Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pt_-fALMft5eWJhBzILWRKT97yU.cer
File:                     Pt_-fALMft5eWJhBzILWRKT97yU.cer (raw, json)
Hash identifier:          AoCtS9Tk1xtz0K84YL1MUw4cj6bm2+9lNrw3WLeSqDg=
Subject key identifier:   3E:DF:FE:7C:02:CC:7E:DE:5E:58:98:41:CC:82:D6:44:A4:FD:EF:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708C2168E3DFB9BDD87718F0A33F4E05
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/72/34a59e-02cd-4313-b61c-cf1f7d7ff7cd/1/Pt_-fALMft5eWJhBzILWRKT97yU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/72/34a59e-02cd-4313-b61c-cf1f7d7ff7cd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:35:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.173.0/24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 14:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:21:68:e3:df:b9:bd:d8:77:18:f0:a3:3f:4e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:35:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3edffe7c02cc7ede5e589841cc82d644a4fdef25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5c:f4:7b:58:52:2e:28:4e:a8:2c:d1:08:c7:
                    a5:26:6e:74:36:76:02:f4:b6:0f:80:6a:4b:a7:93:
                    d7:7d:b4:55:82:97:96:d4:7b:ad:86:77:ed:ce:c7:
                    fc:80:25:6a:15:0a:7d:9c:ca:db:a3:21:cb:7c:ca:
                    14:cc:87:57:86:96:b2:e1:28:5b:83:51:be:61:0b:
                    16:13:cf:74:63:c6:ef:5d:08:3e:36:34:f1:8e:3c:
                    cf:9a:0b:d2:48:70:2a:84:02:76:59:1a:21:b4:ef:
                    3c:c0:26:37:91:2d:d5:1d:e8:2f:e1:f6:21:f6:5e:
                    be:c3:0e:dd:d3:9a:7d:3e:f7:24:a8:5f:f3:e4:4f:
                    e6:72:80:78:55:ac:b3:a1:96:ea:79:66:4c:1f:b5:
                    32:de:97:81:8e:a5:75:d6:cf:21:82:8b:8c:e8:55:
                    7b:1f:a9:88:23:1f:20:de:c8:a6:36:e8:c1:0f:f4:
                    ed:60:78:ab:5d:4e:6a:ab:9d:26:9b:ac:1e:55:e0:
                    0b:ca:81:93:3d:f8:a3:ae:6a:41:d6:e7:36:c5:3a:
                    a6:22:da:a4:f1:a3:8f:db:d6:42:c6:a6:9f:c5:30:
                    47:55:2e:d8:35:66:d9:23:28:ed:92:62:e9:2e:2f:
                    9c:b9:6e:ac:6f:e3:fc:e9:92:de:0d:04:f7:b9:cd:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DF:FE:7C:02:CC:7E:DE:5E:58:98:41:CC:82:D6:44:A4:FD:EF:25
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34a59e-02cd-4313-b61c-cf1f7d7ff7cd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34a59e-02cd-4313-b61c-cf1f7d7ff7cd/1/Pt_-fALMft5eWJhBzILWRKT97yU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:e7:1d:72:95:c1:26:91:bf:fc:d1:c4:43:15:bc:77:41:53:
         dd:d0:df:ff:bd:bf:75:da:38:e8:e8:fc:1a:31:44:7f:7c:c4:
         ce:fd:53:13:d4:0d:dd:63:db:a4:18:82:ed:44:ec:bb:90:cd:
         b5:1a:b9:3c:dd:57:0b:2a:5e:9a:c2:31:67:5d:44:6e:af:72:
         cf:67:13:cf:ea:09:fb:cf:60:e2:91:9a:b2:a2:bc:cb:e7:7f:
         32:86:02:41:d3:38:5e:95:80:a8:59:0a:8e:53:1d:cc:66:d0:
         f6:f2:d7:19:5e:42:5b:67:59:44:8c:fa:dd:94:05:91:e8:d7:
         38:70:4e:23:8e:7a:36:4a:27:49:27:57:d6:ff:f8:67:1a:a1:
         68:16:d7:00:22:b4:26:83:f1:3a:1b:7b:2f:44:b3:50:2e:e6:
         9e:d1:f1:23:50:89:a9:80:0a:00:e4:ed:b6:ca:b4:0a:ee:49:
         74:43:1b:77:7d:18:6d:1c:2c:a6:ef:66:0d:05:d7:4d:e3:b8:
         3e:51:12:5f:0d:2a:81:43:2a:92:66:1f:c6:45:4e:26:6a:cf:
         1f:e4:4d:4c:0b:fc:ac:23:3c:fd:54:c8:28:4f:34:21:e8:aa:
         94:90:ca:b7:30:39:f1:9f:0b:04:bb:f2:00:9a:d2:fe:e2:d8:
         6c:9b:09:a3
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVwjCFo49+5vdh3GPCjP04FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWRmZmU3YzAyY2M3ZWRlNWU1ODk4NDFjYzgyZDY0NGE0ZmRlZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vz0e1hSLihOqCzRCMelJm50NnYC
9LYPgGpLp5PXfbRVgpeW1Huthnftzsf8gCVqFQp9nMrboyHLfMoUzIdXhpay4Shb
g1G+YQsWE890Y8bvXQg+NjTxjjzPmgvSSHAqhAJ2WRohtO88wCY3kS3VHegv4fYh
9l6+ww7d05p9PvckqF/z5E/mcoB4VayzoZbqeWZMH7Uy3peBjqV11s8hgouM6FV7
H6mIIx8g3simNujBD/TtYHirXU5qq50mm6weVeALyoGTPfijrmpB1uc2xTqmItqk
8aOP29ZCxqafxTBHVS7YNWbZIyjtkmLpLi+cuW6sb+P86ZLeDQT3uc0hgQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFD7f/nwCzH7eXliYQcyC1kSk/e8lMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzM0YTU5
ZS0wMmNkLTQzMTMtYjYxYy1jZjFmN2Q3ZmY3Y2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvMzRhNTll
LTAyY2QtNDMxMy1iNjFjLWNmMWY3ZDdmZjdjZC8xL1B0Xy1mQUxNZnQ1ZVdKaEJ6
SUxXUktUOTd5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAkhOtMA0GCSqGSIb3DQEBCwUAA4IBAQBD5x1y
lcEmkb/80cRDFbx3QVPd0N//vb912jjo6PwaMUR/fMTO/VMT1A3dY9ukGILtROy7
kM21Grk83VcLKl6awjFnXURur3LPZxPP6gn7z2DikZqyorzL538yhgJB0zhelYCo
WQqOUx3MZtD28tcZXkJbZ1lEjPrdlAWR6Nc4cE4jjno2SidJJ1fW//hnGqFoFtcA
IrQmg/E6G3svRLNQLuae0fEjUImpgAoA5O22yrQK7kl0Qxt3fRhtHCym72YNBddN
47g+URJfDSqBQyqSZh/GRU4mas8f5E1MC/ysIzz9VMgoTzQh6KqUkMq3MDnxnwsE
u/IAmtL+4thsmwmj
-----END CERTIFICATE-----