Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F06r9sUJL3YElqg_ODZs6EK86Bo.cer
File:                     F06r9sUJL3YElqg_ODZs6EK86Bo.cer (raw, json)
Hash identifier:          AnoNB7ZIreSNMHWgB8QwPGWfQ6ZRaQhaObeJTqtgsuQ=
Subject key identifier:   17:4E:AB:F6:C5:09:2F:76:04:96:A8:3F:38:36:6C:E8:42:BC:E8:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E5620F6CA7FCF4E8E9B275E358BCC34DD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/836a3c-371d-4e5f-a16c-d5afae4836fd/1/F06r9sUJL3YElqg_ODZs6EK86Bo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/836a3c-371d-4e5f-a16c-d5afae4836fd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 19 Mar 2024 09:53:04 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 151.216.0.0/19

Validation:               Failed, certificate revoked on Tue 02 Apr 2024 11:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:56:20:f6:ca:7f:cf:4e:8e:9b:27:5e:35:8b:cc:34:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 19 09:53:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=174eabf6c5092f760496a83f38366ce842bce81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:18:b3:ba:53:e8:00:99:bb:bd:e8:d6:5b:
                    60:d5:e4:3c:95:4a:2b:10:7e:58:36:e3:c4:f7:c0:
                    c4:05:bf:a3:2c:02:67:cc:d3:1a:55:9d:fe:14:1c:
                    61:4f:f3:35:52:55:c4:a5:f7:81:4f:6c:f0:82:7f:
                    37:16:b0:ce:33:e5:d8:d8:2d:f9:01:0b:9a:fe:c9:
                    23:6b:e0:51:ff:2d:d1:b3:be:c1:d1:58:b2:4d:19:
                    96:42:ac:e5:d3:4b:07:3c:36:4f:69:2a:27:ad:a5:
                    84:f1:31:2d:bf:35:10:17:02:50:ec:fa:86:39:a2:
                    ca:30:b5:3b:9e:f2:cc:f7:77:c6:13:50:0c:f3:f1:
                    72:de:27:35:aa:f8:7c:6b:49:da:65:21:39:d3:2f:
                    28:fb:29:e4:3f:79:05:49:8c:26:8f:55:ed:89:20:
                    1d:78:f5:93:bf:51:60:c3:8f:ba:4e:71:a7:40:a3:
                    69:6d:54:c8:dd:e2:31:55:d3:a0:db:1f:9f:96:01:
                    8f:2b:90:cc:18:13:6f:cd:fb:e4:46:c1:34:bb:cc:
                    f3:26:6b:6c:16:98:45:39:23:6e:8e:67:3c:c9:4b:
                    d7:25:f3:e1:6d:40:20:46:c3:68:90:16:40:ad:88:
                    5b:21:5b:e2:53:32:3e:64:66:12:23:74:b3:aa:be:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4E:AB:F6:C5:09:2F:76:04:96:A8:3F:38:36:6C:E8:42:BC:E8:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/836a3c-371d-4e5f-a16c-d5afae4836fd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/836a3c-371d-4e5f-a16c-d5afae4836fd/1/F06r9sUJL3YElqg_ODZs6EK86Bo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:41:c7:90:ed:a6:6c:78:c8:13:aa:24:97:47:0b:a7:04:
         17:10:5b:53:5e:a3:c2:dc:f4:ba:0d:3d:19:25:8e:83:4d:aa:
         c2:b2:f2:a4:f8:d5:a4:0f:0f:54:10:6e:8e:f5:9f:ae:f3:3d:
         d4:de:d7:1c:1e:29:94:58:66:9b:3d:a8:fe:49:5a:01:90:a4:
         62:6d:79:5d:92:36:da:6c:84:cf:c4:f5:48:98:b2:46:13:3a:
         ad:8c:8d:c8:34:8e:ae:61:f0:14:12:ee:bb:06:e9:85:5d:2f:
         70:21:e9:92:47:27:53:68:71:04:e1:1f:04:11:e4:e2:a9:42:
         86:70:60:ae:04:2e:7c:f8:b6:a8:58:26:cd:c3:d2:69:e1:71:
         64:ca:9e:da:ec:c9:69:98:ef:7f:2c:37:29:96:ca:af:17:ea:
         49:dc:1f:64:1f:cd:3f:f2:46:e5:7c:52:0b:3e:da:41:4d:23:
         ae:86:41:47:02:2f:c5:ef:fb:eb:2f:24:e3:35:b1:94:94:dc:
         6f:1c:c4:88:36:53:62:ef:6f:a6:15:ec:c5:10:d1:b0:7d:0e:
         8d:46:36:87:d3:e4:b2:cc:64:01:56:f9:4d:ea:48:ff:3b:10:
         d1:a8:fd:da:f5:5e:85:50:94:31:1b:5f:b0:2f:c2:48:5a:4c:
         2b:90:2f:dd
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY5WIPbKf89OjpsnXjWLzDTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzE5MDk1MzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzRlYWJmNmM1MDkyZjc2MDQ5NmE4M2YzODM2NmNlODQyYmNlODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00IYs7pT6ACZu73o1ltg1eQ8lUor
EH5YNuPE98DEBb+jLAJnzNMaVZ3+FBxhT/M1UlXEpfeBT2zwgn83FrDOM+XY2C35
AQua/skja+BR/y3Rs77B0ViyTRmWQqzl00sHPDZPaSonraWE8TEtvzUQFwJQ7PqG
OaLKMLU7nvLM93fGE1AM8/Fy3ic1qvh8a0naZSE50y8o+ynkP3kFSYwmj1XtiSAd
ePWTv1Fgw4+6TnGnQKNpbVTI3eIxVdOg2x+flgGPK5DMGBNvzfvkRsE0u8zzJmts
FphFOSNujmc8yUvXJfPhbUAgRsNokBZArYhbIVviUzI+ZGYSI3Szqr52jQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBdOq/bFCS92BJaoPzg2bOhCvOgaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzgzNmEz
Yy0zNzFkLTRlNWYtYTE2Yy1kNWFmYWU0ODM2ZmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvODM2YTNj
LTM3MWQtNGU1Zi1hMTZjLWQ1YWZhZTQ4MzZmZC8xL0YwNnI5c1VKTDNZRWxxZ19P
RFpzNkVLODZCby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQFl9gAMA0GCSqGSIb3DQEBCwUAA4IBAQCKdEHH
kO2mbHjIE6okl0cLpwQXEFtTXqPC3PS6DT0ZJY6DTarCsvKk+NWkDw9UEG6O9Z+u
8z3U3tccHimUWGabPaj+SVoBkKRibXldkjbabITPxPVImLJGEzqtjI3INI6uYfAU
Eu67BumFXS9wIemSRydTaHEE4R8EEeTiqUKGcGCuBC58+LaoWCbNw9Jp4XFkyp7a
7MlpmO9/LDcplsqvF+pJ3B9kH80/8kblfFILPtpBTSOuhkFHAi/F7/vrLyTjNbGU
lNxvHMSINlNi72+mFezFENGwfQ6NRjaH0+SyzGQBVvlN6kj/OxDRqP3a9V6FUJQx
G1+wL8JIWkwrkC/d
-----END CERTIFICATE-----