Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eIpy9BKomocGSjbRTAlM99nuogQ.cer
File:                     eIpy9BKomocGSjbRTAlM99nuogQ.cer (raw, json)
Hash identifier:          ont6jVUEig+B502u0KX9MV064BwborSfRjPmWLfBjWQ=
Subject key identifier:   78:8A:72:F4:12:A8:9A:87:06:4A:36:D1:4C:09:4C:F7:D9:EE:A2:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185724618A376B35C06E962BBC17324D117
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/eIpy9BKomocGSjbRTAlM99nuogQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:54 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 92.118.120.0/22
                          IP: 2a09:a640::/32

Validation:               Failed, certificate revoked on Tue 19 Sep 2023 12:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:18:a3:76:b3:5c:06:e9:62:bb:c1:73:24:d1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=788a72f412a89a87064a36d14c094cf7d9eea204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:b5:96:de:91:fa:42:49:24:4f:2e:88:d5:
                    44:65:52:30:8b:6e:a1:e8:c8:58:32:b2:0e:f1:a7:
                    13:49:d4:2e:c2:2d:21:ef:4c:19:5c:11:56:b5:f3:
                    6d:60:c5:d8:58:1c:3e:f7:20:42:83:6a:70:f6:ef:
                    af:f4:ed:26:50:27:c5:7d:32:78:7b:46:dc:ad:aa:
                    e8:1d:c4:47:cf:6b:79:0d:ad:a4:9f:b6:c3:00:7c:
                    93:bd:4f:c2:e5:c8:45:27:12:56:2e:f0:a8:aa:c3:
                    91:08:6b:40:f0:2c:53:71:68:8e:eb:c0:4b:5d:e9:
                    1a:13:9e:55:0d:f7:ba:85:44:40:73:5a:f2:40:43:
                    7d:e7:3c:40:d4:15:37:94:f8:0d:4b:3d:00:ef:04:
                    24:53:70:37:64:71:e9:4d:c6:db:03:3e:76:71:73:
                    d6:91:ea:4c:d8:2e:b3:c7:ea:5b:34:ab:ba:16:65:
                    5d:70:52:ca:23:e4:ec:0c:13:2f:79:5b:69:4f:75:
                    28:7e:67:3c:36:a4:52:09:fb:35:63:25:51:13:ab:
                    0c:16:11:2f:a3:36:f4:2d:a4:dc:df:0d:be:28:fc:
                    73:c4:53:54:13:35:ac:2d:e2:09:19:75:6c:d7:a9:
                    8c:a7:83:42:0d:9f:52:45:8c:8c:75:1f:90:ff:41:
                    dd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8A:72:F4:12:A8:9A:87:06:4A:36:D1:4C:09:4C:F7:D9:EE:A2:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/eIpy9BKomocGSjbRTAlM99nuogQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.120.0/22
                IPv6:
                  2a09:a640::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:14:3d:00:57:ac:4f:1e:87:43:3d:8c:9b:b9:c9:7b:71:8a:
         38:97:3c:b2:3e:81:56:0d:06:1c:d0:76:1d:37:b2:db:1d:4d:
         06:67:2e:a7:49:69:46:52:77:39:c2:b4:0e:17:ae:39:d2:4c:
         26:fc:2a:96:c7:69:86:a1:ca:14:e7:aa:c2:7e:0e:b5:35:65:
         09:fb:76:b0:f9:11:ce:11:65:41:30:a4:17:3a:fd:8d:d6:21:
         9b:9b:ef:58:00:8a:80:c1:7c:ff:49:4c:b7:f0:2f:24:6f:1c:
         cb:57:75:69:77:ca:81:aa:32:9b:7e:11:3f:90:30:c0:d9:00:
         62:42:01:52:3e:2c:6b:d4:8e:e6:0f:69:ad:2c:dc:86:31:f3:
         77:7d:56:7b:88:0c:71:21:51:40:e1:98:d0:6f:f3:f9:0b:56:
         0e:93:7c:06:ca:46:90:f5:e0:5c:bf:ca:aa:fc:ab:e7:e1:11:
         bd:30:d8:a3:6c:28:04:05:f8:f8:d9:f7:f9:71:df:19:9c:26:
         5f:e1:16:c1:45:3a:c4:a1:df:d2:e9:11:5f:7b:e6:ec:ca:98:
         4f:22:ac:6b:0a:da:d2:e9:23:cb:ab:b1:e0:46:32:5f:36:68:
         34:ac:a4:71:3e:1f:ea:6d:2b:7c:94:15:14:04:0f:75:73:7e:
         b2:ea:a5:9c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVyRhijdrNcBuliu8FzJNEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMTEzNzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODhhNzJmNDEyYTg5YTg3MDY0YTM2ZDE0YzA5NGNmN2Q5ZWVhMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIW1lt6R+kJJJE8uiNVEZVIwi26h
6MhYMrIO8acTSdQuwi0h70wZXBFWtfNtYMXYWBw+9yBCg2pw9u+v9O0mUCfFfTJ4
e0bcraroHcRHz2t5Da2kn7bDAHyTvU/C5chFJxJWLvCoqsORCGtA8CxTcWiO68BL
XekaE55VDfe6hURAc1ryQEN95zxA1BU3lPgNSz0A7wQkU3A3ZHHpTcbbAz52cXPW
kepM2C6zx+pbNKu6FmVdcFLKI+TsDBMveVtpT3Uofmc8NqRSCfs1YyVRE6sMFhEv
ozb0LaTc3w2+KPxzxFNUEzWsLeIJGXVs16mMp4NCDZ9SRYyMdR+Q/0HdJQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHiKcvQSqJqHBko20UwJTPfZ7qIEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzJkMjk5
Yy0xNzBmLTQ2YzItODI0OC1hZWMyZjI3MjA1ZDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvMmQyOTlj
LTE3MGYtNDZjMi04MjQ4LWFlYzJmMjcyMDVkNC8xL2VJcHk5QktvbW9jR1NqYlJU
QWxNOTludW9nUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCXHZ4MA0EAgACMAcDBQAqCaZAMA0GCSqGSIb3
DQEBCwUAA4IBAQAPFD0AV6xPHodDPYybucl7cYo4lzyyPoFWDQYc0HYdN7LbHU0G
Zy6nSWlGUnc5wrQOF6450kwm/CqWx2mGocoU56rCfg61NWUJ+3aw+RHOEWVBMKQX
Ov2N1iGbm+9YAIqAwXz/SUy38C8kbxzLV3Vpd8qBqjKbfhE/kDDA2QBiQgFSPixr
1I7mD2mtLNyGMfN3fVZ7iAxxIVFA4ZjQb/P5C1YOk3wGykaQ9eBcv8qq/Kvn4RG9
MNijbCgEBfj42ff5cd8ZnCZf4RbBRTrEod/S6RFfe+bsyphPIqxrCtrS6SPLq7Hg
RjJfNmg0rKRxPh/qbSt8lBUUBA91c36y6qWc
-----END CERTIFICATE-----