Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RNPgIKgZqM2mCdXqSEQe6TnkGYU.cer
File:                     RNPgIKgZqM2mCdXqSEQe6TnkGYU.cer (raw, json)
Hash identifier:          PGkoFumEeTzYgRHtme6RL4WZRsA+kjHkMoIqF6JncN8=
Subject key identifier:   44:D3:E0:20:A8:19:A8:CD:A6:09:D5:EA:48:44:1E:E9:39:E4:19:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DF9528D72AA3E08F4C5F994F85AE0D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/RNPgIKgZqM2mCdXqSEQe6TnkGYU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:32:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 45.157.137.0/24

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 13:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:95:28:d7:2a:a3:e0:8f:4c:5f:99:4f:85:ae:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:32:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=44d3e020a819a8cda609d5ea48441ee939e41985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:9c:50:76:9b:2b:e7:d5:fe:01:12:83:14:
                    27:ee:d9:ad:cb:ef:f1:25:62:24:8c:f3:5f:8a:c3:
                    70:3a:51:a2:9a:d4:ec:ec:71:78:84:72:2c:86:d2:
                    a0:2f:ee:79:ec:43:6f:a8:c3:3a:13:ff:76:e1:7c:
                    4d:ee:09:81:9b:cf:f8:b8:40:3d:b9:40:5e:46:8b:
                    1b:7d:33:b9:24:69:61:df:e5:2c:12:ac:ba:70:0e:
                    0b:f5:d4:bd:00:33:b0:71:d3:36:51:3f:24:0f:75:
                    a3:91:ed:63:61:48:00:ef:96:4f:aa:ec:b0:40:ca:
                    35:a8:9a:85:b1:a7:9d:63:ea:ee:71:6a:41:7c:94:
                    ca:62:e6:ab:2d:ac:fb:51:c3:2c:47:53:b7:52:18:
                    ac:ba:fa:1f:3a:ee:72:18:05:62:04:3a:03:9d:fd:
                    b1:7a:4a:14:cb:f3:b4:db:72:50:d5:5b:60:36:31:
                    ec:70:25:12:15:47:42:b8:36:dd:1a:3d:32:c2:b3:
                    53:9f:c3:5a:96:34:77:3f:5f:55:15:4d:90:52:f2:
                    9e:b0:f2:08:fa:3a:c0:fe:a7:60:0c:e4:95:c5:ea:
                    6f:5d:cd:b3:30:9d:57:8a:3b:05:c7:03:6b:9b:b2:
                    10:69:e8:68:a3:51:6f:fc:69:af:b7:24:2c:13:71:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D3:E0:20:A8:19:A8:CD:A6:09:D5:EA:48:44:1E:E9:39:E4:19:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/RNPgIKgZqM2mCdXqSEQe6TnkGYU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:41:14:fc:04:64:df:04:be:91:59:e8:bd:4a:4e:84:ad:
         5c:15:5c:75:c4:67:08:30:01:fe:bc:bf:2b:ec:7e:f7:e2:b8:
         56:34:0f:56:f5:bb:3b:8f:50:ea:86:a7:50:7b:96:31:4f:d3:
         0f:ed:3b:ad:fc:c8:ec:5c:f4:f2:34:0a:ba:51:d8:f0:55:ec:
         b2:9c:32:8b:18:19:36:d4:8f:b1:98:90:bc:bf:88:f2:56:46:
         cd:17:01:45:bf:93:5f:1f:3c:19:0b:28:af:2b:33:e3:60:48:
         d6:76:c2:d5:bc:76:83:fb:6c:f7:da:75:72:b8:bb:2f:0d:b2:
         dd:dc:16:4b:24:05:79:ff:49:b2:5d:d4:4e:79:46:8b:13:1d:
         36:45:90:96:3d:f4:a8:db:23:a1:77:26:7e:13:96:84:b6:e8:
         1b:9a:a9:19:74:64:3f:3f:f9:e7:8a:d3:21:97:08:46:b5:67:
         d1:d0:00:06:82:44:12:e2:98:e8:be:5e:73:83:76:fe:23:dd:
         bd:9b:a0:8a:68:71:ee:89:ac:2c:c7:d7:96:c8:56:2f:f3:af:
         50:86:f2:dc:61:f7:dc:48:74:18:d4:16:7a:a2:3c:ba:ed:24:
         cf:55:90:cf:e9:c4:1e:97:fb:9e:52:69:67:bc:8b:95:cd:54:
         09:84:45:19
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzI35Uo1yqj4I9MX5lPha4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGQzZTAyMGE4MTlhOGNkYTYwOWQ1ZWE0ODQ0MWVlOTM5ZTQxOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYScUHabK+fV/gESgxQn7tmty+/x
JWIkjPNfisNwOlGimtTs7HF4hHIshtKgL+557ENvqMM6E/924XxN7gmBm8/4uEA9
uUBeRosbfTO5JGlh3+UsEqy6cA4L9dS9ADOwcdM2UT8kD3Wjke1jYUgA75ZPquyw
QMo1qJqFsaedY+rucWpBfJTKYuarLaz7UcMsR1O3UhisuvofOu5yGAViBDoDnf2x
ekoUy/O023JQ1VtgNjHscCUSFUdCuDbdGj0ywrNTn8NaljR3P19VFU2QUvKesPII
+jrA/qdgDOSVxepvXc2zMJ1XijsFxwNrm7IQaehoo1Fv/GmvtyQsE3GW0wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFETT4CCoGajNpgnV6khEHuk55BmFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3L2E3NzVj
Ni0wYTZlLTRkNzUtOTk5MC1lNzk1YmU2Mjk2NzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvYTc3NWM2
LTBhNmUtNGQ3NS05OTkwLWU3OTViZTYyOTY3Ny8xL1JOUGdJS2dacU0ybUNkWHFT
RVFlNlRua0dZVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQALZ2JMA0GCSqGSIb3DQEBCwUAA4IBAQBs9EEU
/ARk3wS+kVnovUpOhK1cFVx1xGcIMAH+vL8r7H734rhWNA9W9bs7j1DqhqdQe5Yx
T9MP7Tut/MjsXPTyNAq6UdjwVeyynDKLGBk21I+xmJC8v4jyVkbNFwFFv5NfHzwZ
CyivKzPjYEjWdsLVvHaD+2z32nVyuLsvDbLd3BZLJAV5/0myXdROeUaLEx02RZCW
PfSo2yOhdyZ+E5aEtugbmqkZdGQ/P/nnitMhlwhGtWfR0AAGgkQS4pjovl5zg3b+
I929m6CKaHHuiawsx9eWyFYv869QhvLcYffcSHQY1BZ6ojy67STPVZDP6cQel/ue
UmlnvIuVzVQJhEUZ
-----END CERTIFICATE-----