Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FClFdvDZFK5CohVCCvy9vNe0rO0.cer
File:                     FClFdvDZFK5CohVCCvy9vNe0rO0.cer (raw, json)
Hash identifier:          5ctMUB9j3OiqWUsXPq2JsKo+OFylvtRb9rWRvpiWppw=
Subject key identifier:   14:29:45:76:F0:D9:14:AE:42:A2:15:42:0A:FC:BD:BC:D7:B4:AC:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB06C41EA08FD474E81AD5BF51F1A2C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/FClFdvDZFK5CohVCCvy9vNe0rO0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:11 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.38.20.0/22

Validation:               Failed, certificate revoked on Mon 02 Jan 2023 11:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:6c:41:ea:08:fd:47:4e:81:ad:5b:f5:1f:1a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14294576f0d914ae42a215420afcbdbcd7b4aced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:a8:fb:3d:87:f2:29:95:c3:2b:59:d5:be:
                    14:51:08:3b:d4:de:b2:c1:4a:90:e6:af:7a:b2:b2:
                    96:fb:51:f3:82:1f:44:2d:e6:34:16:0c:cf:55:da:
                    63:17:22:a9:f4:e9:f3:a9:e9:5f:e8:9c:6a:9d:c8:
                    d2:02:b5:74:fa:c3:5b:99:1a:a7:74:2e:1e:a0:a5:
                    42:f0:b2:e7:2e:ab:0b:dd:a4:85:46:a9:06:60:7d:
                    73:a6:cd:06:8f:2c:04:2e:c1:d6:92:97:3d:c0:74:
                    93:f4:04:ca:a5:50:c8:79:9a:a3:3d:64:cd:25:3b:
                    e0:cd:9e:29:b3:de:2f:14:26:d0:7a:6b:51:c0:05:
                    0b:fa:32:62:7a:66:f8:6e:64:5f:08:35:61:48:5e:
                    d8:37:76:a6:81:54:38:ba:19:03:80:a7:b4:93:2c:
                    8c:28:40:ae:de:96:f4:36:86:4a:1d:28:9f:b1:73:
                    5a:6e:22:a3:a0:ea:af:cb:93:55:b8:b8:d3:91:a6:
                    39:ad:0d:8a:fc:0b:59:27:46:83:2e:b6:de:44:24:
                    0b:14:41:6b:3f:62:42:98:29:f4:a8:9d:5b:af:2b:
                    6b:ae:d3:ea:1c:c3:98:4c:e2:67:7f:42:d9:bc:63:
                    1e:0d:5a:9c:7d:b3:e9:a5:c0:c4:41:5e:7c:01:0b:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:29:45:76:F0:D9:14:AE:42:A2:15:42:0A:FC:BD:BC:D7:B4:AC:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/FClFdvDZFK5CohVCCvy9vNe0rO0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.38.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:17:52:e2:be:9b:fb:06:3b:8b:60:55:b0:49:5b:84:bb:1f:
         9d:13:73:86:b7:a4:a9:0c:2d:b8:b9:72:c5:66:62:1d:a5:e0:
         82:74:03:06:03:73:3a:d1:b1:9b:98:2c:ee:8d:21:44:21:c1:
         c8:03:9b:9b:03:cd:ca:81:4c:a2:51:9b:bd:37:7e:29:3a:b0:
         6f:ef:92:98:bb:d2:3c:47:cd:62:1a:59:32:75:db:cf:23:bc:
         41:3a:59:aa:9f:30:ad:28:d1:fa:56:b8:e5:fe:86:45:7d:74:
         9e:a9:f1:2c:25:16:a3:13:79:95:ad:43:ac:a6:f8:d1:ba:93:
         d5:ab:fd:cd:dd:56:98:dc:a2:1d:65:90:32:71:9c:ce:dc:f3:
         34:07:2f:9e:81:1d:3e:1e:80:8f:00:d1:f1:75:4f:cf:c5:24:
         b1:91:d7:af:31:f7:a1:5e:c0:21:8a:d3:25:b6:9b:75:76:1f:
         e8:69:0f:37:d9:8a:ca:23:5b:84:67:09:69:d6:aa:07:a2:43:
         e8:ad:3c:47:cf:4d:8e:a6:45:83:61:44:05:ad:e0:76:93:af:
         e5:a0:87:97:32:d4:cb:56:42:7b:2f:99:e9:78:f2:66:16:f3:
         f2:0f:a2:a3:46:25:d1:2a:67:cb:a7:d4:b8:e5:fe:ee:37:77:
         aa:d7:6f:4b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVvsGxB6gj9R06BrVv1HxosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDI5NDU3NmYwZDkxNGFlNDJhMjE1NDIwYWZjYmRiY2Q3YjRhY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVCo+z2H8imVwytZ1b4UUQg71N6y
wUqQ5q96srKW+1Hzgh9ELeY0FgzPVdpjFyKp9Onzqelf6JxqncjSArV0+sNbmRqn
dC4eoKVC8LLnLqsL3aSFRqkGYH1zps0GjywELsHWkpc9wHST9ATKpVDIeZqjPWTN
JTvgzZ4ps94vFCbQemtRwAUL+jJiemb4bmRfCDVhSF7YN3amgVQ4uhkDgKe0kyyM
KECu3pb0NoZKHSifsXNabiKjoOqvy5NVuLjTkaY5rQ2K/AtZJ0aDLrbeRCQLFEFr
P2JCmCn0qJ1brytrrtPqHMOYTOJnf0LZvGMeDVqcfbPppcDEQV58AQvbcQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBQpRXbw2RSuQqIVQgr8vbzXtKztMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1L2Q3OTk0
OC03ODQ5LTRhYmEtODdjMS01MjFjZmM1MzU3ODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZDc5OTQ4
LTc4NDktNGFiYS04N2MxLTUyMWNmYzUzNTc4NS8xL0ZDbEZkdkRaRks1Q29oVkND
dnk5dk5lMHJPMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwiYUMA0GCSqGSIb3DQEBCwUAA4IBAQCiF1Li
vpv7BjuLYFWwSVuEux+dE3OGt6SpDC24uXLFZmIdpeCCdAMGA3M60bGbmCzujSFE
IcHIA5ubA83KgUyiUZu9N34pOrBv75KYu9I8R81iGlkyddvPI7xBOlmqnzCtKNH6
Vrjl/oZFfXSeqfEsJRajE3mVrUOspvjRupPVq/3N3VaY3KIdZZAycZzO3PM0By+e
gR0+HoCPANHxdU/PxSSxkdevMfehXsAhitMltpt1dh/oaQ832YrKI1uEZwlp1qoH
okPorTxHz02OpkWDYUQFreB2k6/loIeXMtTLVkJ7L5npePJmFvPyD6KjRiXRKmfL
p9S45f7uN3eq129L
-----END CERTIFICATE-----