Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AWdSzx97l9fQ4v2gdj3b-0Y1DRQ.cer
File:                     AWdSzx97l9fQ4v2gdj3b-0Y1DRQ.cer (raw, json)
Hash identifier:          C7qv/jhwdckDfNPUymeb+rWVhKpDeRww45l6N5A/OJ8=
Subject key identifier:   01:67:52:CF:1F:7B:97:D7:D0:E2:FD:A0:76:3D:DB:FB:46:35:0D:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB0AAC2EA57BD3812CBF07713CFD0B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/d9b055-f09b-44ce-ab2b-43aba6e7c93c/1/AWdSzx97l9fQ4v2gdj3b-0Y1DRQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/d9b055-f09b-44ce-ab2b-43aba6e7c93c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:27 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199386

Validation:               Failed, certificate revoked on Wed 29 Mar 2023 10:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:aa:c2:ea:57:bd:38:12:cb:f0:77:13:cf:d0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=016752cf1f7b97d7d0e2fda0763ddbfb46350d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:82:43:e6:1c:92:14:5d:8c:34:b7:33:58:
                    57:13:b3:4f:5b:2b:18:4d:e1:ab:17:60:81:eb:a8:
                    de:1b:50:2c:f3:cd:6f:06:84:94:e3:ac:e6:1f:ba:
                    20:73:12:60:d0:43:86:6a:7d:0e:5d:66:39:4c:57:
                    6d:1b:08:55:65:eb:c3:7f:a9:53:50:b4:e8:30:94:
                    6c:5d:e5:0b:6e:bb:41:14:51:e3:39:33:bd:2c:4e:
                    f7:db:c3:16:93:56:69:63:90:a3:c3:db:4a:ea:91:
                    ac:dc:01:a1:b1:92:10:56:f4:61:c5:cb:5e:c2:ea:
                    a1:d1:38:ca:96:7d:ef:ea:71:c4:21:bf:90:cc:92:
                    09:b9:4b:37:d3:57:be:61:49:ff:5e:46:f6:c0:4a:
                    9b:d0:eb:86:62:e7:b0:66:6d:71:9b:76:8c:ef:9a:
                    04:fa:2c:b9:72:28:b3:b1:93:cc:18:bf:c1:2f:6c:
                    c3:78:54:ee:1d:0c:77:8e:15:5d:f6:1c:f9:8a:f9:
                    18:25:ce:35:7d:c8:07:f8:e6:de:e2:4f:9e:88:a3:
                    66:3c:32:dd:a3:ce:56:a7:8f:61:2e:48:82:4b:92:
                    e5:74:25:4f:38:43:eb:ad:44:56:84:82:91:4d:66:
                    09:eb:47:c8:08:19:84:b3:dc:b9:9e:b5:eb:6a:c4:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:67:52:CF:1F:7B:97:D7:D0:E2:FD:A0:76:3D:DB:FB:46:35:0D:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d9b055-f09b-44ce-ab2b-43aba6e7c93c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d9b055-f09b-44ce-ab2b-43aba6e7c93c/1/AWdSzx97l9fQ4v2gdj3b-0Y1DRQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199386

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:2e:54:37:c5:d5:01:b2:01:9b:65:39:30:43:2f:1c:84:
         6f:69:76:87:d7:b6:e0:d3:6e:a6:25:cf:f8:5c:39:61:b7:23:
         94:92:b5:72:8d:e2:ad:5a:a1:3c:7f:21:7a:eb:b3:e4:fc:01:
         b2:5e:99:78:2b:a3:1d:2a:17:8b:8e:bd:0c:26:e5:c1:1c:26:
         95:92:04:4a:44:3d:66:18:f6:32:23:67:88:72:29:95:35:78:
         af:3a:96:20:a1:d0:f6:f1:1f:24:d8:df:66:62:3f:5e:b9:93:
         b5:94:86:56:f8:b7:bc:79:1e:53:9c:57:2a:18:c0:85:7f:95:
         81:45:23:1a:35:e6:32:de:49:c4:40:4c:d8:20:2a:17:3f:ca:
         21:93:49:79:07:00:2c:5a:65:95:f7:c5:85:74:04:ef:0b:2c:
         3d:47:17:92:80:e2:45:7f:a4:73:42:96:88:18:6b:47:ed:26:
         51:7a:d9:05:2d:ab:ff:9c:f4:d0:3c:a1:28:e7:29:ef:30:ed:
         aa:99:52:03:0a:94:84:cc:8c:d0:f0:80:4f:fb:b9:73:eb:08:
         43:4a:4f:24:fe:b0:4c:63:41:ba:55:07:21:86:83:5b:85:b9:
         d8:24:1c:1d:42:6d:a7:f7:fb:8c:f3:4b:8e:23:95:13:56:d0:
         fa:85:a8:1d
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVvsKrC6le9OBLL8HcTz9CxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTY3NTJjZjFmN2I5N2Q3ZDBlMmZkYTA3NjNkZGJmYjQ2MzUwZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0geCQ+YckhRdjDS3M1hXE7NPWysY
TeGrF2CB66jeG1As881vBoSU46zmH7ogcxJg0EOGan0OXWY5TFdtGwhVZevDf6lT
ULToMJRsXeULbrtBFFHjOTO9LE7328MWk1ZpY5Cjw9tK6pGs3AGhsZIQVvRhxcte
wuqh0TjKln3v6nHEIb+QzJIJuUs301e+YUn/Xkb2wEqb0OuGYuewZm1xm3aM75oE
+iy5ciizsZPMGL/BL2zDeFTuHQx3jhVd9hz5ivkYJc41fcgH+Obe4k+eiKNmPDLd
o85Wp49hLkiCS5LldCVPOEPrrURWhIKRTWYJ60fICBmEs9y5nrXrasQHpQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAFnUs8fe5fX0OL9oHY92/tGNQ0UMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczL2Q5YjA1
NS1mMDliLTQ0Y2UtYWIyYi00M2FiYTZlN2M5M2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvZDliMDU1
LWYwOWItNDRjZS1hYjJiLTQzYWJhNmU3YzkzYy8xL0FXZFN6eDk3bDlmUTR2Mmdk
ajNiLTBZMURSUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMK2jANBgkqhkiG9w0BAQsFAAOCAQEAEa0uVDfF1QGy
AZtlOTBDLxyEb2l2h9e24NNupiXP+Fw5YbcjlJK1co3irVqhPH8heuuz5PwBsl6Z
eCujHSoXi469DCblwRwmlZIESkQ9Zhj2MiNniHIplTV4rzqWIKHQ9vEfJNjfZmI/
XrmTtZSGVvi3vHkeU5xXKhjAhX+VgUUjGjXmMt5JxEBM2CAqFz/KIZNJeQcALFpl
lffFhXQE7wssPUcXkoDiRX+kc0KWiBhrR+0mUXrZBS2r/5z00DyhKOcp7zDtqplS
AwqUhMyM0PCAT/u5c+sIQ0pPJP6wTGNBulUHIYaDW4W52CQcHUJtp/f7jPNLjiOV
E1bQ+oWoHQ==
-----END CERTIFICATE-----