Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HxBvRmxK-judw7__Q8r3C4ZYxOI.cer
File:                     HxBvRmxK-judw7__Q8r3C4ZYxOI.cer (raw, json)
Hash identifier:          q707+P8fCaw5kwOGudFBiVqBYc7JB0OR5uedERqJSHI=
Subject key identifier:   1F:10:6F:46:6C:4A:FA:3B:9D:C3:BF:FF:43:CA:F7:0B:86:58:C4:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E64EB94F46EDF86E7B734DD67F64F30
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/HxBvRmxK-judw7__Q8r3C4ZYxOI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.10.97.0/24
                          IP: 45.148.80.0/22
                          IP: 2a10:bbc0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:64:eb:94:f4:6e:df:86:e7:b7:34:dd:67:f6:4f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f106f466c4afa3b9dc3bfff43caf70b8658c4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:41:8e:6c:49:22:78:15:9a:e0:87:f7:7a:ca:
                    ce:42:36:aa:03:98:a7:4f:c5:6a:6e:2e:54:74:ee:
                    38:4f:e6:9d:ed:57:78:c2:3c:18:a5:cb:69:65:ec:
                    50:d6:b3:31:15:ee:fb:fe:9c:36:d5:24:fc:14:c0:
                    67:6d:2e:11:13:94:fe:fe:3b:cd:d2:9d:e1:f4:8d:
                    cb:52:80:3d:a0:e5:08:6e:a6:60:97:cc:db:c8:55:
                    39:95:a8:f5:21:34:50:e5:6d:11:3a:14:eb:d4:1d:
                    e6:08:47:73:d8:5c:53:b5:f5:6e:14:c1:ae:35:3d:
                    c1:7e:6d:0e:0a:05:48:fd:b8:bb:56:5d:26:f2:55:
                    26:f3:4c:12:89:25:bc:ae:c4:a4:23:2a:5a:8e:71:
                    41:b0:9c:a9:ae:4b:13:4a:19:0f:8c:88:a9:39:57:
                    57:d1:cc:46:85:5c:41:22:3e:4a:fe:fd:65:a6:64:
                    64:00:31:4e:e8:58:1c:c5:c8:58:21:c2:3b:24:62:
                    96:9a:2b:c9:9a:20:93:5e:77:a1:86:04:7b:43:72:
                    98:d4:1e:fd:08:1e:6e:a5:4c:de:6d:c6:10:fe:0e:
                    cf:54:c4:fa:41:de:8a:2c:74:26:5d:9b:e8:a4:c2:
                    80:ab:d9:0b:ab:17:39:60:30:e2:bb:ed:60:22:db:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:10:6F:46:6C:4A:FA:3B:9D:C3:BF:FF:43:CA:F7:0B:86:58:C4:E2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/HxBvRmxK-judw7__Q8r3C4ZYxOI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.97.0/24
                  45.148.80.0/22
                IPv6:
                  2a10:bbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:fc:ac:5f:b5:a5:82:c1:20:13:92:26:d8:b3:8c:cf:e3:5c:
         c7:31:72:d4:cd:26:07:b7:65:a2:1c:cc:79:2f:f3:21:ac:d8:
         87:5d:7f:8c:b9:ee:b4:9d:08:25:17:fe:85:fe:4c:f0:ea:c8:
         44:68:80:33:39:c0:58:19:a0:7b:60:ec:91:15:3d:ef:b3:cf:
         fb:3d:6b:06:82:ce:c4:30:93:1e:d7:4b:e4:4b:9f:f6:8d:39:
         be:df:91:9d:79:5e:ac:d7:2a:41:72:b6:eb:3f:22:2a:32:8d:
         6a:24:86:6e:1c:7f:b1:b2:00:48:08:1d:46:4e:1c:db:34:d9:
         b9:0c:25:26:b4:3d:fe:e0:27:7c:82:80:36:9d:0c:1b:5d:e8:
         7f:2f:aa:c1:ec:8a:cc:be:cc:7f:6a:6f:83:73:f8:d3:65:da:
         f6:ef:2f:0d:5d:0e:08:a1:b6:3e:68:13:4d:e0:a1:9e:98:7d:
         44:79:cc:4a:06:c0:a5:27:03:62:e9:78:0c:51:50:a0:c3:87:
         f2:68:21:28:5f:89:45:91:95:95:06:2b:6a:8b:f2:ff:b5:1c:
         cd:39:c7:71:65:8b:4b:83:01:dc:ab:ce:bf:9e:4f:5f:1d:19:
         8e:31:86:c4:cb:db:fc:08:e6:9e:95:f5:b0:e9:78:ba:72:20:
         3d:84:43:14
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAYVuZOuU9G7fhue3NN1n9k8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTczMzA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjEwNmY0NjZjNGFmYTNiOWRjM2JmZmY0M2NhZjcwYjg2NThjNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40GObEkieBWa4If3esrOQjaqA5in
T8Vqbi5UdO44T+ad7Vd4wjwYpctpZexQ1rMxFe77/pw21ST8FMBnbS4RE5T+/jvN
0p3h9I3LUoA9oOUIbqZgl8zbyFU5laj1ITRQ5W0ROhTr1B3mCEdz2FxTtfVuFMGu
NT3Bfm0OCgVI/bi7Vl0m8lUm80wSiSW8rsSkIypajnFBsJyprksTShkPjIipOVdX
0cxGhVxBIj5K/v1lpmRkADFO6FgcxchYIcI7JGKWmivJmiCTXnehhgR7Q3KY1B79
CB5upUzebcYQ/g7PVMT6Qd6KLHQmXZvopMKAq9kLqxc5YDDiu+1gIttNtQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFB8Qb0ZsSvo7ncO//0PK9wuGWMTiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2NiZDhl
Ny0zMTJjLTRhNDgtODMwZC1hYTc1NWIxMmRlODAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvY2JkOGU3
LTMxMmMtNGE0OC04MzBkLWFhNzU1YjEyZGU4MC8xL0h4QnZSbXhLLWp1ZHc3X19R
OHIzQzRaWXhPSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQALQphAwQCLZRQMA0EAgACMAcDBQAqELvAMA0G
CSqGSIb3DQEBCwUAA4IBAQAF/KxftaWCwSATkibYs4zP41zHMXLUzSYHt2WiHMx5
L/MhrNiHXX+Mue60nQglF/6F/kzw6shEaIAzOcBYGaB7YOyRFT3vs8/7PWsGgs7E
MJMe10vkS5/2jTm+35GdeV6s1ypBcrbrPyIqMo1qJIZuHH+xsgBICB1GThzbNNm5
DCUmtD3+4Cd8goA2nQwbXeh/L6rB7IrMvsx/am+Dc/jTZdr27y8NXQ4IobY+aBNN
4KGemH1EecxKBsClJwNi6XgMUVCgw4fyaCEoX4lFkZWVBitqi/L/tRzNOcdxZYtL
gwHcq86/nk9fHRmOMYbEy9v8COaelfWw6Xi6ciA9hEMU
-----END CERTIFICATE-----