Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
File:                     YVREgdO-f8pegKVkrZPBuKL2Nvg.cer (raw, json)
Hash identifier:          a6P5cfEe8pTXTIuMaX4JedK5Raojig1ilzuhOYN8JnM=
Subject key identifier:   61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E2E2AFB364145B24145D951F558188879
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 11 Mar 2024 15:39:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 213.109.193.0/24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 10:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2e:2a:fb:36:41:45:b2:41:45:d9:51:f5:58:18:88:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 11 15:39:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:91:2e:57:7e:c0:05:a3:43:ab:fa:b8:e7:b3:
                    85:4e:cf:6a:2f:0f:1b:84:ec:a4:18:40:2d:d4:05:
                    b3:d0:8c:53:7d:77:da:fd:f1:63:6a:93:6b:d6:f9:
                    9d:59:07:0e:1d:46:d5:e3:56:68:25:7c:b7:ea:c5:
                    6d:4b:e5:0d:f6:53:69:1f:dc:17:97:5e:da:f5:bd:
                    2f:da:1d:5f:ed:d6:1d:0b:fe:34:78:61:91:7d:ae:
                    f3:d4:2d:d8:d4:73:93:31:ba:79:b8:c2:e7:11:86:
                    74:fd:5c:63:16:8f:bd:f2:c6:7e:aa:7f:36:2c:05:
                    08:7a:08:f6:89:de:c2:a8:d9:94:fd:0d:28:cb:ae:
                    d0:bd:ee:a4:20:c0:14:13:19:ef:84:ce:cb:ec:51:
                    bb:59:c4:ff:1e:92:50:20:c4:3c:03:93:c0:24:40:
                    be:ed:3a:23:2c:67:02:54:5e:bd:ea:b1:ff:08:30:
                    58:05:d8:f6:37:39:89:6e:3c:1b:34:d0:c1:63:dd:
                    a0:ab:cc:42:3c:33:9a:2b:6d:37:7f:8b:de:92:94:
                    f3:32:03:01:f0:b4:a4:5f:cb:de:92:37:eb:f0:8c:
                    ce:74:1a:b4:5d:0e:eb:d0:55:03:43:37:a0:52:2a:
                    cb:7b:15:a2:f2:d1:88:a5:76:5b:e0:f2:3a:94:8d:
                    4a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:63:77:be:f7:00:e2:8a:79:71:e8:11:e9:55:77:ad:de:6f:
         18:4a:9a:5b:24:8b:1a:69:ef:77:c3:f7:65:2d:d5:61:98:a6:
         2e:a8:7e:84:b9:08:b9:a1:4d:80:75:7b:00:6c:2f:aa:a8:f4:
         4f:c7:c4:24:cd:11:c8:da:2e:c7:a4:9e:a1:cc:f5:c8:ce:61:
         c1:53:bc:d2:4b:5d:ab:df:8c:d2:02:6d:4d:fe:25:26:1f:1d:
         8f:54:f0:74:52:62:4a:0b:06:e4:d7:80:8f:a6:76:fc:5c:21:
         c5:7e:7a:8f:50:61:e3:65:5b:ba:b1:23:0a:2a:a0:e8:a7:6e:
         98:45:78:5f:ed:21:f6:10:c6:46:64:89:df:ab:f1:10:83:19:
         fc:09:7c:00:d1:5c:cd:b3:37:4e:ad:fa:38:d1:f4:9b:58:0d:
         39:4d:d6:00:b9:19:7b:0d:28:8d:ef:d0:a2:52:ac:03:3b:28:
         14:dd:0a:78:33:0a:10:73:fc:fb:0c:0c:59:fd:23:e5:46:3a:
         18:22:b9:da:35:6d:b8:d1:1a:65:93:ec:9d:60:82:be:00:d4:
         fc:8b:ce:b2:93:9d:ae:8b:02:6b:e7:d2:70:cb:8e:a5:11:f2:
         37:31:f9:7b:d9:dd:ef:43:b3:87:e5:ab:f7:d8:72:8f:f7:42:
         20:bc:60:1d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY4uKvs2QUWyQUXZUfVYGIh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzExMTUzOTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTU0NDQ4MWQzYmU3ZmNhNWU4MGE1NjRhZDkzYzFiOGEyZjYzNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpEuV37ABaNDq/q457OFTs9qLw8b
hOykGEAt1AWz0IxTfXfa/fFjapNr1vmdWQcOHUbV41ZoJXy36sVtS+UN9lNpH9wX
l17a9b0v2h1f7dYdC/40eGGRfa7z1C3Y1HOTMbp5uMLnEYZ0/VxjFo+98sZ+qn82
LAUIegj2id7CqNmU/Q0oy67Qve6kIMAUExnvhM7L7FG7WcT/HpJQIMQ8A5PAJEC+
7TojLGcCVF696rH/CDBYBdj2NzmJbjwbNNDBY92gq8xCPDOaK203f4vekpTzMgMB
8LSkX8vekjfr8IzOdBq0XQ7r0FUDQzegUirLexWi8tGIpXZb4PI6lI1KUQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGFURIHTvn/KXoClZK2Twbii9jb4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2VjZWMz
Ny0zMGI4LTRlMTktYmJiMi1mNjdlMTc1ZDRiYTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZWNlYzM3
LTMwYjgtNGUxOS1iYmIyLWY2N2UxNzVkNGJhNy8xL1lWUkVnZE8tZjhwZWdLVmty
WlBCdUtMMk52Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA1W3BMA0GCSqGSIb3DQEBCwUAA4IBAQB2Y3e+
9wDiinlx6BHpVXet3m8YSppbJIsaae93w/dlLdVhmKYuqH6EuQi5oU2AdXsAbC+q
qPRPx8QkzRHI2i7HpJ6hzPXIzmHBU7zSS12r34zSAm1N/iUmHx2PVPB0UmJKCwbk
14CPpnb8XCHFfnqPUGHjZVu6sSMKKqDop26YRXhf7SH2EMZGZInfq/EQgxn8CXwA
0VzNszdOrfo40fSbWA05TdYAuRl7DSiN79CiUqwDOygU3Qp4MwoQc/z7DAxZ/SPl
RjoYIrnaNW240Rplk+ydYIK+ANT8i86yk52uiwJr59Jwy46lEfI3Mfl72d3vQ7OH
5av32HKP90IgvGAd
-----END CERTIFICATE-----