Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HTpxBuIabDIvmOS8G5yWXXKIkno.cer
File:                     HTpxBuIabDIvmOS8G5yWXXKIkno.cer (raw, json)
Hash identifier:          apJPOxzh8K05e6WJrx35utNToRK6Jfk0h09Vmke2HFI=
Subject key identifier:   1D:3A:71:06:E2:1A:6C:32:2F:98:E4:BC:1B:9C:96:5D:72:88:92:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFA5F8494A54F189335BCFD2382C3E5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/HTpxBuIabDIvmOS8G5yWXXKIkno.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:16:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.185.0/24
                          IP: 2a12:f500::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fa:5f:84:94:a5:4f:18:93:35:bc:fd:23:82:c3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:16:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1d3a7106e21a6c322f98e4bc1b9c965d7288927a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:31:7c:0a:8c:42:14:14:05:db:c8:79:a8:56:
                    56:b2:97:4e:1f:79:4b:26:57:3b:c6:27:70:f2:9c:
                    be:d4:d6:5f:f8:50:38:4f:83:8f:3a:f1:8b:ed:95:
                    4f:9b:35:c4:7c:a6:b9:01:f1:1e:bb:df:9c:14:d2:
                    90:7c:55:5b:54:2f:1d:28:07:db:74:f4:34:4f:78:
                    21:2b:1c:bf:5c:ab:f5:3f:81:a3:09:b9:20:fe:e5:
                    eb:1a:d6:fd:5e:1d:c9:01:7b:f0:07:ab:e7:6c:30:
                    df:7b:ef:c3:aa:dd:3c:69:17:67:24:b8:ed:51:7f:
                    74:d1:df:4d:5f:19:71:6b:c8:e9:ef:de:bd:db:d8:
                    54:f4:2f:68:ca:f1:45:4b:5e:09:e1:1d:ee:b4:42:
                    1f:62:0a:a5:b4:06:78:b0:fa:d8:f3:cd:03:b1:eb:
                    b3:40:ad:a1:a4:24:7a:28:aa:a7:3e:77:f9:2c:95:
                    f7:2a:93:a1:be:d5:91:22:41:c7:e9:b1:8b:ae:e5:
                    a7:7e:29:5d:48:03:61:38:cd:91:ec:61:dc:df:e1:
                    76:d1:90:a1:a9:dd:96:17:17:f8:ad:3b:6b:de:1e:
                    1b:41:ea:48:a0:c0:17:68:69:24:12:e4:04:e3:c1:
                    06:95:14:ec:84:cd:0e:b0:0f:a3:5e:00:80:51:83:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3A:71:06:E2:1A:6C:32:2F:98:E4:BC:1B:9C:96:5D:72:88:92:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/HTpxBuIabDIvmOS8G5yWXXKIkno.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.185.0/24
                IPv6:
                  2a12:f500::/29

    Signature Algorithm: sha256WithRSAEncryption
         47:3b:f0:74:e7:07:8e:56:ef:57:29:69:1c:32:9e:b5:b7:f3:
         ee:54:3d:2c:dd:24:ae:31:fd:af:ad:14:ed:66:08:c8:44:f9:
         26:20:6f:2c:3a:ed:63:d7:64:49:b0:4d:b0:e2:69:a1:8c:0f:
         7a:e8:d2:a4:e5:e8:6b:4a:f8:db:6d:87:6e:e4:96:9a:45:95:
         23:d9:bc:11:87:3b:22:30:d3:5a:5f:f1:38:d6:ff:b9:71:02:
         ef:e8:72:26:67:b1:92:96:be:a7:ec:42:25:95:63:a2:d7:32:
         ad:42:4c:c5:80:32:21:6f:37:98:d9:89:d1:91:10:12:06:f5:
         e5:b5:1f:09:ad:09:56:7d:7b:17:10:95:ab:3b:1e:8e:67:a0:
         db:4a:21:63:5c:5e:60:f5:a8:d9:6c:16:7b:ae:51:dd:10:64:
         1f:c8:73:bf:6a:72:54:6d:8e:cf:7b:58:59:da:04:62:db:a8:
         34:20:0c:0a:fd:85:7e:f9:6b:e3:6b:57:c4:50:b1:98:d3:22:
         2f:7e:be:ae:2b:a4:3e:8d:5e:5d:59:04:64:a0:f4:42:d7:c0:
         de:5a:38:28:f9:42:74:a3:a2:a7:48:ee:6f:6a:b7:8a:ba:78:
         40:01:f5:82:59:1f:b7:0c:d7:35:ec:6f:83:d7:fd:55:37:5e:
         bd:3f:c5:f6
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu+l+ElKVPGJM1vP0jgsPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjAxNjIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDNhNzEwNmUyMWE2YzMyMmY5OGU0YmMxYjljOTY1ZDcyODg5MjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zF8CoxCFBQF28h5qFZWspdOH3lL
Jlc7xidw8py+1NZf+FA4T4OPOvGL7ZVPmzXEfKa5AfEeu9+cFNKQfFVbVC8dKAfb
dPQ0T3ghKxy/XKv1P4GjCbkg/uXrGtb9Xh3JAXvwB6vnbDDfe+/Dqt08aRdnJLjt
UX900d9NXxlxa8jp796929hU9C9oyvFFS14J4R3utEIfYgqltAZ4sPrY880Dseuz
QK2hpCR6KKqnPnf5LJX3KpOhvtWRIkHH6bGLruWnfildSANhOM2R7GHc3+F20ZCh
qd2WFxf4rTtr3h4bQepIoMAXaGkkEuQE48EGlRTshM0OsA+jXgCAUYNkjwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFB06cQbiGmwyL5jkvBucll1yiJJ6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzRmNWQ0
MS1lZWMzLTRlNjItYWEwMS01YzQ2ZGEzYmM1YTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNGY1ZDQx
LWVlYzMtNGU2Mi1hYTAxLTVjNDZkYTNiYzVhNS8xL0hUcHhCdUlhYkRJdm1PUzhH
NXlXWFhLSWtuby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhO5MA0EAgACMAcDBQMqEvUAMA0GCSqGSIb3
DQEBCwUAA4IBAQBHO/B05weOVu9XKWkcMp61t/PuVD0s3SSuMf2vrRTtZgjIRPkm
IG8sOu1j12RJsE2w4mmhjA966NKk5ehrSvjbbYdu5JaaRZUj2bwRhzsiMNNaX/E4
1v+5cQLv6HImZ7GSlr6n7EIllWOi1zKtQkzFgDIhbzeY2YnRkRASBvXltR8JrQlW
fXsXEJWrOx6OZ6DbSiFjXF5g9ajZbBZ7rlHdEGQfyHO/anJUbY7Pe1hZ2gRi26g0
IAwK/YV++Wvja1fEULGY0yIvfr6uK6Q+jV5dWQRkoPRC18DeWjgo+UJ0o6KnSO5v
areKunhAAfWCWR+3DNc17G+D1/1VN169P8X2
-----END CERTIFICATE-----