Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BEYIXI3zXhSueqOcM5noWIMGorU.cer
File:                     BEYIXI3zXhSueqOcM5noWIMGorU.cer (raw, json)
Hash identifier:          /GJBNzgr06z24nNNFG8t+DEFHDGsZqMNSvFvgXK1UAM=
Subject key identifier:   04:46:08:5C:8D:F3:5E:14:AE:7A:A3:9C:33:99:E8:58:83:06:A2:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED40E963A4B26569D72AC14FF6A7AC0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/BEYIXI3zXhSueqOcM5noWIMGorU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.61.0/24
                          IP: 2a12:5d00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:0e:96:3a:4b:26:56:9d:72:ac:14:ff:6a:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0446085c8df35e14ae7aa39c3399e8588306a2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:f6:3d:7f:2a:fe:35:a9:98:c0:c2:62:5d:
                    99:4c:14:0c:f7:9b:de:ce:1d:77:55:ac:db:ca:d4:
                    8a:51:82:33:76:e9:2c:1b:d9:4e:fd:a7:97:a0:4e:
                    5d:67:a4:26:73:37:1c:1b:89:7f:15:25:ed:75:06:
                    14:eb:46:54:5f:e5:b0:52:f0:fc:84:9b:fe:f5:5c:
                    65:b7:62:df:03:b6:69:7f:23:f1:7f:b0:82:8a:65:
                    07:75:16:4c:2a:d1:2a:05:07:64:dd:4f:80:0d:93:
                    3d:60:6d:8a:8b:1a:3e:fd:d1:39:e0:e3:8b:a1:a8:
                    4d:f2:13:1f:f2:0c:28:13:37:c8:b3:cc:86:69:78:
                    04:66:2f:d9:d5:08:90:c2:95:f3:f8:c4:d4:d6:3b:
                    6c:7d:d2:cf:fe:96:56:48:0c:22:ea:33:11:44:cd:
                    b0:bb:14:6f:76:93:a7:9f:87:2f:ca:46:fe:46:42:
                    79:49:66:8a:88:45:8d:78:3b:22:ca:06:c6:59:7a:
                    c6:86:5b:cd:03:8e:e9:ba:07:76:2a:26:f3:a2:e2:
                    57:81:16:24:e1:45:c6:47:2e:73:22:3c:d8:e4:fb:
                    c2:3c:bd:07:52:b2:4a:cb:59:01:1b:c9:75:de:2f:
                    e5:f6:42:7d:aa:71:e0:90:08:a4:69:2e:5d:7d:c0:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:46:08:5C:8D:F3:5E:14:AE:7A:A3:9C:33:99:E8:58:83:06:A2:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/BEYIXI3zXhSueqOcM5noWIMGorU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.61.0/24
                IPv6:
                  2a12:5d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:88:bd:8c:76:c7:0d:21:50:01:01:b4:30:1d:b7:97:7a:4a:
         49:9b:60:03:1f:10:9d:b1:cb:03:5d:b6:c6:f5:35:0c:5f:e1:
         c9:c4:44:e2:dc:84:8f:c9:5e:b9:16:8e:1c:d1:58:d3:4a:5f:
         cb:b2:33:c7:e7:0f:26:c7:76:f1:25:2f:e0:bb:4e:d3:e5:0a:
         03:75:72:68:16:ce:4a:b0:67:33:21:59:b1:08:1e:43:40:39:
         57:69:06:08:ad:3c:3f:e6:ec:7b:8a:da:d1:88:ef:cd:00:b5:
         36:3c:9d:c9:b9:61:d6:d7:eb:e9:32:7d:1e:fa:07:12:a9:a6:
         c8:83:92:88:43:58:b3:ea:ae:f4:eb:6f:eb:6a:63:08:98:bf:
         2a:96:d8:f8:16:a1:0c:85:4c:55:2f:ee:d6:9c:19:87:95:e8:
         24:9e:ef:60:6b:29:c9:24:dc:d6:eb:82:90:f9:0e:1b:29:04:
         d4:a6:46:b4:5d:1e:4f:83:46:e9:65:00:38:c4:c2:f3:d0:34:
         be:1b:91:9c:65:de:57:3f:71:fa:52:df:d1:8e:5f:82:e7:fe:
         8c:90:b7:8e:6a:05:07:e9:91:bd:0a:9b:25:85:87:b5:05:33:
         5f:ef:5c:31:66:d5:cd:3c:55:40:b7:63:be:2c:c5:5e:cc:31:
         3e:71:4d:a3
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu1A6WOksmVp1yrBT/anrAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDQ2MDg1YzhkZjM1ZTE0YWU3YWEzOWMzMzk5ZTg1ODgzMDZhMmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAv2PX8q/jWpmMDCYl2ZTBQM95ve
zh13VazbytSKUYIzduksG9lO/aeXoE5dZ6QmczccG4l/FSXtdQYU60ZUX+WwUvD8
hJv+9Vxlt2LfA7ZpfyPxf7CCimUHdRZMKtEqBQdk3U+ADZM9YG2Kixo+/dE54OOL
oahN8hMf8gwoEzfIs8yGaXgEZi/Z1QiQwpXz+MTU1jtsfdLP/pZWSAwi6jMRRM2w
uxRvdpOnn4cvykb+RkJ5SWaKiEWNeDsiygbGWXrGhlvNA47pugd2KibzouJXgRYk
4UXGRy5zIjzY5PvCPL0HUrJKy1kBG8l13i/l9kJ9qnHgkAikaS5dfcDhOQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFARGCFyN814UrnqjnDOZ6FiDBqK1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzdjMDA1
YS0xODk1LTQ2YTktYTU2MC1iMWM2OWJlZDcxZGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvN2MwMDVh
LTE4OTUtNDZhOS1hNTYwLWIxYzY5YmVkNzFkZi8xL0JFWUlYSTN6WGhTdWVxT2NN
NW5vV0lNR29yVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhM9MA0EAgACMAcDBQMqEl0AMA0GCSqGSIb3
DQEBCwUAA4IBAQCZiL2MdscNIVABAbQwHbeXekpJm2ADHxCdscsDXbbG9TUMX+HJ
xETi3ISPyV65Fo4c0VjTSl/LsjPH5w8mx3bxJS/gu07T5QoDdXJoFs5KsGczIVmx
CB5DQDlXaQYIrTw/5ux7itrRiO/NALU2PJ3JuWHW1+vpMn0e+gcSqabIg5KIQ1iz
6q7062/ramMImL8qltj4FqEMhUxVL+7WnBmHlegknu9gaynJJNzW64KQ+Q4bKQTU
pka0XR5Pg0bpZQA4xMLz0DS+G5GcZd5XP3H6Ut/Rjl+C5/6MkLeOagUH6ZG9Cpsl
hYe1BTNf71wxZtXNPFVAt2O+LMVezDE+cU2j
-----END CERTIFICATE-----