Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BSnk3kvBH-2RAaUIJKqk4mOKumo.cer
File:                     BSnk3kvBH-2RAaUIJKqk4mOKumo.cer (raw, json)
Hash identifier:          N4EnwVIhrxdinBzBdbFSqWkX27MgMCgLdvucG+jXpFo=
Subject key identifier:   05:29:E4:DE:4B:C1:1F:ED:91:01:A5:08:24:AA:A4:E2:63:8A:BA:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F40999BE43FC9E755EE15FDF09423F1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/BSnk3kvBH-2RAaUIJKqk4mOKumo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:33:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.146.67.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:40:99:9b:e4:3f:c9:e7:55:ee:15:fd:f0:94:23:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:33:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0529e4de4bc11fed9101a50824aaa4e2638aba6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:56:08:1b:dd:10:ae:d7:f7:bc:d1:46:80:
                    47:e7:23:a4:b1:03:c4:d7:61:8e:f6:9b:af:f9:5c:
                    1e:61:85:c6:e3:f5:b8:12:a4:9c:b7:22:7c:20:37:
                    55:44:1e:80:93:12:b6:3b:96:e2:7c:5e:40:75:fa:
                    3d:b5:a0:65:37:30:3d:04:53:15:22:07:0f:ea:ce:
                    00:94:0a:c6:da:cb:59:d1:0a:19:9c:39:fb:1f:3c:
                    e9:e1:45:06:b4:60:3a:5b:e5:fd:66:9a:eb:7e:90:
                    f6:ec:5c:c2:01:7d:3a:42:cd:91:91:18:97:27:56:
                    2c:31:97:6b:d7:60:5c:48:f0:1e:97:21:3e:98:03:
                    ff:a6:16:69:17:cd:0c:4c:18:4f:6a:b3:e8:77:a4:
                    96:16:14:ce:07:de:fc:ee:92:44:ab:f6:a7:cf:36:
                    d5:bb:4b:2a:c5:89:7d:23:7c:a8:3b:4d:08:d0:b3:
                    52:0b:0f:aa:60:7f:94:4d:b1:d9:c1:ea:67:b6:e8:
                    85:98:92:89:b6:56:9c:0d:ed:75:8c:3c:17:9b:16:
                    cb:20:85:e7:77:d6:f8:2d:0f:bf:68:5c:0e:ab:7c:
                    5a:16:2c:91:d5:df:6e:33:d2:11:ca:5e:fc:be:ed:
                    73:d1:0e:ea:ca:ca:ab:b6:f3:df:1c:32:3c:4b:68:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:29:E4:DE:4B:C1:1F:ED:91:01:A5:08:24:AA:A4:E2:63:8A:BA:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/BSnk3kvBH-2RAaUIJKqk4mOKumo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.146.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:93:08:45:f2:e5:75:25:d6:2c:86:3e:6f:e4:7b:cf:39:
         77:4e:4d:18:67:06:4a:7b:ec:89:3e:3a:81:40:10:a2:87:f7:
         59:7c:7e:b2:9c:19:1f:47:54:b6:12:66:fc:ff:91:ce:aa:12:
         d3:2f:6a:a9:b1:3e:c0:bf:87:4d:1c:4f:8a:ff:07:0a:f6:b5:
         72:c9:f8:ad:ea:cb:5e:e7:37:24:6e:1d:e8:c9:ee:27:28:69:
         61:35:08:85:49:57:d7:88:d4:83:ae:0a:f8:76:b4:1e:64:f3:
         34:8b:2b:b6:0f:9e:f1:85:65:2f:c5:55:e6:16:f9:96:f6:b3:
         38:4f:cc:e0:8a:d8:85:7f:62:48:f6:16:72:3c:14:98:07:6f:
         67:63:92:2b:f1:57:58:0c:58:d0:1b:3f:b6:f2:09:d0:28:74:
         f7:50:22:55:89:b1:38:45:95:9d:1d:98:c5:2b:dd:41:3b:26:
         71:1a:89:d8:5c:69:60:78:9a:88:93:ab:69:67:cc:b3:d8:b9:
         c8:8f:d5:c1:8f:fa:96:e3:b3:b0:c1:45:10:14:23:2b:82:76:
         f4:05:80:7d:37:b0:c3:0f:d6:70:9d:bc:b3:c0:d5:45:29:a4:
         7e:54:bb:b0:8b:96:3e:62:18:e9:9d:d9:f6:a8:14:0e:d8:ca:
         a3:87:f1:c7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVvQJmb5D/J51XuFf3wlCPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjEzMzAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTI5ZTRkZTRiYzExZmVkOTEwMWE1MDgyNGFhYTRlMjYzOGFiYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pZWCBvdEK7X97zRRoBH5yOksQPE
12GO9puv+VweYYXG4/W4EqSctyJ8IDdVRB6AkxK2O5bifF5Adfo9taBlNzA9BFMV
IgcP6s4AlArG2stZ0QoZnDn7Hzzp4UUGtGA6W+X9ZprrfpD27FzCAX06Qs2RkRiX
J1YsMZdr12BcSPAelyE+mAP/phZpF80MTBhParPod6SWFhTOB9787pJEq/anzzbV
u0sqxYl9I3yoO00I0LNSCw+qYH+UTbHZwepntuiFmJKJtlacDe11jDwXmxbLIIXn
d9b4LQ+/aFwOq3xaFiyR1d9uM9IRyl78vu1z0Q7qysqrtvPfHDI8S2iP1QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAUp5N5LwR/tkQGlCCSqpOJjirpqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzYzYTYx
MC0zMzA2LTQ2MmUtODg5OS0xMDYzMGU3NGYxNzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvNjNhNjEw
LTMzMDYtNDYyZS04ODk5LTEwNjMwZTc0ZjE3NC8xL0JTbmsza3ZCSC0yUkFhVUlK
S3FrNG1PS3Vtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuZJDMA0GCSqGSIb3DQEBCwUAA4IBAQA2uZMI
RfLldSXWLIY+b+R7zzl3Tk0YZwZKe+yJPjqBQBCih/dZfH6ynBkfR1S2Emb8/5HO
qhLTL2qpsT7Av4dNHE+K/wcK9rVyyfit6ste5zckbh3oye4nKGlhNQiFSVfXiNSD
rgr4drQeZPM0iyu2D57xhWUvxVXmFvmW9rM4T8zgitiFf2JI9hZyPBSYB29nY5Ir
8VdYDFjQGz+28gnQKHT3UCJVibE4RZWdHZjFK91BOyZxGonYXGlgeJqIk6tpZ8yz
2LnIj9XBj/qW47OwwUUQFCMrgnb0BYB9N7DDD9ZwnbyzwNVFKaR+VLuwi5Y+Yhjp
ndn2qBQO2Mqjh/HH
-----END CERTIFICATE-----