Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JPqs922QTfKeoCh-3x7BmaBaNw4.cer
File:                     JPqs922QTfKeoCh-3x7BmaBaNw4.cer (raw, json)
Hash identifier:          SrkD5rweeEXBxJDnrLD73I5LZmsdCLZXesed0QcgoVk=
Subject key identifier:   24:FA:AC:F7:6D:90:4D:F2:9E:A0:28:7E:DF:1E:C1:99:A0:5A:37:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F41DE934CCAA55F703CD47A35342564
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/JPqs922QTfKeoCh-3x7BmaBaNw4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.255.222.0/24

Validation:               Failed, certificate revoked on Wed 29 Nov 2023 15:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:41:de:93:4c:ca:a5:5f:70:3c:d4:7a:35:34:25:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=24faacf76d904df29ea0287edf1ec199a05a370e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:32:01:af:7e:bd:a0:3e:13:dc:94:80:d3:2e:
                    dd:e0:98:07:cc:f5:97:a6:85:14:1a:0c:e7:9c:7e:
                    5d:2e:14:bf:11:c1:05:2f:1a:05:0f:31:61:5a:97:
                    a7:9b:e4:5a:47:75:16:e3:a7:80:54:5d:25:fa:e6:
                    ed:13:6b:9e:8d:f4:db:b2:05:ad:18:ff:9d:ef:88:
                    4e:5d:65:b8:17:f6:6c:3f:5d:13:87:8f:0e:07:0b:
                    fb:c1:ab:97:cb:02:2f:13:ce:de:58:7f:ca:05:b4:
                    b5:76:1a:09:04:cd:fb:9e:a7:c0:7d:08:18:55:3d:
                    c2:bd:b2:bd:97:85:2a:a8:ef:9e:1f:cb:7b:c9:2d:
                    93:13:33:65:5b:66:a2:e2:d3:f1:bb:fc:84:26:66:
                    cd:55:54:59:94:88:b2:4e:eb:e8:b6:e7:b6:bb:ff:
                    a0:18:17:ee:0c:b6:e9:cf:cb:25:d2:b4:d5:53:3b:
                    ff:91:13:74:fe:22:5f:25:12:5f:56:03:9d:3b:70:
                    58:11:f0:98:f7:36:b3:d5:72:6c:07:f1:c8:95:bf:
                    eb:48:50:80:11:19:ab:7f:f2:be:a0:05:8d:03:9a:
                    4b:2d:a4:07:de:94:6c:aa:0c:79:7b:13:89:bf:c9:
                    82:86:7c:4a:06:c4:8e:58:55:10:f9:79:62:0a:57:
                    f4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FA:AC:F7:6D:90:4D:F2:9E:A0:28:7E:DF:1E:C1:99:A0:5A:37:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/JPqs922QTfKeoCh-3x7BmaBaNw4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.255.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:8c:10:d5:5f:aa:31:7c:77:b1:3f:e6:bb:9a:12:a3:ed:ed:
         39:58:0e:2f:91:c6:78:4a:bb:86:29:3f:6d:cd:50:64:a2:7f:
         18:c6:8f:12:a1:ee:55:1f:f0:c0:3c:00:4f:38:23:6a:0d:aa:
         43:c2:cc:9d:0b:4c:14:ef:92:41:a8:9d:66:4a:85:92:15:95:
         98:b9:58:bf:99:80:a8:c2:f3:bf:05:fe:ce:75:5f:74:d0:f0:
         e6:3d:0f:be:cb:08:b4:4d:51:08:60:65:eb:1f:ab:81:90:22:
         c2:c0:65:fb:f7:8c:b3:f6:91:25:c6:36:36:f9:3e:9c:de:c3:
         21:c5:e9:f9:dd:85:81:46:20:99:b1:d2:09:4f:a6:c8:fb:53:
         ab:88:85:f7:ef:fa:6f:ff:aa:c8:c4:36:69:6d:1e:c7:7b:e8:
         fd:7b:43:9f:30:a3:31:d3:33:77:35:a5:84:78:f4:84:f0:60:
         44:fb:74:7b:ce:d3:75:1b:c6:d0:67:b8:53:d8:6a:e2:13:cc:
         37:b4:c6:cc:fc:53:0d:18:7a:28:b4:3c:8f:dd:e0:18:2e:06:
         a9:2b:e9:0f:f9:29:b7:04:4b:43:7b:a6:50:f6:48:fe:21:8f:
         66:9c:1b:b1:4e:9f:07:35:bc:6a:fa:35:87:6c:1c:e6:3c:76:
         d9:81:77:8b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVvQd6TTMqlX3A81Ho1NCVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjEzNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGZhYWNmNzZkOTA0ZGYyOWVhMDI4N2VkZjFlYzE5OWEwNWEzNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTIBr369oD4T3JSA0y7d4JgHzPWX
poUUGgznnH5dLhS/EcEFLxoFDzFhWpenm+RaR3UW46eAVF0l+ubtE2uejfTbsgWt
GP+d74hOXWW4F/ZsP10Th48OBwv7wauXywIvE87eWH/KBbS1dhoJBM37nqfAfQgY
VT3CvbK9l4UqqO+eH8t7yS2TEzNlW2ai4tPxu/yEJmbNVVRZlIiyTuvotue2u/+g
GBfuDLbpz8sl0rTVUzv/kRN0/iJfJRJfVgOdO3BYEfCY9zaz1XJsB/HIlb/rSFCA
ERmrf/K+oAWNA5pLLaQH3pRsqgx5exOJv8mChnxKBsSOWFUQ+XliClf08wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCT6rPdtkE3ynqAoft8ewZmgWjcOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzE3Yzk3
MC00MjdhLTQ5ZDYtYWUyZS1mNDU3ZGZjMmE2N2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvMTdjOTcw
LTQyN2EtNDlkNi1hZTJlLWY0NTdkZmMyYTY3Zi8xL0pQcXM5MjJRVGZLZW9DaC0z
eDdCbWFCYU53NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAsv/eMA0GCSqGSIb3DQEBCwUAA4IBAQAWjBDV
X6oxfHexP+a7mhKj7e05WA4vkcZ4SruGKT9tzVBkon8Yxo8Soe5VH/DAPABPOCNq
DapDwsydC0wU75JBqJ1mSoWSFZWYuVi/mYCowvO/Bf7OdV900PDmPQ++ywi0TVEI
YGXrH6uBkCLCwGX794yz9pElxjY2+T6c3sMhxen53YWBRiCZsdIJT6bI+1OriIX3
7/pv/6rIxDZpbR7He+j9e0OfMKMx0zN3NaWEePSE8GBE+3R7ztN1G8bQZ7hT2Gri
E8w3tMbM/FMNGHootDyP3eAYLgapK+kP+Sm3BEtDe6ZQ9kj+IY9mnBuxTp8HNbxq
+jWHbBzmPHbZgXeL
-----END CERTIFICATE-----