5f:f2:ae:e3:cb:
                    8e:2b:b6:87:e6:05:36:1e:39:77:11:02:5e:7b:e4:
                    b9:34:fc:51:3c:4d:eb:b8:ee:36:a4:98:35:f2:a7:
                    e0:c2:03:7f:11:ea:04:e8:5c:f1:f4:4a:d7:aa:e9:
                    82:7b:8a:bc:ef:91:04:d8:dc:35:6c:ee:72:eb:1d:
                    01:98:16:6d:9f:ef:54:69:8e:ac:b4:21:21:d6:92:
                    b5:b8:be:fd:95:a8:2d:6e:ed:9e:00:9c:e8:1f:ae:
                    49:14:5c:b8:13:50:81:5a:a1:9e:ac:72:fd:07:57:
                    95:25:65:1b:3b:62:9d:80:64:8f:3b:82:24:96:22:
                    f5:c0:38:ab:35:9b:fd:f3:71:ec:86:d7:bf:a2:41:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.125.0/24
                IPv6:
                  2a12:9f00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210478

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:6c:bd:7b:cd:e2:aa:d0:b6:1f:2a:0c:e9:82:cf:0d:60:
         32:0f:9b:b4:4a:2a:ee:c6:63:83:d0:42:e9:eb:34:0f:b6:8d:
         80:08:5d:cf:85:e1:37:ab:2f:64:3b:c9:f9:8b:eb:e3:e2:76:
         e4:45:a3:e5:ce:5c:9a:cf:44:66:be:95:ad:82:d5:54:0c:a6:
         17:ae:aa:9f:16:71:36:61:2d:be:59:27:fd:70:c5:ac:a4:6a:
         47:04:bd:ff:f2:d6:7e:bc:ca:54:5f:31:36:fc:21:00:9c:6a:
         a4:f3:62:3b:d2:00:e0:1d:ab:37:50:2c:55:37:47:b8:3a:ac:
         d0:0d:34:3e:e6:a5:17:5d:03:99:cd:9c:24:85:4a:76:9e:87:
         fe:06:9d:c9:56:73:0b:8b:d9:75:7e:23:0d:5b:79:b3:de:c9:
         48:6d:e3:45:51:1b:95:2d:3f:01:ba:b0:06:2b:d6:3f:a0:3c:
         28:3d:ed:c1:78:1a:9c:59:e5:2a:90:86:5c:16:8f:e3:ad:fc:
         72:60:ed:bc:76:f0:5f:40:b6:5b:b0:76:76:99:92:e9:42:90:
         a3:d8:1a:13:f0:e1:a5:63:ed:22:d8:7f:77:d6:b3:6e:6e:eb:
         b1:b1:ee:0e:58:a6:b9:96:68:ab:d0:83:5b:c7:60:4d:35:4c:
         7e:ab:23:ab
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYVu1DVpa/ylXbV6Au9Z5GjIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTFlNGZmZmM0YjhlYmIwMjY0YjNlMTNmYjNjYzQ3NjZmM2E4YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvssMIif5/9JIGd4I/8S0TlJOK7g4
ZKoubQ+zF3GaQ7JwHxY+68lpHteRdK3ir9ZenoIaofhweUDQbuvMKQMuBoIhqUzH
wzzK1T8+OMmg9BbJTzfdmNqdZxNHEQW7Gsi0iZYSrP1n/4uqCn7ty8S5DaNHX/Ku
48uOK7aH5gU2Hjl3EQJee+S5NPxRPE3ruO42pJg18qfgwgN/EeoE6Fzx9ErXqumC
e4q875EE2Nw1bO5y6x0BmBZtn+9UaY6stCEh1pK1uL79lagtbu2eAJzoH65JFFy4
E1CBWqGerHL9B1eVJWUbO2KdgGSPO4IkliL1wDirNZv983Hshte/okF5pwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFAEeT//EuOuwJks+E/s8xHZvOooUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzE0ZGY0
OC1lMTY0LTQwYTAtYjA3Ny0zMGMxZGY5MjY4Y2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvMTRkZjQ4
LWUxNjQtNDBhMC1iMDc3LTMwYzFkZjkyNjhjYy8xL0FSNVBfOFM0NjdBbVN6NFQt
enpFZG04NmloUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhN9MA0EAgACMAcDBQMqEp8AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM2LjANBgkqhkiG9w0BAQsFAAOCAQEAfLpsvXvN4qrQ
th8qDOmCzw1gMg+btEoq7sZjg9BC6es0D7aNgAhdz4XhN6svZDvJ+Yvr4+J25EWj
5c5cms9EZr6VrYLVVAymF66qnxZxNmEtvlkn/XDFrKRqRwS9//LWfrzKVF8xNvwh
AJxqpPNiO9IA4B2rN1AsVTdHuDqs0A00PualF10Dmc2cJIVKdp6H/gadyVZzC4vZ
dX4jDVt5s97JSG3jRVEblS0/AbqwBivWP6A8KD3twXganFnlKpCGXBaP4638cmDt
vHbwX0C2W7B2dpmS6UKQo9gaE/DhpWPtIth/d9azbm7rsbHuDlimuZZoq9CDW8dg
TTVMfqsjqw==
-----END CERTIFICATE-----