Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.cer
File:                     TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.cer (raw, json)
Hash identifier:          AYnTS2DueBLpNcomhGMm8tu+kkNQfXp82Q+Zy0jEXBU=
Subject key identifier:   4C:08:7D:06:5F:2E:46:95:3C:68:32:6D:C6:99:B3:FC:1F:72:27:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFA4D41988640DD37D13A6870121938
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:16:15 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.52.9.0/24
                          IP: 2a12:6200::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fa:4d:41:98:86:40:dd:37:d1:3a:68:70:12:19:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:16:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c087d065f2e46953c68326dc699b3fc1f7227fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cd:f3:13:89:41:5f:ec:f8:c4:52:ab:bc:28:
                    d8:1e:89:98:33:90:65:d0:49:cb:7a:2b:28:fb:8d:
                    95:ea:0b:75:c2:29:2f:63:1a:5d:bd:da:52:ef:cf:
                    4f:3f:a7:ee:48:8f:b2:2a:57:36:03:26:cf:5e:f5:
                    93:d5:6d:98:59:85:5c:fa:97:b2:6b:79:78:87:99:
                    0a:09:88:da:20:00:1b:45:09:76:7f:16:2c:44:e1:
                    b9:88:76:18:71:a1:66:14:9c:90:f6:de:73:37:85:
                    1f:b5:a9:c0:e9:a7:04:89:ed:45:d1:a0:bf:a8:e5:
                    47:b8:52:f7:ef:d8:d1:69:09:21:51:b5:6d:53:15:
                    3e:b9:00:8e:f7:51:9f:5a:a6:3c:ca:fd:07:e6:e4:
                    ae:95:02:e2:5b:07:63:2a:d0:9f:8d:9b:f8:88:de:
                    ec:9e:60:da:2e:ea:53:95:10:dd:4c:d2:83:3f:e6:
                    8f:a8:1f:fd:24:65:dd:71:a5:ea:52:e6:6d:c0:15:
                    a2:ef:85:15:ab:43:39:38:79:6e:bf:a7:b4:a7:96:
                    59:ff:8b:84:bc:d3:85:e8:de:a2:c0:b6:03:10:4a:
                    1d:b5:c5:4d:6b:32:79:9e:62:00:e6:14:83:e0:85:
                    49:24:9e:84:d8:bf:5d:6c:34:44:e4:f8:cc:68:7a:
                    61:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:08:7D:06:5F:2E:46:95:3C:68:32:6D:C6:99:B3:FC:1F:72:27:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.9.0/24
                IPv6:
                  2a12:6200::/29

    Signature Algorithm: sha256WithRSAEncryption
         1c:ab:58:1a:a6:d9:ca:3b:56:67:cf:d4:98:00:24:cb:af:34:
         ab:9b:70:9a:9d:51:e0:32:95:ac:3b:97:54:b7:58:be:46:04:
         d9:51:ab:6b:76:83:e6:ba:8c:a2:03:2e:37:dd:1d:1d:d2:c7:
         f0:50:7b:89:81:d9:1d:69:3f:d5:65:7f:3c:ed:87:eb:4b:a0:
         ff:94:94:aa:f5:fd:7e:b7:4f:ac:a5:61:9c:ff:b4:7c:07:d1:
         df:4a:51:7b:02:96:b0:82:f7:71:77:6c:a9:e0:13:e4:82:f3:
         0d:1f:fa:c5:d3:ae:7e:88:f7:a5:b0:a4:63:43:c0:e6:02:5a:
         af:b0:9c:30:7b:2e:b1:45:5b:48:ed:53:65:dc:4c:56:3c:03:
         9b:b3:e6:1f:a1:06:dc:4e:c4:bb:32:27:8e:d4:c6:91:a4:7b:
         7a:ad:9d:51:1e:e1:1d:ad:02:b1:db:e9:a1:ea:5e:9d:66:8b:
         fa:ce:ba:fb:34:02:b2:ed:91:ab:f5:75:28:5d:83:42:81:0d:
         75:64:5c:b4:b9:36:8d:38:c5:77:0b:92:5d:70:93:ae:e0:99:
         a6:a5:7d:78:30:f2:ff:43:c9:18:f0:d0:2d:02:9c:8c:94:fe:
         80:fa:8f:0f:22:05:5a:b3:08:ee:5b:7c:61:6f:09:16:a3:6a:
         97:4b:57:08
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu+k1BmIZA3TfROmhwEhk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjAxNjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzA4N2QwNjVmMmU0Njk1M2M2ODMyNmRjNjk5YjNmYzFmNzIyN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c3zE4lBX+z4xFKrvCjYHomYM5Bl
0EnLeiso+42V6gt1wikvYxpdvdpS789PP6fuSI+yKlc2AybPXvWT1W2YWYVc+pey
a3l4h5kKCYjaIAAbRQl2fxYsROG5iHYYcaFmFJyQ9t5zN4UftanA6acEie1F0aC/
qOVHuFL379jRaQkhUbVtUxU+uQCO91GfWqY8yv0H5uSulQLiWwdjKtCfjZv4iN7s
nmDaLupTlRDdTNKDP+aPqB/9JGXdcaXqUuZtwBWi74UVq0M5OHluv6e0p5ZZ/4uE
vNOF6N6iwLYDEEodtcVNazJ5nmIA5hSD4IVJJJ6E2L9dbDRE5PjMaHphXQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEwIfQZfLkaVPGgybcaZs/wfcif8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzL2ZmNWU1
Zi00MzZjLTRlZmMtOGRmNy05YjZkODJhY2VkMzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvZmY1ZTVm
LTQzNmMtNGVmYy04ZGY3LTliNmQ4MmFjZWQzMy8xL1RBaDlCbDh1UnBVOGFESnR4
cG16X0I5eUpfdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1DQJMA0EAgACMAcDBQMqEmIAMA0GCSqGSIb3
DQEBCwUAA4IBAQAcq1gaptnKO1Znz9SYACTLrzSrm3CanVHgMpWsO5dUt1i+RgTZ
UatrdoPmuoyiAy433R0d0sfwUHuJgdkdaT/VZX887YfrS6D/lJSq9f1+t0+spWGc
/7R8B9HfSlF7Apawgvdxd2yp4BPkgvMNH/rF065+iPelsKRjQ8DmAlqvsJwwey6x
RVtI7VNl3ExWPAObs+YfoQbcTsS7MieO1MaRpHt6rZ1RHuEdrQKx2+mh6l6dZov6
zrr7NAKy7ZGr9XUoXYNCgQ11ZFy0uTaNOMV3C5JdcJOu4JmmpX14MPL/Q8kY8NAt
ApyMlP6A+o8PIgVaswjuW3xhbwkWo2qXS1cI
-----END CERTIFICATE-----