Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EarnIUujRRVHtfxofWCjvj50cXI.cer
File:                     EarnIUujRRVHtfxofWCjvj50cXI.cer (raw, json)
Hash identifier:          1N7cQHE+fINKimmtuD/1NvDZGft26zgBYFvidbtZSKA=
Subject key identifier:   11:AA:E7:21:4B:A3:45:15:47:B5:FC:68:7D:60:A3:BE:3E:74:71:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708AF51827FB633FFAABB64CC70E4BA6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b6/3d4a59-9d2f-4d95-b1b8-97c51363d5b5/1/EarnIUujRRVHtfxofWCjvj50cXI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b6/3d4a59-9d2f-4d95-b1b8-97c51363d5b5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:33:53 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 42816

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 09:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8a:f5:18:27:fb:63:3f:fa:ab:b6:4c:c7:0e:4b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:33:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11aae7214ba3451547b5fc687d60a3be3e747172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:e6:b9:a9:09:28:d7:05:be:2d:65:db:0a:
                    62:12:64:5b:2b:2d:94:99:e9:49:bb:31:94:3d:b4:
                    aa:fd:73:97:25:32:65:58:c8:7d:b7:4a:7f:21:92:
                    d1:5d:20:12:77:d0:8b:af:f4:60:22:c7:6d:3d:98:
                    64:76:35:e1:81:54:66:14:0e:74:7f:5d:01:8c:c7:
                    cd:fd:38:0c:7d:94:ec:26:a5:9b:14:57:30:72:dd:
                    d6:c6:87:d4:26:30:db:82:e9:a6:5a:31:af:ae:91:
                    7b:de:fd:8c:4a:a4:50:e9:93:53:98:7a:c7:8e:2d:
                    96:ca:b6:de:4e:40:3a:80:47:b3:9c:c4:76:20:6f:
                    cd:f4:9d:d9:17:6e:b0:2b:a1:84:4e:0b:98:69:5a:
                    d8:19:2d:d4:5f:2d:31:62:8f:ee:15:37:e1:1d:dd:
                    7d:64:55:3d:9c:5c:67:d7:f3:d3:34:a3:b6:77:76:
                    cb:d1:42:6e:a9:b4:52:b2:be:c3:d0:31:80:52:51:
                    89:cd:5f:33:ae:f1:8d:0f:73:75:7b:4b:bb:35:4b:
                    d6:58:16:88:76:3b:9c:28:f8:fb:3f:3b:d3:8e:5f:
                    54:2b:ae:5d:97:b0:d7:42:44:fe:3d:75:ab:b7:48:
                    92:0d:83:87:2f:14:e5:c3:61:d2:dd:5f:95:28:3b:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AA:E7:21:4B:A3:45:15:47:B5:FC:68:7D:60:A3:BE:3E:74:71:72
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3d4a59-9d2f-4d95-b1b8-97c51363d5b5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3d4a59-9d2f-4d95-b1b8-97c51363d5b5/1/EarnIUujRRVHtfxofWCjvj50cXI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42816

    Signature Algorithm: sha256WithRSAEncryption
         7f:6c:70:ab:ce:00:e9:f8:59:7c:01:49:c4:2a:44:7e:6e:c4:
         e7:12:aa:b1:c7:2d:b9:a4:cf:65:61:f1:60:f8:67:d7:07:67:
         79:b6:4b:10:57:74:a7:b2:81:4e:e4:1e:bb:7d:78:53:25:00:
         73:ef:37:67:38:89:72:f5:15:86:39:e7:02:34:8c:dd:14:04:
         7c:84:c4:92:9b:9a:28:09:9e:19:c5:1f:08:26:43:82:6f:1d:
         72:c9:7c:f2:5d:ad:fd:b9:39:69:eb:04:f8:8a:15:2f:3e:f5:
         ad:d2:eb:74:f0:39:4e:0f:b8:eb:9f:96:2b:ad:91:e0:46:2d:
         0d:08:90:f9:96:03:74:61:9e:53:93:95:fa:c1:c5:4e:5b:18:
         1c:d6:01:b2:01:75:af:a9:40:ce:49:f2:0f:50:c8:5e:48:3c:
         30:de:0f:63:a9:ae:fc:96:4d:95:79:7b:78:7f:e0:53:55:06:
         a9:44:9e:d1:e1:8e:5c:32:a2:98:16:4c:fb:03:b6:f6:f6:63:
         83:18:4d:7d:36:0e:a2:69:14:ec:94:39:d5:4e:b0:9d:6e:da:
         32:9b:50:00:0e:ac:64:9a:5c:d8:f9:9a:67:e2:17:6f:69:46:
         10:22:31:8c:00:ef:a2:88:b1:4e:a8:1a:3e:43:f4:96:fe:eb:
         2a:8f:40:85
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVwivUYJ/tjP/qrtkzHDkumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzMzUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWFhZTcyMTRiYTM0NTE1NDdiNWZjNjg3ZDYwYTNiZTNlNzQ3MTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufLmuakJKNcFvi1l2wpiEmRbKy2U
melJuzGUPbSq/XOXJTJlWMh9t0p/IZLRXSASd9CLr/RgIsdtPZhkdjXhgVRmFA50
f10BjMfN/TgMfZTsJqWbFFcwct3WxofUJjDbgummWjGvrpF73v2MSqRQ6ZNTmHrH
ji2WyrbeTkA6gEeznMR2IG/N9J3ZF26wK6GETguYaVrYGS3UXy0xYo/uFTfhHd19
ZFU9nFxn1/PTNKO2d3bL0UJuqbRSsr7D0DGAUlGJzV8zrvGND3N1e0u7NUvWWBaI
djucKPj7PzvTjl9UK65dl7DXQkT+PXWrt0iSDYOHLxTlw2HS3V+VKDsEOQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBGq5yFLo0UVR7X8aH1go74+dHFyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzNkNGE1
OS05ZDJmLTRkOTUtYjFiOC05N2M1MTM2M2Q1YjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvM2Q0YTU5
LTlkMmYtNGQ5NS1iMWI4LTk3YzUxMzYzZDViNS8xL0Vhcm5JVXVqUlJWSHRmeG9m
V0Nqdmo1MGNYSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCnQDANBgkqhkiG9w0BAQsFAAOCAQEAf2xwq84A6fhZ
fAFJxCpEfm7E5xKqscctuaTPZWHxYPhn1wdnebZLEFd0p7KBTuQeu314UyUAc+83
ZziJcvUVhjnnAjSM3RQEfITEkpuaKAmeGcUfCCZDgm8dcsl88l2t/bk5aesE+IoV
Lz71rdLrdPA5Tg+465+WK62R4EYtDQiQ+ZYDdGGeU5OV+sHFTlsYHNYBsgF1r6lA
zknyD1DIXkg8MN4PY6mu/JZNlXl7eH/gU1UGqUSe0eGOXDKimBZM+wO29vZjgxhN
fTYOomkU7JQ51U6wnW7aMptQAA6sZJpc2PmaZ+IXb2lGECIxjADvooixTqgaPkP0
lv7rKo9AhQ==
-----END CERTIFICATE-----