Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
File:                     Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer (raw, json)
Hash identifier:          Ha4TPYum6hPSYL0sfvgvBmSjwCIOlc0fjW/IqIygKpU=
Subject key identifier:   26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC649AC8DE6133253EFDB62569C9E3B16
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:29:26 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 62.68.79.0/24
                          IP: 2a12:9780::/29

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 08:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:49:ac:8d:e6:13:32:53:ef:db:62:56:9c:9e:3b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:29:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:91:c9:7d:52:54:4c:c6:61:1d:dc:cc:04:
                    f1:de:4d:4a:07:5f:65:8e:ef:f0:bd:5a:16:b3:7a:
                    f0:3d:21:9c:71:61:35:ab:30:32:3a:f3:dd:33:e8:
                    2c:fa:4f:c1:f3:14:2c:9d:3a:f8:a2:85:78:24:55:
                    e0:0e:2f:d7:23:49:37:b3:f4:76:61:38:e5:6a:25:
                    58:4f:c9:6f:58:ae:e7:92:59:d4:4e:e1:ff:aa:ef:
                    c3:cf:a8:51:a7:aa:32:75:fa:bd:99:c9:36:5c:e3:
                    53:25:ad:39:04:32:bc:26:0a:fd:21:13:46:f4:98:
                    c0:1d:98:03:26:0c:bf:18:15:1c:f2:ce:7d:20:9b:
                    ae:e6:25:04:4c:a1:a2:7c:aa:1f:2f:6c:27:47:76:
                    8a:84:a1:38:a4:b7:8a:21:94:0f:a6:94:68:8f:4e:
                    e1:43:ee:07:09:cb:05:06:c9:37:3a:fe:24:9a:e7:
                    66:f2:20:04:12:53:ed:f7:0a:86:ab:80:8e:2a:95:
                    ad:64:79:d8:af:5e:fc:2a:2f:05:af:43:53:1f:dc:
                    b8:45:1b:f5:36:0b:e0:75:0d:46:f1:bc:e2:97:0b:
                    e6:0c:42:6b:34:78:6f:06:ab:72:4b:cf:43:99:ae:
                    29:f5:96:4a:48:cc:c2:4e:c3:3a:ff:2d:6d:6f:5f:
                    33:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.79.0/24
                IPv6:
                  2a12:9780::/29

    Signature Algorithm: sha256WithRSAEncryption
         0f:62:d6:04:b6:96:8d:1e:54:6f:6a:7f:25:25:d0:a7:23:ec:
         89:74:b5:ef:e6:3c:b6:2b:19:ad:b1:7e:b3:cb:0d:2d:a4:21:
         0b:60:3b:42:25:dd:22:17:f9:b5:20:13:87:36:44:a3:64:8f:
         0b:ef:78:42:7f:5e:0f:d0:a4:57:cc:86:2f:24:6d:f9:08:86:
         6d:50:70:68:5f:60:d7:49:fb:9c:9a:3d:3b:fb:5b:8f:ac:4f:
         e8:8c:32:db:42:3e:24:27:c5:1e:cd:3b:37:41:9e:4f:1e:33:
         3e:72:9e:6b:f6:72:2a:1b:cc:78:4d:fc:cd:5c:ae:66:79:ca:
         46:a5:80:4e:e9:38:62:4a:02:a1:ac:2c:90:bb:8a:f7:41:f9:
         49:e2:9d:7a:63:4e:df:a9:58:2c:e4:81:a3:70:32:b0:66:9e:
         c1:de:16:dc:bb:af:00:80:51:bc:44:4a:1e:9a:50:59:42:b2:
         9d:ea:fb:8a:56:c7:5e:f0:59:e4:f3:03:32:88:2a:0b:15:65:
         05:e8:40:24:df:9f:bb:f6:66:cd:3f:3f:62:6d:d7:21:5b:93:
         2f:3e:39:64:04:da:4c:3a:e0:27:b4:7a:81:95:d1:16:b9:ed:
         c9:98:95:42:e4:b1:18:8b:90:d2:bf:9a:dc:3c:22:79:1f:68:
         c4:bd:58:44
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzGSayN5hMyU+/bYlacnjsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmFmNmEwZTQ5MGQ5ODBjZDRiYzBmOGIwZGZhMTA1YjQ5N2ZlNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7CRyX1SVEzGYR3czATx3k1KB19l
ju/wvVoWs3rwPSGccWE1qzAyOvPdM+gs+k/B8xQsnTr4ooV4JFXgDi/XI0k3s/R2
YTjlaiVYT8lvWK7nklnUTuH/qu/Dz6hRp6oydfq9mck2XONTJa05BDK8Jgr9IRNG
9JjAHZgDJgy/GBUc8s59IJuu5iUETKGifKofL2wnR3aKhKE4pLeKIZQPppRoj07h
Q+4HCcsFBsk3Ov4kmudm8iAEElPt9wqGq4COKpWtZHnYr178Ki8Fr0NTH9y4RRv1
NgvgdQ1G8bzilwvmDEJrNHhvBqtyS89Dma4p9ZZKSMzCTsM6/y1tb18z4QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFCavag5JDZgM1LwPiw36EFtJf+VFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2M2N2M1
Zi02NmJkLTRhZDctOGMwOS04N2M2YjFhNzQwNzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYzY3YzVm
LTY2YmQtNGFkNy04YzA5LTg3YzZiMWE3NDA3OS8xL0pxOXFEa2tObUF6VXZBLUxE
Zm9RVzBsXzVVVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAPkRPMA0EAgACMAcDBQMqEpeAMA0GCSqGSIb3
DQEBCwUAA4IBAQAPYtYEtpaNHlRvan8lJdCnI+yJdLXv5jy2KxmtsX6zyw0tpCEL
YDtCJd0iF/m1IBOHNkSjZI8L73hCf14P0KRXzIYvJG35CIZtUHBoX2DXSfucmj07
+1uPrE/ojDLbQj4kJ8UezTs3QZ5PHjM+cp5r9nIqG8x4TfzNXK5mecpGpYBO6Thi
SgKhrCyQu4r3QflJ4p16Y07fqVgs5IGjcDKwZp7B3hbcu68AgFG8REoemlBZQrKd
6vuKVsde8Fnk8wMyiCoLFWUF6EAk35+79mbNPz9ibdchW5MvPjlkBNpMOuAntHqB
ldEWue3JmJVC5LEYi5DSv5rcPCJ5H2jEvVhE
-----END CERTIFICATE-----