Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DQHbVCMXQwQUdXqssJP9cgaRkrE.cer
File:                     DQHbVCMXQwQUdXqssJP9cgaRkrE.cer (raw, json)
Hash identifier:          rr7q0VEQ/hvhXS3i9d3I+j0ccqsTeLHzlQB0uBsP6Ds=
Subject key identifier:   0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4D5EA4822853E65B87913C8DDDF30
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/DQHbVCMXQwQUdXqssJP9cgaRkrE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 94.158.180.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:d5:ea:48:22:85:3e:65:b8:79:13:c8:dd:df:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d01db542317430414757aacb093fd72069192b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:67:8a:9d:c1:9c:89:7a:23:0c:6f:7e:09:
                    33:12:d4:de:1c:b1:c3:b1:5b:0e:cb:8c:df:a5:4a:
                    9d:65:8b:56:c6:7c:30:c6:0d:3c:05:9f:c1:26:30:
                    0c:d0:d4:70:a3:e4:89:d4:2e:da:fc:4d:1b:cb:85:
                    40:73:2d:30:d8:d5:01:28:ed:a9:b4:a3:15:1e:b9:
                    bb:34:62:ed:d8:fa:f2:13:e1:77:d9:08:ee:f3:52:
                    90:3e:b6:7e:e1:c8:97:e5:7c:89:9d:84:9c:af:1e:
                    5e:58:ff:a5:51:99:29:16:05:dc:98:24:34:c3:99:
                    06:50:3b:e8:f5:60:6a:43:76:4e:61:36:f5:c5:d7:
                    3f:b2:71:68:3d:c8:b9:0f:48:80:5a:8e:c7:df:f4:
                    a5:ea:41:25:77:bd:24:85:1b:a8:0e:80:79:b7:03:
                    9e:de:98:49:8c:12:ee:92:59:99:b4:a4:2d:51:65:
                    36:b5:f2:67:27:79:7a:4e:25:9c:ae:38:a0:4c:c8:
                    37:65:ff:4f:d1:b7:ea:43:84:96:f3:4a:ee:62:40:
                    68:d0:1c:9d:42:06:31:05:67:c4:a8:30:f5:11:f4:
                    4c:31:84:ab:81:2f:13:81:b1:f5:3b:fb:a0:54:45:
                    f4:31:64:de:b7:e1:b7:28:ef:92:a0:97:02:9c:fd:
                    55:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/DQHbVCMXQwQUdXqssJP9cgaRkrE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.158.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:b0:36:34:cc:c7:f3:a5:43:1f:4d:8f:b1:ee:06:dc:71:
         b5:aa:c0:51:2c:1c:c0:54:c6:24:8a:ff:97:4f:22:54:a8:7e:
         2e:3f:59:d0:73:d0:71:a2:43:d7:94:56:f2:9a:be:d9:07:de:
         2e:cc:2d:74:ff:78:85:68:7c:71:27:2d:33:1b:49:db:84:a3:
         84:30:d2:18:9b:27:92:07:28:67:19:bd:98:47:a4:05:95:db:
         22:b9:99:db:53:b5:2f:7b:66:d4:cf:2a:b2:f0:87:c8:01:4f:
         e7:0e:f5:8d:5d:7d:df:3a:38:82:ec:a4:c0:1c:2e:5f:c4:fc:
         75:ca:a2:5f:42:88:ee:3b:44:ce:ff:a4:e1:1c:b4:6d:b8:e8:
         25:c6:32:15:f0:c9:21:6b:df:12:9f:75:a3:a1:3c:a0:ba:33:
         b6:0f:e0:d0:3c:46:19:7c:ce:8e:58:10:d8:f9:e1:c0:72:3c:
         c4:1f:f3:ba:f1:c3:3f:6b:69:e3:c3:c4:9b:0d:3c:df:be:47:
         a2:18:42:cc:77:9c:6d:cd:d5:64:eb:69:f9:aa:0c:f0:00:94:
         dc:9f:a1:95:85:17:ab:95:90:cb:f3:2d:2b:19:b8:c8:e7:7f:
         e0:31:0b:60:b9:87:c8:66:4b:f7:1b:45:9e:b1:36:ce:4d:cf:
         3a:30:43:b9
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVq9NXqSCKFPmW4eRPI3d8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDAxZGI1NDIzMTc0MzA0MTQ3NTdhYWNiMDkzZmQ3MjA2OTE5MmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxFnip3BnIl6IwxvfgkzEtTeHLHD
sVsOy4zfpUqdZYtWxnwwxg08BZ/BJjAM0NRwo+SJ1C7a/E0by4VAcy0w2NUBKO2p
tKMVHrm7NGLt2PryE+F32Qju81KQPrZ+4ciX5XyJnYScrx5eWP+lUZkpFgXcmCQ0
w5kGUDvo9WBqQ3ZOYTb1xdc/snFoPci5D0iAWo7H3/Sl6kEld70khRuoDoB5twOe
3phJjBLuklmZtKQtUWU2tfJnJ3l6TiWcrjigTMg3Zf9P0bfqQ4SW80ruYkBo0Byd
QgYxBWfEqDD1EfRMMYSrgS8TgbH1O/ugVEX0MWTet+G3KO+SoJcCnP1V7QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFA0B21QjF0MEFHV6rLCT/XIGkZKxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzIzNzE0
Ni1mODVjLTQyYmItYjNlNS05ZGViMDQyMTYyNzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMjM3MTQ2
LWY4NWMtNDJiYi1iM2U1LTlkZWIwNDIxNjI3My8xL0RRSGJWQ01YUXdRVWRYcXNz
SlA5Y2dhUmtyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCXp60MA0GCSqGSIb3DQEBCwUAA4IBAQAN3LA2
NMzH86VDH02Pse4G3HG1qsBRLBzAVMYkiv+XTyJUqH4uP1nQc9BxokPXlFbymr7Z
B94uzC10/3iFaHxxJy0zG0nbhKOEMNIYmyeSByhnGb2YR6QFldsiuZnbU7Uve2bU
zyqy8IfIAU/nDvWNXX3fOjiC7KTAHC5fxPx1yqJfQojuO0TO/6ThHLRtuOglxjIV
8Mkha98Sn3WjoTygujO2D+DQPEYZfM6OWBDY+eHAcjzEH/O68cM/a2njw8SbDTzf
vkeiGELMd5xtzdVk62n5qgzwAJTcn6GVhRerlZDL8y0rGbjI53/gMQtguYfIZkv3
G0WesTbOTc86MEO5
-----END CERTIFICATE-----