Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer
File:                     U-3eLO8vtcq06h6neUAdKVcI2nc.cer (raw, json)
Hash identifier:          BhGcxu8qeOxsoWlHJco4Hzpv3U1J5Nk4IdGTmELGjyQ=
Subject key identifier:   53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4F3B2E822B62EA955FC536BC10B65
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 83.138.50.0/24

Validation:               Failed, certificate revoked on Wed 22 Mar 2023 18:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:f3:b2:e8:22:b6:2e:a9:55:fc:53:6b:c1:0b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=53edde2cef2fb5cab4ea1ea779401d295708da77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:b6:32:89:6d:27:10:91:ab:46:2a:8c:65:
                    a2:ae:8a:df:67:e1:5a:63:1a:3c:9e:69:98:c2:2f:
                    d3:14:09:fb:63:52:97:0b:86:77:79:69:76:53:8f:
                    c1:1c:15:29:36:a8:c1:2e:3e:14:98:0f:bd:f5:fa:
                    4b:4f:b5:c3:71:44:ba:f2:dd:a9:8e:5b:c2:23:86:
                    ec:f3:71:8c:95:1a:70:64:70:b6:1c:a9:03:a6:6a:
                    c1:3d:57:51:f9:48:25:7b:4d:0f:43:dc:07:c5:43:
                    aa:68:3d:d7:1d:42:f7:2a:93:e2:96:90:d9:95:28:
                    ba:a9:d9:68:18:29:6f:2b:d7:de:ff:33:60:07:19:
                    b2:35:0c:94:77:86:1b:d4:d9:74:91:4b:b9:04:87:
                    4c:fe:ab:ae:74:01:4a:59:70:ac:66:35:d1:1f:f5:
                    94:2e:89:96:24:56:08:17:20:1f:e2:9d:0a:7c:16:
                    b3:f0:11:fd:86:a8:92:04:ac:04:28:e3:4b:26:16:
                    f2:07:76:6b:13:74:44:9b:2a:d1:9a:df:d5:e5:7c:
                    d4:1f:06:4d:94:95:7b:66:4a:28:27:e4:04:26:f2:
                    ad:34:83:43:02:11:6c:a5:ec:85:f4:dc:e7:7d:4a:
                    10:1a:c9:99:a7:32:a8:37:02:2d:31:0c:d5:a1:bd:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:c6:3d:26:f9:96:5b:5c:c4:ca:ae:bc:72:a8:e0:96:1f:b8:
         c9:8b:c3:a8:58:c7:29:a7:c7:9b:08:34:25:58:67:15:b8:aa:
         d1:97:95:40:ac:10:6b:7b:4f:f2:f9:1d:23:0d:a1:8e:e1:51:
         88:06:ad:e0:ad:52:75:b6:9d:cc:cd:fc:40:65:69:e7:e6:73:
         f9:52:ad:4d:42:c4:16:6a:6e:67:21:84:3e:69:30:ed:32:a4:
         50:d6:87:22:de:44:06:52:ff:51:89:05:73:e5:2f:ce:cd:c3:
         08:59:2b:99:6e:74:90:b6:3e:8c:fe:40:05:41:63:47:54:82:
         a1:47:21:23:af:25:c6:bb:e9:6e:58:5b:e8:32:ec:e2:5b:a6:
         5a:84:92:a7:67:5b:d3:62:8a:6d:7b:5c:e5:58:3f:f2:44:8c:
         5d:e1:29:ee:53:0f:48:db:bd:fa:a2:60:c5:a1:98:18:4a:05:
         6c:66:3e:82:8e:23:e5:1a:01:6b:bb:82:10:8f:2c:97:57:45:
         19:ec:ed:f3:74:40:0e:fe:43:a4:27:a6:38:91:c2:0d:e8:15:
         e8:13:85:56:38:14:c7:24:07:34:6f:bf:c1:42:62:e7:45:f5:
         9c:6a:31:4c:3c:1f:84:f3:50:2f:af:d5:f2:0d:a2:52:f8:0c:
         df:d8:a5:08
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVq9POy6CK2LqlV/FNrwQtlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2VkZGUyY2VmMmZiNWNhYjRlYTFlYTc3OTQwMWQyOTU3MDhkYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyy2MoltJxCRq0YqjGWirorfZ+Fa
Yxo8nmmYwi/TFAn7Y1KXC4Z3eWl2U4/BHBUpNqjBLj4UmA+99fpLT7XDcUS68t2p
jlvCI4bs83GMlRpwZHC2HKkDpmrBPVdR+Ugle00PQ9wHxUOqaD3XHUL3KpPilpDZ
lSi6qdloGClvK9fe/zNgBxmyNQyUd4Yb1Nl0kUu5BIdM/quudAFKWXCsZjXRH/WU
LomWJFYIFyAf4p0KfBaz8BH9hqiSBKwEKONLJhbyB3ZrE3REmyrRmt/V5XzUHwZN
lJV7ZkooJ+QEJvKtNINDAhFspeyF9NznfUoQGsmZpzKoNwItMQzVob3/TwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFPt3izvL7XKtOoep3lAHSlXCNp3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzZhMmJi
NS0wMjE3LTQ1OTUtYmVmNi00NjM4YTY2ZTRkZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvNmEyYmI1
LTAyMTctNDU5NS1iZWY2LTQ2MzhhNjZlNGRkOC8xL1UtM2VMTzh2dGNxMDZoNm5l
VUFkS1ZjSTJuYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAU4oyMA0GCSqGSIb3DQEBCwUAA4IBAQB2xj0m
+ZZbXMTKrrxyqOCWH7jJi8OoWMcpp8ebCDQlWGcVuKrRl5VArBBre0/y+R0jDaGO
4VGIBq3grVJ1tp3MzfxAZWnn5nP5Uq1NQsQWam5nIYQ+aTDtMqRQ1oci3kQGUv9R
iQVz5S/OzcMIWSuZbnSQtj6M/kAFQWNHVIKhRyEjryXGu+luWFvoMuziW6ZahJKn
Z1vTYopte1zlWD/yRIxd4SnuUw9I2736omDFoZgYSgVsZj6CjiPlGgFru4IQjyyX
V0UZ7O3zdEAO/kOkJ6Y4kcIN6BXoE4VWOBTHJAc0b7/BQmLnRfWcajFMPB+E81Av
r9XyDaJS+Azf2KUI
-----END CERTIFICATE-----