Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
File:                     CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer (raw, json)
Hash identifier:          ScvWYc985SuWRC+TwK/VHTm3A2Hw6250IpDw5h5Ibaw=
Subject key identifier:   0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B61BEB1DD44BF65BCC6A3CC557D35A257
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 24 Oct 2023 12:52:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 46.31.64.0/24

Validation:               Failed, certificate revoked on Tue 31 Oct 2023 10:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:61:be:b1:dd:44:bf:65:bc:c6:a3:cc:55:7d:35:a2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 24 12:52:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:73:f3:4b:5a:8d:f3:3f:8e:f2:6d:21:6a:
                    9e:27:f7:1f:48:50:e8:df:5e:92:5e:b6:4d:07:ee:
                    e2:63:02:1d:dc:b5:81:04:11:81:36:6e:66:4c:45:
                    79:36:bd:39:d2:ea:3e:9c:73:68:cd:8d:c8:4c:3d:
                    b2:c9:85:91:11:e1:90:fd:6a:ea:85:75:c1:b3:49:
                    5a:d2:d9:e8:6e:a5:b5:38:1c:25:ea:36:47:55:af:
                    e6:3a:ab:dc:35:5c:2c:ba:05:3f:f2:33:4a:72:88:
                    28:4c:6a:fa:74:88:ab:32:25:d0:4f:5e:38:11:51:
                    76:96:46:40:75:3f:54:e8:64:b5:ab:5c:90:b8:f6:
                    c6:a0:72:6a:5c:c2:de:df:6c:4d:a8:a6:24:08:8a:
                    57:46:3e:1a:bf:f9:1b:53:fd:40:f0:f7:f0:71:17:
                    5a:b3:6b:5e:5a:3f:56:0a:fd:99:61:f7:b4:28:6e:
                    1d:8c:71:53:b8:3c:50:a3:b3:5a:45:ad:88:4b:ec:
                    d1:17:fa:7d:e7:ce:63:e2:38:4c:61:30:d6:94:b9:
                    a5:d5:0a:ed:12:8d:ae:03:52:7b:f2:da:ee:f6:c6:
                    64:3f:f1:4e:1d:35:a7:04:af:bd:48:fe:ff:12:3d:
                    6b:c6:e7:49:e3:35:50:e9:87:fa:0f:cb:ea:dc:63:
                    7a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:93:e7:c9:8d:a0:34:90:25:a1:4c:e5:61:6e:d7:44:fe:4f:
         52:68:0a:4a:a3:27:f8:5e:35:6b:1e:e9:fe:19:4a:7f:94:4e:
         99:04:23:50:bb:db:ab:18:68:6a:86:17:19:3e:99:c1:e3:57:
         36:e6:f5:79:e6:35:36:af:b3:4a:e5:50:d7:53:99:b5:33:15:
         e3:2c:40:35:89:29:be:02:a2:5d:a2:91:22:5a:4c:bd:3e:a4:
         ff:5b:90:13:f4:96:9f:fa:0e:54:15:5c:0a:d5:ff:dd:7b:59:
         e9:30:69:e5:1a:d2:13:3f:8f:13:3c:de:9b:1f:ac:cd:cf:e9:
         55:58:dc:fa:f4:d6:c2:66:9a:21:c9:80:1a:20:0d:a2:82:54:
         cb:05:64:ff:1b:73:ae:67:b8:6d:84:92:97:dd:5e:e8:51:f5:
         bf:27:20:53:73:cb:85:d5:a6:d2:07:c2:9b:43:96:3c:c7:3b:
         f5:db:12:27:74:cd:e5:db:ec:42:14:2c:f8:9e:07:ab:25:da:
         89:3d:70:fb:78:c9:2f:f5:e3:be:91:14:86:d1:36:e8:14:b3:
         ce:a2:d7:d2:89:c0:2f:ec:35:81:ce:d1:c1:62:47:fc:62:1e:
         23:f5:17:bc:41:52:b6:fb:09:41:24:aa:93:d5:30:f4:b4:e9:
         d3:ef:c8:b9
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYthvrHdRL9lvMajzFV9NaJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMDI0MTI1MjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTIwMTAwOTNmMTA4MTBiMWI4NTcyNGVhODllMjk0ZmNkY2NmYmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgFz80tajfM/jvJtIWqeJ/cfSFDo
316SXrZNB+7iYwId3LWBBBGBNm5mTEV5Nr050uo+nHNozY3ITD2yyYWREeGQ/Wrq
hXXBs0la0tnobqW1OBwl6jZHVa/mOqvcNVwsugU/8jNKcogoTGr6dIirMiXQT144
EVF2lkZAdT9U6GS1q1yQuPbGoHJqXMLe32xNqKYkCIpXRj4av/kbU/1A8PfwcRda
s2teWj9WCv2ZYfe0KG4djHFTuDxQo7NaRa2IS+zRF/p9585j4jhMYTDWlLml1Qrt
Eo2uA1J78tru9sZkP/FOHTWnBK+9SP7/Ej1rxudJ4zVQ6Yf6D8vq3GN6GQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAogEAk/EIELG4VyTqieKU/NzPvyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzVjMGNj
OS1mNzYxLTRlN2EtODE1NS1iYTljMzcxZTBiNjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvNWMwY2M5
LWY3NjEtNGU3YS04MTU1LWJhOWMzNzFlMGI2Ni8xL0NpQVFDVDhRZ1FzYmhYSk9x
SjRwVDgzTS1fSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQALh9AMA0GCSqGSIb3DQEBCwUAA4IBAQCIk+fJ
jaA0kCWhTOVhbtdE/k9SaApKoyf4XjVrHun+GUp/lE6ZBCNQu9urGGhqhhcZPpnB
41c25vV55jU2r7NK5VDXU5m1MxXjLEA1iSm+AqJdopEiWky9PqT/W5AT9Jaf+g5U
FVwK1f/de1npMGnlGtITP48TPN6bH6zNz+lVWNz69NbCZpohyYAaIA2iglTLBWT/
G3OuZ7hthJKX3V7oUfW/JyBTc8uF1abSB8KbQ5Y8xzv12xIndM3l2+xCFCz4nger
JdqJPXD7eMkv9eO+kRSG0TboFLPOotfSicAv7DWBztHBYkf8Yh4j9Re8QVK2+wlB
JKqT1TD0tOnT78i5
-----END CERTIFICATE-----