Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer
File:                     d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer (raw, json)
Hash identifier:          axWRmSXjlmC4hEjRvEsnb23ZQRNGkKhOBznbr2gMtmk=
Subject key identifier:   77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857245BBE1BE44153D2C81FDAA585616FC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/d8YTGy2Xn5V-se0dvL7jxd8ojHg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.121.0/24
                          IP: 2a12:bd00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:45:bb:e1:be:44:15:3d:2c:81:fd:aa:58:56:16:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77c6131b2d979f957eb1ed1dbcbee3c5df288c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:c6:3a:e2:27:6b:3c:40:98:23:3f:78:74:
                    b6:d8:e1:56:cd:bb:ca:34:ac:8d:c5:91:cf:c2:fe:
                    56:ab:54:b4:b8:2f:f1:91:8f:df:a7:03:6a:9d:32:
                    ae:d0:e0:c1:03:82:5d:7a:bf:58:90:f9:17:a5:64:
                    8f:b3:2f:df:ef:11:2b:ce:39:24:00:64:27:66:e2:
                    b4:a9:0f:22:5b:10:1b:4b:11:c3:13:64:54:07:fc:
                    21:bc:33:a8:b9:44:fc:43:79:d3:d9:06:a0:fe:87:
                    43:29:a1:4e:de:6b:32:ac:24:eb:1a:f3:d0:c3:52:
                    8a:e6:85:2e:53:14:78:84:60:83:92:da:db:04:c9:
                    02:6b:b3:6e:05:5a:49:54:e4:eb:b0:be:0b:a7:b4:
                    b8:d6:5e:e7:1a:9f:c6:3e:79:60:6f:a9:6a:2d:0a:
                    95:44:18:9b:d0:ed:5f:6e:a2:4c:11:f0:4c:ea:47:
                    99:ee:ee:f9:75:7a:4c:9e:b5:ad:a6:ec:4f:a6:16:
                    57:d8:da:61:2b:6a:cf:3a:c5:5c:07:2c:25:c1:9d:
                    87:ef:d2:37:49:48:58:18:00:ab:f4:d3:05:af:74:
                    95:a7:39:7a:02:3b:fc:3a:d7:dc:0a:f4:11:10:2d:
                    a1:e8:48:c8:c3:bd:ed:41:cb:ee:78:20:b4:ce:42:
                    06:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/d8YTGy2Xn5V-se0dvL7jxd8ojHg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.121.0/24
                IPv6:
                  2a12:bd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         96:36:48:66:40:4f:ec:18:15:46:ce:e2:3e:36:75:ee:f2:e0:
         b6:39:25:d8:40:cb:4d:5c:75:c6:86:5b:f0:f9:da:37:c0:a2:
         58:a9:50:f3:b4:ca:31:1d:76:0b:2c:03:ed:5c:b4:17:f6:ad:
         7c:25:cf:14:f9:8e:65:83:96:f1:84:9b:19:ea:c7:49:09:e8:
         8c:40:c8:18:84:b0:c6:26:52:3a:28:d5:79:9e:40:6f:a9:dc:
         be:c7:0e:34:64:56:36:df:09:9f:73:1f:ae:90:09:91:60:a1:
         33:03:eb:f7:78:24:5b:46:4c:0b:e2:03:bb:4d:94:51:8c:8d:
         62:22:27:26:5d:bf:81:2a:64:b9:a9:de:7f:6e:dd:5e:5e:c7:
         57:b4:e8:a3:06:e3:62:4e:ce:5e:68:fe:d0:13:24:6b:bd:22:
         23:cb:b4:b1:52:69:73:ef:92:5b:65:d9:d6:de:9b:0b:35:c2:
         6e:1b:21:e7:85:16:76:b1:90:9a:51:d3:cf:c5:c7:64:f5:b2:
         35:98:ce:95:09:aa:36:44:da:57:fa:3e:4a:46:2e:50:2c:34:
         bb:2b:6d:42:65:9b:5f:2e:99:77:23:1b:0d:6b:be:06:af:47:
         57:8a:0b:a6:3c:34:f2:66:b6:7f:2a:10:d9:1c:88:51:aa:b4:
         f5:ad:76:a2
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVyRbvhvkQVPSyB/apYVhb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMTEzNzMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2M2MTMxYjJkOTc5Zjk1N2ViMWVkMWRiY2JlZTNjNWRmMjg4Yzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+bGOuInazxAmCM/eHS22OFWzbvK
NKyNxZHPwv5Wq1S0uC/xkY/fpwNqnTKu0ODBA4Jder9YkPkXpWSPsy/f7xErzjkk
AGQnZuK0qQ8iWxAbSxHDE2RUB/whvDOouUT8Q3nT2Qag/odDKaFO3msyrCTrGvPQ
w1KK5oUuUxR4hGCDktrbBMkCa7NuBVpJVOTrsL4Lp7S41l7nGp/GPnlgb6lqLQqV
RBib0O1fbqJMEfBM6keZ7u75dXpMnrWtpuxPphZX2NphK2rPOsVcBywlwZ2H79I3
SUhYGACr9NMFr3SVpzl6Ajv8OtfcCvQREC2h6EjIw73tQcvueCC0zkIGhwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHfGExstl5+VfrHtHby+48XfKIx4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2Y0ZmM5
NC05OTA0LTRmNmYtYTQ3Mi00YTZhYjBjZGIzMTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvZjRmYzk0
LTk5MDQtNGY2Zi1hNDcyLTRhNmFiMGNkYjMxOS8xL2Q4WVRHeTJYbjVWLXNlMGR2
TDdqeGQ4b2pIZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhN5MA0EAgACMAcDBQMqEr0AMA0GCSqGSIb3
DQEBCwUAA4IBAQCWNkhmQE/sGBVGzuI+NnXu8uC2OSXYQMtNXHXGhlvw+do3wKJY
qVDztMoxHXYLLAPtXLQX9q18Jc8U+Y5lg5bxhJsZ6sdJCeiMQMgYhLDGJlI6KNV5
nkBvqdy+xw40ZFY23wmfcx+ukAmRYKEzA+v3eCRbRkwL4gO7TZRRjI1iIicmXb+B
KmS5qd5/bt1eXsdXtOijBuNiTs5eaP7QEyRrvSIjy7SxUmlz75JbZdnW3psLNcJu
GyHnhRZ2sZCaUdPPxcdk9bI1mM6VCao2RNpX+j5KRi5QLDS7K21CZZtfLpl3IxsN
a74Gr0dXigumPDTyZrZ/KhDZHIhRqrT1rXai
-----END CERTIFICATE-----