Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yz-loMMwnqWJUzqrg4CWrEa8JO4.cer
File:                     Yz-loMMwnqWJUzqrg4CWrEa8JO4.cer (raw, json)
Hash identifier:          6iPqxSqZ5B/KhfiaJZeADuj700MHFp+w0hcTMnpGoEA=
Subject key identifier:   63:3F:A5:A0:C3:30:9E:A5:89:53:3A:AB:83:80:96:AC:46:BC:24:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0189682C5FE42832F588330BFB529B66296D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/d9ccc4-cc19-4d75-a7de-9b354597f7b5/1/Yz-loMMwnqWJUzqrg4CWrEa8JO4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/d9ccc4-cc19-4d75-a7de-9b354597f7b5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Jul 2023 08:44:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 197791

Validation:               Failed, certificate revoked on Tue 18 Jul 2023 08:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:68:2c:5f:e4:28:32:f5:88:33:0b:fb:52:9b:66:29:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 18 08:44:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=633fa5a0c3309ea589533aab838096ac46bc24ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:57:7a:77:7b:de:91:98:d7:01:5d:2c:50:ac:
                    0b:89:e2:0f:9d:d2:43:17:1b:e6:ff:e5:d9:88:20:
                    43:3d:52:84:63:bb:d2:69:04:7a:78:40:f7:24:8c:
                    fe:4e:6c:db:a0:c7:fb:d5:6f:ac:06:f4:d6:77:45:
                    a7:47:74:5a:81:b4:28:60:1a:8c:4b:8e:f8:5d:27:
                    34:d3:42:7a:2b:7d:18:e8:89:eb:6e:16:ac:d2:26:
                    89:42:f2:95:4c:64:af:2c:67:64:99:35:cd:ce:56:
                    d5:c0:f4:ac:64:5d:82:b1:4a:47:9f:1b:47:72:7a:
                    91:bf:47:01:24:bb:95:87:60:82:d9:b2:04:bb:f6:
                    cc:18:f0:49:b4:f8:50:17:7c:f9:0f:c4:55:89:6f:
                    b6:b7:da:8a:7b:d1:40:26:1e:05:10:04:21:80:73:
                    39:2a:b5:3f:67:99:fa:26:d7:3a:43:af:3e:f1:a5:
                    a8:c3:cf:7e:af:e5:d4:bb:2b:0d:a1:b6:a1:9c:8c:
                    62:6c:b6:9e:46:0b:7a:30:3e:64:3c:c9:41:fd:6e:
                    80:3e:6d:bc:7c:51:e6:f6:d0:f4:41:30:aa:62:cc:
                    32:ca:fe:09:1b:6a:9b:35:4a:27:ef:93:dd:2f:b2:
                    bb:70:3e:3c:bc:3c:9a:17:ad:3f:4d:d3:48:35:86:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3F:A5:A0:C3:30:9E:A5:89:53:3A:AB:83:80:96:AC:46:BC:24:EE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d9ccc4-cc19-4d75-a7de-9b354597f7b5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d9ccc4-cc19-4d75-a7de-9b354597f7b5/1/Yz-loMMwnqWJUzqrg4CWrEa8JO4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197791

    Signature Algorithm: sha256WithRSAEncryption
         1e:e3:a3:47:12:f7:15:39:37:c2:c4:b6:80:f3:55:8f:3e:15:
         77:b1:76:35:e7:71:82:f8:0a:ff:2c:09:d7:f3:be:63:f6:da:
         e6:e2:c8:c4:61:6f:39:9f:4d:48:61:c8:eb:42:50:31:ef:10:
         e4:a6:dd:a2:2d:bf:7d:5f:75:1a:9e:7c:67:6d:e8:49:bb:3b:
         d5:b6:c5:23:e7:a7:a9:22:24:75:69:0e:ef:65:3c:7e:75:c0:
         73:a4:5a:6b:03:a0:c2:86:a8:6a:ab:8d:ca:a1:2e:4c:b3:88:
         bd:3c:13:76:13:19:b4:91:23:b5:80:a7:af:41:31:df:db:f5:
         c2:36:f9:a3:c4:38:42:5a:6e:dd:99:ed:31:30:2c:ef:df:58:
         cd:cc:58:7f:54:6c:46:95:92:26:7e:7b:02:cc:f6:af:ce:0d:
         63:ca:56:0b:60:e5:64:88:ff:99:17:fc:09:11:a3:b9:44:8d:
         d2:a6:f3:f6:d7:7f:45:95:74:e3:f4:93:50:0f:a3:a0:4d:29:
         97:3f:67:dc:fd:3b:bc:cd:21:89:bc:78:e9:5c:8a:0a:20:d0:
         c5:fc:0d:60:92:d6:14:39:ba:6b:ed:49:c1:38:ed:d8:59:d9:
         01:f1:88:c2:39:be:6a:b4:c0:b0:96:24:2c:03:9b:c9:73:c6:
         78:0b:85:6c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYloLF/kKDL1iDML+1KbZiltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNzE4MDg0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzNmYTVhMGMzMzA5ZWE1ODk1MzNhYWI4MzgwOTZhYzQ2YmMyNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFd6d3vekZjXAV0sUKwLieIPndJD
Fxvm/+XZiCBDPVKEY7vSaQR6eED3JIz+TmzboMf71W+sBvTWd0WnR3RagbQoYBqM
S474XSc000J6K30Y6Inrbhas0iaJQvKVTGSvLGdkmTXNzlbVwPSsZF2CsUpHnxtH
cnqRv0cBJLuVh2CC2bIEu/bMGPBJtPhQF3z5D8RViW+2t9qKe9FAJh4FEAQhgHM5
KrU/Z5n6Jtc6Q68+8aWow89+r+XUuysNobahnIxibLaeRgt6MD5kPMlB/W6APm28
fFHm9tD0QTCqYswyyv4JG2qbNUon75PdL7K7cD48vDyaF60/TdNINYYR9wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFGM/paDDMJ6liVM6q4OAlqxGvCTuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2Q5Y2Nj
NC1jYzE5LTRkNzUtYTdkZS05YjM1NDU5N2Y3YjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvZDljY2M0
LWNjMTktNGQ3NS1hN2RlLTliMzU0NTk3ZjdiNS8xL1l6LWxvTU13bnFXSlV6cXJn
NENXckVhOEpPNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMEnzANBgkqhkiG9w0BAQsFAAOCAQEAHuOjRxL3FTk3
wsS2gPNVjz4Vd7F2NedxgvgK/ywJ1/O+Y/ba5uLIxGFvOZ9NSGHI60JQMe8Q5Kbd
oi2/fV91Gp58Z23oSbs71bbFI+enqSIkdWkO72U8fnXAc6RaawOgwoaoaquNyqEu
TLOIvTwTdhMZtJEjtYCnr0Ex39v1wjb5o8Q4Qlpu3ZntMTAs799YzcxYf1RsRpWS
Jn57Asz2r84NY8pWC2DlZIj/mRf8CRGjuUSN0qbz9td/RZV04/STUA+joE0plz9n
3P07vM0hibx46VyKCiDQxfwNYJLWFDm6a+1JwTjt2FnZAfGIwjm+arTAsJYkLAOb
yXPGeAuFbA==
-----END CERTIFICATE-----