Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IB2o0qJdWJyl8BKB3_JjpR8rheU.cer
File:                     IB2o0qJdWJyl8BKB3_JjpR8rheU.cer (raw, json)
Hash identifier:          R0p0pwCIQVxXcaexjGkEr8RqKCAs45a0TU1qn9uKk6g=
Subject key identifier:   20:1D:A8:D2:A2:5D:58:9C:A5:F0:12:81:DF:F2:63:A5:1F:2B:85:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD11EF0E50836BDA6C74C1C35ED1DAA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/e519a0-72b3-407f-bf3c-8810c5a2863e/1/IB2o0qJdWJyl8BKB3_JjpR8rheU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/e519a0-72b3-407f-bf3c-8810c5a2863e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.209.0/24
                          IP: 2a12:4800::/29

Validation:               Failed, certificate revoked on Mon 04 Dec 2023 10:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:1e:f0:e5:08:36:bd:a6:c7:4c:1c:35:ed:1d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=201da8d2a25d589ca5f01281dff263a51f2b85e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:88:f8:ab:b8:a2:be:aa:7e:1f:f5:46:fa:19:
                    2b:f8:81:5b:ac:cf:58:0b:de:98:e3:bb:9d:72:32:
                    00:0e:33:17:55:c2:93:f9:12:3b:de:fd:42:e5:95:
                    98:d4:24:ed:02:40:a0:e5:4f:f4:67:33:fb:a2:d7:
                    a2:ae:42:a0:c6:f1:00:8a:82:c9:9a:40:0d:78:c1:
                    84:c7:76:42:51:40:89:50:a1:d5:b2:ff:71:ed:66:
                    51:45:26:7a:6b:0a:86:a3:a9:b8:cd:7a:65:0b:04:
                    4d:bd:16:2b:63:e7:9a:bc:85:82:2c:e3:d4:a5:f5:
                    19:60:08:83:c9:5c:f0:1b:58:33:02:86:fe:01:a3:
                    e2:d6:c6:f6:59:19:d3:36:1d:27:a8:d0:59:a7:d8:
                    8e:60:cd:80:0a:14:e9:99:2c:90:bd:51:8b:19:1f:
                    10:df:b9:5a:9a:53:44:25:9d:09:ef:42:0f:d7:1a:
                    74:83:0c:2e:e6:32:1a:d7:91:e3:7e:4b:92:e5:56:
                    63:fb:40:f0:d0:5a:47:5a:da:d2:12:ae:1a:6b:53:
                    4b:e4:1a:22:d8:25:a9:4d:88:9b:70:e6:88:2c:9b:
                    f7:b0:81:67:ea:c9:f5:11:c1:75:ee:b5:a0:1c:51:
                    09:7d:90:09:34:22:23:86:69:b5:6f:e1:75:9b:96:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1D:A8:D2:A2:5D:58:9C:A5:F0:12:81:DF:F2:63:A5:1F:2B:85:E5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e519a0-72b3-407f-bf3c-8810c5a2863e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e519a0-72b3-407f-bf3c-8810c5a2863e/1/IB2o0qJdWJyl8BKB3_JjpR8rheU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.209.0/24
                IPv6:
                  2a12:4800::/29

    Signature Algorithm: sha256WithRSAEncryption
         92:02:ed:0d:cd:59:21:cc:29:eb:cb:24:5c:50:af:51:9b:23:
         bf:92:44:5b:3a:b2:f4:5c:9a:c2:f9:b9:a6:f8:10:2a:ae:21:
         d3:7e:86:dc:16:43:07:21:bc:75:25:30:b7:38:34:b9:05:ed:
         ba:c5:2a:87:34:60:d2:92:aa:95:02:5a:ea:38:b4:11:a4:0a:
         fd:34:df:5b:bc:34:17:69:dc:56:c1:71:94:82:93:f7:40:00:
         ff:a0:56:b8:2b:6d:d0:6b:a1:f7:f9:0d:d1:ee:40:81:b7:3f:
         0b:f6:ce:93:f5:52:25:a1:d3:70:db:37:c9:a3:91:7d:df:45:
         75:44:43:45:43:df:5b:56:1f:50:cd:3e:b3:82:44:ff:cd:8d:
         7a:bd:26:20:e8:c2:09:91:83:83:c6:b1:73:f3:6e:e0:0b:80:
         9d:fa:71:6c:d4:3d:2b:7c:bb:39:3f:2c:84:33:a8:cf:8b:3b:
         8f:cd:73:86:7f:43:f0:8c:20:c3:bf:a2:a6:29:7f:5f:58:ba:
         04:c0:89:a8:45:a6:ff:03:64:c5:ce:c7:b9:ed:ae:2c:ad:86:
         4f:da:be:8c:f8:63:0d:95:6b:1b:11:f1:e2:cf:50:58:fe:9a:
         c0:ae:16:33:01:2a:9c:4b:72:6f:18:f8:39:e3:94:7b:a4:8c:
         3e:e9:4b:6e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVr0R7w5Qg2vabHTBw17R2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDFkYThkMmEyNWQ1ODljYTVmMDEyODFkZmYyNjNhNTFmMmI4NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4j4q7iivqp+H/VG+hkr+IFbrM9Y
C96Y47udcjIADjMXVcKT+RI73v1C5ZWY1CTtAkCg5U/0ZzP7oteirkKgxvEAioLJ
mkANeMGEx3ZCUUCJUKHVsv9x7WZRRSZ6awqGo6m4zXplCwRNvRYrY+eavIWCLOPU
pfUZYAiDyVzwG1gzAob+AaPi1sb2WRnTNh0nqNBZp9iOYM2AChTpmSyQvVGLGR8Q
37lamlNEJZ0J70IP1xp0gwwu5jIa15HjfkuS5VZj+0Dw0FpHWtrSEq4aa1NL5Boi
2CWpTYibcOaILJv3sIFn6sn1EcF17rWgHFEJfZAJNCIjhmm1b+F1m5Z+AQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFCAdqNKiXVicpfASgd/yY6UfK4XlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2U1MTlh
MC03MmIzLTQwN2YtYmYzYy04ODEwYzVhMjg2M2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZTUxOWEw
LTcyYjMtNDA3Zi1iZjNjLTg4MTBjNWEyODYzZS8xL0lCMm8wcUpkV0p5bDhCS0Iz
X0pqcFI4cmhlVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwhrRMA0EAgACMAcDBQMqEkgAMA0GCSqGSIb3
DQEBCwUAA4IBAQCSAu0NzVkhzCnryyRcUK9RmyO/kkRbOrL0XJrC+bmm+BAqriHT
fobcFkMHIbx1JTC3ODS5Be26xSqHNGDSkqqVAlrqOLQRpAr9NN9bvDQXadxWwXGU
gpP3QAD/oFa4K23Qa6H3+Q3R7kCBtz8L9s6T9VIlodNw2zfJo5F930V1RENFQ99b
Vh9QzT6zgkT/zY16vSYg6MIJkYODxrFz827gC4Cd+nFs1D0rfLs5PyyEM6jPizuP
zXOGf0PwjCDDv6KmKX9fWLoEwImoRab/A2TFzse57a4srYZP2r6M+GMNlWsbEfHi
z1BY/prArhYzASqcS3JvGPg545R7pIw+6Utu
-----END CERTIFICATE-----