Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B611K92RoNMWQMQjBMriqC-BfHU.cer
File:                     B611K92RoNMWQMQjBMriqC-BfHU.cer (raw, json)
Hash identifier:          ltrGYcsG52V8wGTz/pLnAmb90tfRxoOS6zjEZ8RuqvM=
Subject key identifier:   07:AD:75:2B:DD:91:A0:D3:16:40:C4:23:04:CA:E2:A8:2F:81:7C:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018692F8F69A07F3F6C30F57530442AB3B2E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/20/be718b-92a9-444b-ae0a-f75e5d853176/1/B611K92RoNMWQMQjBMriqC-BfHU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/20/be718b-92a9-444b-ae0a-f75e5d853176/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 27 Feb 2023 13:03:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.16.74.0/24

Validation:               Failed, certificate revoked on Wed 04 Oct 2023 07:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:f8:f6:9a:07:f3:f6:c3:0f:57:53:04:42:ab:3b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 27 13:03:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07ad752bdd91a0d31640c42304cae2a82f817c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:3c:ed:75:f3:cf:30:c0:d8:36:91:c2:32:
                    c5:35:83:cc:7c:95:42:31:32:f7:ba:a2:36:24:22:
                    a3:b6:1c:ac:8f:0b:91:c5:6c:e3:31:ad:16:1c:02:
                    11:b5:92:e1:81:2d:2f:25:32:e6:11:e7:3d:3b:93:
                    c9:8c:1e:70:56:d9:7c:79:c4:9f:60:35:61:71:2a:
                    f2:b1:5f:c3:b0:64:b1:78:d7:4a:26:a7:a7:1c:7c:
                    97:8f:13:af:f9:03:69:58:bf:d0:33:d3:fa:0a:57:
                    4f:b2:c3:1b:24:6f:36:78:13:5a:e3:61:08:d8:3f:
                    46:c5:91:b7:be:be:6e:ff:5f:a8:71:14:07:c4:75:
                    21:de:27:e2:4e:2f:51:ae:b4:02:7a:2b:ec:5b:ac:
                    ce:7a:2f:8c:ce:53:92:23:3d:b5:80:32:f3:e8:b1:
                    e1:a4:7a:f3:13:01:30:1f:b1:4a:de:28:dd:c5:87:
                    c9:f8:33:59:30:56:de:d2:38:33:81:f2:13:35:a2:
                    e0:8e:c3:21:ca:94:8d:f2:c8:d2:ac:13:d3:cd:cb:
                    3b:84:f1:68:77:cc:7a:cb:07:4c:f2:ec:00:dd:71:
                    db:f9:3c:53:5c:38:e1:89:87:b9:33:6f:cf:e0:d6:
                    27:05:e0:fe:28:35:ac:8f:8a:78:ab:9b:e1:c8:de:
                    7d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AD:75:2B:DD:91:A0:D3:16:40:C4:23:04:CA:E2:A8:2F:81:7C:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/be718b-92a9-444b-ae0a-f75e5d853176/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/be718b-92a9-444b-ae0a-f75e5d853176/1/B611K92RoNMWQMQjBMriqC-BfHU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.16.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:71:d0:05:55:74:62:85:53:75:33:a4:b0:e1:69:81:a4:85:
         69:d8:b4:09:08:bb:cd:a9:03:ef:a9:65:49:4a:5b:b1:8b:7d:
         e5:50:37:05:25:ba:5e:63:00:8c:dd:36:3c:61:8c:d2:65:c4:
         61:04:87:fb:81:9f:c2:2f:b5:06:fe:2d:db:1d:14:26:84:c3:
         b6:64:9b:02:cb:f3:4d:76:62:4e:c1:97:15:25:f9:51:e9:2f:
         d2:cb:d9:5e:80:10:05:6b:90:2c:7e:3a:3e:fb:06:fd:ec:65:
         f7:21:af:74:c4:85:a9:6e:43:d5:c6:72:53:24:84:8c:06:c3:
         03:bd:03:2b:2e:0e:54:14:e6:63:e6:8d:e2:13:e8:f2:c7:21:
         8b:0e:5b:a3:41:55:2f:01:e4:89:bd:ef:10:e7:7e:ef:40:62:
         02:df:9d:4e:0e:9b:e8:28:4c:de:8d:16:52:b1:cf:d3:60:75:
         59:7f:f0:21:5a:c2:a3:45:04:f6:a0:bc:d4:60:3f:0f:57:32:
         8d:d8:26:7b:13:2e:38:1d:64:63:4a:b3:0a:a0:98:f8:fc:37:
         a1:ab:c9:31:13:10:63:cf:be:d3:cb:c9:56:43:fa:40:92:cd:
         af:35:9a:f8:0f:1b:12:81:9c:66:0e:f6:f7:a7:df:94:5c:2d:
         af:96:2a:a6
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYaS+PaaB/P2ww9XUwRCqzsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMjI3MTMwMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2FkNzUyYmRkOTFhMGQzMTY0MGM0MjMwNGNhZTJhODJmODE3Yzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKs87XXzzzDA2DaRwjLFNYPMfJVC
MTL3uqI2JCKjthysjwuRxWzjMa0WHAIRtZLhgS0vJTLmEec9O5PJjB5wVtl8ecSf
YDVhcSrysV/DsGSxeNdKJqenHHyXjxOv+QNpWL/QM9P6CldPssMbJG82eBNa42EI
2D9GxZG3vr5u/1+ocRQHxHUh3ifiTi9RrrQCeivsW6zOei+MzlOSIz21gDLz6LHh
pHrzEwEwH7FK3ijdxYfJ+DNZMFbe0jgzgfITNaLgjsMhypSN8sjSrBPTzcs7hPFo
d8x6ywdM8uwA3XHb+TxTXDjhiYe5M2/P4NYnBeD+KDWsj4p4q5vhyN590wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAetdSvdkaDTFkDEIwTK4qgvgXx1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2JlNzE4
Yi05MmE5LTQ0NGItYWUwYS1mNzVlNWQ4NTMxNzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYmU3MThi
LTkyYTktNDQ0Yi1hZTBhLWY3NWU1ZDg1MzE3Ni8xL0I2MTFLOTJSb05NV1FNUWpC
TXJpcUMtQmZIVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAJRBKMA0GCSqGSIb3DQEBCwUAA4IBAQBVcdAF
VXRihVN1M6Sw4WmBpIVp2LQJCLvNqQPvqWVJSluxi33lUDcFJbpeYwCM3TY8YYzS
ZcRhBIf7gZ/CL7UG/i3bHRQmhMO2ZJsCy/NNdmJOwZcVJflR6S/Sy9legBAFa5As
fjo++wb97GX3Ia90xIWpbkPVxnJTJISMBsMDvQMrLg5UFOZj5o3iE+jyxyGLDluj
QVUvAeSJve8Q537vQGIC351ODpvoKEzejRZSsc/TYHVZf/AhWsKjRQT2oLzUYD8P
VzKN2CZ7Ey44HWRjSrMKoJj4/Dehq8kxExBjz77Ty8lWQ/pAks2vNZr4DxsSgZxm
Dvb3p9+UXC2vliqm
-----END CERTIFICATE-----