Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fUOkvE8yFIuqEtfGtNVxom8pGDE.cer
File:                     fUOkvE8yFIuqEtfGtNVxom8pGDE.cer (raw, json)
Hash identifier:          XLQGrxeTG/yuyOOKrldf3kdzBmY5motud2Q/Ll7l96I=
Subject key identifier:   7D:43:A4:BC:4F:32:14:8B:AA:12:D7:C6:B4:D5:71:A2:6F:29:18:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD12B7BCB5F2706F1A8D0924B5FFBBF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/d6836f-4a07-42c5-87b6-78a2f8ec6349/1/fUOkvE8yFIuqEtfGtNVxom8pGDE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/d6836f-4a07-42c5-87b6-78a2f8ec6349/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.116.4.0/24

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 09:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:2b:7b:cb:5f:27:06:f1:a8:d0:92:4b:5f:fb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d43a4bc4f32148baa12d7c6b4d571a26f291831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:74:1a:d3:11:77:d5:e0:1a:4f:2d:af:ec:
                    b4:a2:28:e0:7a:5f:7d:89:e3:d1:70:b8:a9:4d:26:
                    b4:c5:cf:fd:44:ad:a8:74:c0:72:5d:32:fa:10:f1:
                    83:8d:e5:94:a5:ea:5a:7c:51:a9:77:05:7f:8a:8e:
                    9f:f6:b2:16:15:37:52:c0:6a:8b:61:45:26:da:31:
                    35:e6:fa:3e:56:c8:ca:c7:48:c3:df:b8:da:8a:b4:
                    68:7b:0b:bb:1a:f9:fa:ad:bb:7f:bf:52:ef:cf:06:
                    fd:78:d8:6d:54:d6:d9:87:cb:03:f7:e7:af:66:5e:
                    09:8d:38:66:4a:61:12:0b:91:2d:ae:99:88:57:75:
                    8a:11:eb:3b:b8:f8:67:00:b6:57:a5:ec:e9:4c:ab:
                    7c:78:74:10:47:6a:59:96:fe:7a:2f:79:39:ca:e0:
                    e7:83:b6:2c:ad:cc:fa:b0:77:d8:6e:79:4c:29:ac:
                    48:b8:2a:15:08:90:03:db:b5:b5:5a:ef:6e:16:6b:
                    e7:d4:35:70:19:cf:c8:a5:f3:f7:3d:be:45:89:f0:
                    9c:e6:61:92:ca:11:1a:70:3e:37:26:e8:3f:d1:59:
                    ad:da:d7:ab:6b:6e:82:9f:f5:71:b1:6e:92:f4:4a:
                    c1:7d:2e:4e:85:d5:2c:9b:0d:b7:03:13:02:07:b6:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:43:A4:BC:4F:32:14:8B:AA:12:D7:C6:B4:D5:71:A2:6F:29:18:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d6836f-4a07-42c5-87b6-78a2f8ec6349/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d6836f-4a07-42c5-87b6-78a2f8ec6349/1/fUOkvE8yFIuqEtfGtNVxom8pGDE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:53:83:ee:64:f0:9d:16:42:61:fd:d6:b8:ce:3b:88:66:2a:
         1f:0a:c4:b5:72:51:b2:ac:f1:f9:47:e2:c3:04:cf:27:38:b3:
         eb:f8:8a:09:4d:e7:d5:9b:40:ed:c8:7d:ae:60:a7:7d:39:ea:
         a3:74:a3:67:f2:77:79:3d:34:3e:54:ae:cc:ff:bf:a0:8b:63:
         87:bb:b1:96:87:e9:03:ce:34:52:ae:10:a4:b8:2f:92:54:0f:
         03:7e:6e:0d:f7:1f:2c:e3:17:0d:7a:2c:bc:84:98:99:2e:3e:
         82:10:8e:5d:55:07:f4:84:6f:60:2f:cf:d3:db:fe:5a:70:43:
         4f:ae:70:28:80:7e:21:52:26:fa:91:f2:a3:b7:a1:2c:a6:74:
         10:e1:ea:a6:80:9c:ce:a8:8c:5b:db:bf:e6:f1:cd:80:3f:75:
         91:bc:2c:13:d0:61:e8:df:0f:3c:c3:fa:24:71:f8:ac:47:97:
         89:62:09:8d:c0:bb:9e:89:96:76:d5:38:32:4a:f1:36:33:38:
         fc:b9:38:cd:21:eb:38:4e:01:b3:ba:46:37:4f:89:ad:54:f5:
         53:cf:02:45:84:32:2b:95:01:0b:e3:a3:25:39:cc:3d:37:9a:
         d5:a2:be:35:14:02:e1:10:a1:bb:77:cb:c9:2d:1a:e1:0f:3b:
         5a:44:b9:89
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVr0St7y18nBvGo0JJLX/u/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDQzYTRiYzRmMzIxNDhiYWExMmQ3YzZiNGQ1NzFhMjZmMjkxODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnZ0GtMRd9XgGk8tr+y0oijgel99
iePRcLipTSa0xc/9RK2odMByXTL6EPGDjeWUpepafFGpdwV/io6f9rIWFTdSwGqL
YUUm2jE15vo+VsjKx0jD37jairRoewu7Gvn6rbt/v1Lvzwb9eNhtVNbZh8sD9+ev
Zl4JjThmSmESC5EtrpmIV3WKEes7uPhnALZXpezpTKt8eHQQR2pZlv56L3k5yuDn
g7Ysrcz6sHfYbnlMKaxIuCoVCJAD27W1Wu9uFmvn1DVwGc/IpfP3Pb5FifCc5mGS
yhEacD43Jug/0Vmt2tera26Cn/VxsW6S9ErBfS5OhdUsmw23AxMCB7ZgWwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFH1DpLxPMhSLqhLXxrTVcaJvKRgxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxL2Q2ODM2
Zi00YTA3LTQyYzUtODdiNi03OGEyZjhlYzYzNDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvZDY4MzZm
LTRhMDctNDJjNS04N2I2LTc4YTJmOGVjNjM0OS8xL2ZVT2t2RTh5Rkl1cUV0Zkd0
TlZ4b204cEdERS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAsHQEMA0GCSqGSIb3DQEBCwUAA4IBAQCeU4Pu
ZPCdFkJh/da4zjuIZiofCsS1clGyrPH5R+LDBM8nOLPr+IoJTefVm0DtyH2uYKd9
OeqjdKNn8nd5PTQ+VK7M/7+gi2OHu7GWh+kDzjRSrhCkuC+SVA8Dfm4N9x8s4xcN
eiy8hJiZLj6CEI5dVQf0hG9gL8/T2/5acENPrnAogH4hUib6kfKjt6EspnQQ4eqm
gJzOqIxb27/m8c2AP3WRvCwT0GHo3w88w/okcfisR5eJYgmNwLueiZZ21TgySvE2
Mzj8uTjNIes4TgGzukY3T4mtVPVTzwJFhDIrlQEL46MlOcw9N5rVor41FALhEKG7
d8vJLRrhDztaRLmJ
-----END CERTIFICATE-----