Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
File:                     CbnTdFC2KuPxROtCrFLOJDtiino.cer (raw, json)
Hash identifier:          tbnewy4w88SB2PUsH9WpWWiVusXSV+7Yg7U/2qQyUlU=
Subject key identifier:   09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0AEFB4561601D0E67788C64EFEB72
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:31:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 59462
                          IP: 185.22.231.0/24
                          IP: 185.150.16.0/22
                          IP: 2a0e:d480::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:ae:fb:45:61:60:1d:0e:67:78:8c:64:ef:eb:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:31:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:83:e7:cb:26:dc:1f:0f:12:9c:68:24:44:
                    06:7d:86:bd:73:95:8c:2c:91:67:89:6b:c0:29:9d:
                    04:78:9d:94:f9:4c:ce:86:a5:22:de:d1:37:4b:98:
                    6d:07:75:95:f7:71:55:8a:53:38:8f:4e:c7:72:5c:
                    79:4e:92:4f:d9:10:b8:cf:29:8b:cd:70:61:01:34:
                    22:08:01:c1:a1:af:3d:c2:32:84:7f:70:4a:10:2e:
                    9f:7d:d7:db:48:f1:a0:12:0e:9a:02:c0:b7:fc:e0:
                    a7:46:6d:2b:1a:f7:0a:12:4c:2c:c0:35:33:e5:e4:
                    4c:37:d4:07:cf:7a:92:f1:6c:f9:49:87:b8:f9:e2:
                    66:39:13:63:94:13:8f:f1:d2:67:ce:72:c4:3e:3e:
                    35:24:bb:9b:49:4f:0f:38:bb:6c:f5:05:bc:20:e4:
                    65:75:f7:34:0c:09:e9:c6:9e:51:7d:c6:13:8c:28:
                    d0:5d:a2:6e:d7:a8:2f:d7:be:ce:76:e1:96:34:e1:
                    16:4d:c9:c0:73:5d:97:a3:6e:ad:fb:99:80:e9:de:
                    5b:1f:48:2a:31:21:78:58:18:72:76:c0:b2:cf:35:
                    7e:38:e8:29:32:71:77:8e:72:a2:3f:9c:ec:a3:09:
                    96:a1:b1:fa:96:8a:9e:9c:6b:88:ee:ac:89:af:9e:
                    ca:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.22.231.0/24
                  185.150.16.0/22
                IPv6:
                  2a0e:d480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59462

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:66:cb:26:0c:32:e1:32:a0:a8:8c:4c:55:a5:3b:11:9f:
         b3:09:1b:96:86:5d:82:4b:98:31:33:08:4e:bf:e8:f6:ef:6b:
         90:1e:32:ce:f5:9e:b6:bb:70:4d:4f:b6:6e:c6:db:70:fb:a9:
         4b:79:6b:56:76:1e:3e:42:51:28:a4:0b:0c:4b:c7:9d:fa:63:
         5c:05:86:a1:29:61:d3:40:e1:e9:79:cd:6d:a3:f1:bc:40:50:
         0d:bd:53:9a:b3:44:4a:c0:ba:a2:bb:55:8a:df:59:4c:87:eb:
         9d:95:c6:04:ea:24:6f:35:6a:2c:42:13:03:19:c1:5d:f4:f1:
         b4:11:3e:ba:7c:96:01:23:a3:bb:eb:cf:a1:91:5a:44:2a:3e:
         0b:f8:2f:82:35:1b:3e:df:6f:12:45:88:e9:9d:04:a4:39:fc:
         50:94:33:db:98:53:f9:3b:32:d5:73:ca:6e:26:a1:45:32:ad:
         7b:8b:92:85:bb:73:c9:02:3a:64:43:80:9f:7a:cf:a0:37:76:
         15:e1:b9:6d:85:a4:76:4e:e9:60:fa:5a:46:93:cd:8b:de:e2:
         04:e3:d8:e4:91:21:b6:bb:32:32:f7:57:df:66:d8:32:73:39:
         8e:05:fe:15:5b:8e:55:ae:9b:b0:b1:86:79:f9:ff:53:3b:72:
         94:67:f4:d5
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYVr0K77RWFgHQ5neIxk7+tyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWI5ZDM3NDUwYjYyYWUzZjE0NGViNDJhYzUyY2UyNDNiNjI4YTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUaD58sm3B8PEpxoJEQGfYa9c5WM
LJFniWvAKZ0EeJ2U+UzOhqUi3tE3S5htB3WV93FVilM4j07Hclx5TpJP2RC4zymL
zXBhATQiCAHBoa89wjKEf3BKEC6ffdfbSPGgEg6aAsC3/OCnRm0rGvcKEkwswDUz
5eRMN9QHz3qS8Wz5SYe4+eJmORNjlBOP8dJnznLEPj41JLubSU8POLts9QW8IORl
dfc0DAnpxp5RfcYTjCjQXaJu16gv177OduGWNOEWTcnAc12Xo26t+5mA6d5bH0gq
MSF4WBhydsCyzzV+OOgpMnF3jnKiP5zsowmWobH6loqenGuI7qyJr57KEQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFAm503RQtirj8UTrQqxSziQ7Yop6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwL2U1YzBi
Ni04Nzg4LTRiYjktYjg4NS0zZmJmYjk0ZDkxMDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvZTVjMGI2
LTg3ODgtNGJiOS1iODg1LTNmYmZiOTRkOTEwMC8xL0NiblRkRkMyS3VQeFJPdENy
RkxPSkR0aWluby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAuRbnAwQCuZYQMA0EAgACMAcDBQMqDtSAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDoRjANBgkqhkiG9w0BAQsFAAOCAQEATaFm
yyYMMuEyoKiMTFWlOxGfswkbloZdgkuYMTMITr/o9u9rkB4yzvWetrtwTU+2bsbb
cPupS3lrVnYePkJRKKQLDEvHnfpjXAWGoSlh00Dh6XnNbaPxvEBQDb1TmrNESsC6
ortVit9ZTIfrnZXGBOokbzVqLEITAxnBXfTxtBE+unyWASOju+vPoZFaRCo+C/gv
gjUbPt9vEkWI6Z0EpDn8UJQz25hT+Tsy1XPKbiahRTKte4uShbtzyQI6ZEOAn3rP
oDd2FeG5bYWkdk7pYPpaRpPNi97iBOPY5JEhtrsyMvdX32bYMnM5jgX+FVuOVa6b
sLGGefn/UztylGf01Q==
-----END CERTIFICATE-----