Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
File:                     _5TEsdM7owlOw4j3pz2NOc2VCGE.cer (raw, json)
Hash identifier:          rPSF9nbYOdowr0dmmcUqyuMTINb9VVxTQUe+Il1tW/Q=
Subject key identifier:   FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D897F4B17D308CE7C68D31CD3F62A3F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 202539
                          IP: 45.12.200.0/22
                          IP: 2001:67c:1160::/48
                          IP: 2a0e:bf00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:7f:4b:17:d3:08:ce:7c:68:d3:1c:d3:f6:2a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:9b:0b:b8:0f:46:df:8d:97:91:7d:81:5f:
                    a2:d3:1d:4e:9b:e3:32:53:1c:1c:65:9c:09:2a:5d:
                    0d:aa:db:9a:fa:d5:23:ae:dd:26:e7:1c:32:9e:46:
                    3d:04:bd:02:38:d6:7c:8f:f4:24:39:18:4f:93:6f:
                    93:de:b9:91:85:46:6e:a1:de:b1:da:6d:ae:41:0b:
                    a0:12:68:a3:28:51:95:8c:70:27:2c:16:7f:ea:c8:
                    cc:8d:40:8b:c0:4e:17:00:b4:b8:ba:c6:58:77:28:
                    0a:40:a5:10:fd:f5:1d:af:ea:f3:12:dc:42:9e:0b:
                    a4:cf:5f:35:a3:34:ae:29:56:4e:72:5f:5b:69:75:
                    41:58:e2:5f:c7:ee:4b:83:b6:7a:6b:3d:f1:dd:cf:
                    d8:69:c4:1a:4f:96:29:dd:52:8a:31:ba:8e:ab:10:
                    a7:aa:33:d4:5a:bc:3e:62:2c:f4:73:9b:06:6d:61:
                    95:15:10:76:b9:c2:f6:b0:88:8f:d7:96:53:9c:92:
                    3a:4f:d0:46:19:0a:6d:46:4f:00:a7:ac:bb:a8:92:
                    d0:4c:80:56:61:d7:a9:4e:e3:17:f4:1a:02:eb:52:
                    b9:d8:c4:0f:d2:8b:df:81:09:04:89:5b:56:92:1b:
                    e8:26:cb:e1:da:4b:db:dc:07:bf:c4:88:1e:9a:35:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.200.0/22
                IPv6:
                  2001:67c:1160::/48
                  2a0e:bf00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202539

    Signature Algorithm: sha256WithRSAEncryption
         60:a0:9c:b8:61:5a:19:0c:3f:51:c5:d2:7f:01:96:5c:9f:56:
         7e:0e:4c:32:15:5f:87:64:b1:d6:64:8b:9d:9c:58:b7:ba:73:
         75:b4:b2:3f:c1:59:99:1c:09:37:be:f4:1c:de:29:41:ad:27:
         40:21:a6:09:91:36:e1:97:fe:f5:d4:56:62:10:f5:2b:d5:43:
         43:20:4b:e7:1e:d6:3a:d1:34:fa:f0:a2:b1:c4:c6:d3:22:19:
         33:19:e5:06:36:f5:79:02:15:68:e6:01:52:10:99:87:00:d4:
         a1:60:2d:0f:60:05:65:02:01:08:c2:ee:62:17:9b:4c:0e:63:
         30:ef:ac:0e:4f:1d:8d:5c:75:19:ac:6a:18:db:75:6e:ef:78:
         16:07:56:a1:57:c6:d3:39:65:27:94:75:b6:14:c9:7f:f1:c8:
         ef:ec:41:83:1e:be:8f:e2:00:f2:5d:3b:62:1e:34:41:53:50:
         8e:4f:96:d2:59:36:3e:71:73:67:5e:12:62:72:61:c2:e2:65:
         2b:dd:45:6a:6c:4c:c4:e4:2a:b9:ac:69:d4:96:df:79:2f:47:
         4b:c3:12:82:c2:84:73:c4:6b:a8:02:fb:f2:44:8c:29:a6:73:
         6d:81:46:bf:8b:fb:cf:94:69:0b:8c:11:27:11:18:f5:a6:ba:
         09:19:93:88
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAYVtiX9LF9MIznxo0xzT9io/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTMzMzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjk0YzRiMWQzM2JhMzA5NGVjMzg4ZjdhNzNkOGQzOWNkOTUwODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfebC7gPRt+Nl5F9gV+i0x1Om+My
UxwcZZwJKl0Nqtua+tUjrt0m5xwynkY9BL0CONZ8j/QkORhPk2+T3rmRhUZuod6x
2m2uQQugEmijKFGVjHAnLBZ/6sjMjUCLwE4XALS4usZYdygKQKUQ/fUdr+rzEtxC
ngukz181ozSuKVZOcl9baXVBWOJfx+5Lg7Z6az3x3c/YacQaT5Yp3VKKMbqOqxCn
qjPUWrw+Yiz0c5sGbWGVFRB2ucL2sIiP15ZTnJI6T9BGGQptRk8Ap6y7qJLQTIBW
YdepTuMX9BoC61K52MQP0ovfgQkEiVtWkhvoJsvh2kvb3Ae/xIgemjWmWQIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFP+UxLHTO6MJTsOI96c9jTnNlQhhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzE3N2Yy
OS1jNGViLTQxMWYtOTVmZi01ZTEwMmQxOTc3NDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMTc3ZjI5
LWM0ZWItNDExZi05NWZmLTVlMTAyZDE5Nzc0Mi8xL181VEVzZE03b3dsT3c0ajNw
ejJOT2MyVkNHRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF
BwEHAQH/BCgwJjAMBAIAATAGAwQCLQzIMBYEAgACMBADBwAgAQZ8EWADBQMqDr8A
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXKzANBgkqhkiG9w0BAQsFAAOCAQEA
YKCcuGFaGQw/UcXSfwGWXJ9Wfg5MMhVfh2Sx1mSLnZxYt7pzdbSyP8FZmRwJN770
HN4pQa0nQCGmCZE24Zf+9dRWYhD1K9VDQyBL5x7WOtE0+vCiscTG0yIZMxnlBjb1
eQIVaOYBUhCZhwDUoWAtD2AFZQIBCMLuYhebTA5jMO+sDk8djVx1GaxqGNt1bu94
FgdWoVfG0zllJ5R1thTJf/HI7+xBgx6+j+IA8l07Yh40QVNQjk+W0lk2PnFzZ14S
YnJhwuJlK91FamxMxOQquaxp1JbfeS9HS8MSgsKEc8RrqAL78kSMKaZzbYFGv4v7
z5RpC4wRJxEY9aa6CRmTiA==
-----END CERTIFICATE-----