Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iasuRjp0n4HKNeHp3LO0FXefS_E.cer
File:                     iasuRjp0n4HKNeHp3LO0FXefS_E.cer (raw, json)
Hash identifier:          Up3X364PoSHnfoXNy8d1N5kbdA+Fr5Y+JUHCYfEuTjU=
Subject key identifier:   89:AB:2E:46:3A:74:9F:81:CA:35:E1:E9:DC:B3:B4:15:77:9F:4B:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E6564167C2C14AE4D367C3E51AEA64A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/1d0d38-4d1c-4a79-98ce-b679b6f1ae83/1/iasuRjp0n4HKNeHp3LO0FXefS_E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/1d0d38-4d1c-4a79-98ce-b679b6f1ae83/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.136.92.0/22

Validation:               Failed, certificate revoked on Thu 05 Oct 2023 10:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:64:16:7c:2c:14:ae:4d:36:7c:3e:51:ae:a6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=89ab2e463a749f81ca35e1e9dcb3b415779f4bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:a8:11:2d:66:4f:08:9d:5d:84:51:b6:84:
                    01:2c:2b:d9:05:f4:65:3a:d5:f3:2b:8d:64:7e:7d:
                    83:f5:03:98:74:c4:5a:c4:a0:8e:3d:c8:a0:2e:eb:
                    c3:22:1c:71:07:63:d2:21:fa:d1:12:43:e7:a7:2a:
                    3c:6f:02:7c:36:4b:30:fe:3a:11:01:e0:37:db:8b:
                    b6:fc:64:98:be:f3:64:60:a8:a9:63:cc:f9:d2:88:
                    ef:b7:f9:59:41:0d:6d:e7:f1:9e:46:95:bc:77:0e:
                    cf:1f:ae:d1:91:5b:c8:c0:18:1c:b6:c2:61:44:92:
                    6a:34:43:89:b8:b0:9c:95:5c:5b:33:d4:33:30:64:
                    da:31:eb:b4:a1:8c:ef:1a:3c:c0:1a:28:d0:6e:37:
                    94:c1:43:d8:1a:bd:bf:1a:33:70:70:67:aa:ea:97:
                    54:2c:d1:1c:c7:7a:ec:8a:3f:b6:b1:81:b7:de:7e:
                    dd:85:07:29:18:e7:f6:ad:1a:5d:0d:59:86:95:93:
                    60:3a:3b:ec:6c:58:47:3b:18:58:39:78:a6:cc:7c:
                    c9:47:24:36:69:5f:f8:e0:9a:30:27:33:b9:bc:90:
                    7f:30:27:d2:7c:5f:81:e4:f4:4a:ba:56:e0:7f:8f:
                    01:18:35:a7:e9:78:a7:97:a2:75:70:bc:0b:0e:10:
                    45:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AB:2E:46:3A:74:9F:81:CA:35:E1:E9:DC:B3:B4:15:77:9F:4B:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1d0d38-4d1c-4a79-98ce-b679b6f1ae83/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1d0d38-4d1c-4a79-98ce-b679b6f1ae83/1/iasuRjp0n4HKNeHp3LO0FXefS_E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:41:01:92:57:b9:1b:48:ec:26:85:1c:4f:30:9a:7c:bb:52:
         c8:0d:cc:97:c0:4a:26:41:7f:70:2c:4b:b9:15:79:a2:df:ad:
         79:01:f7:00:b1:85:76:00:02:d5:0c:39:f9:be:a5:a9:83:49:
         ae:79:64:2d:d5:bf:2a:61:1f:21:b5:59:ce:0c:ff:3d:00:73:
         e2:ad:be:7d:0b:79:0b:f0:78:f1:cb:7c:54:cc:11:80:dc:68:
         ee:1d:ab:c8:b6:2b:45:79:3f:25:45:cd:c1:33:2d:90:32:6b:
         60:84:4d:f3:61:ab:e2:8f:7d:1f:de:e1:e2:eb:8d:97:24:04:
         da:aa:47:bd:0a:71:7a:0a:44:46:c8:91:35:ea:52:ea:19:72:
         2e:4e:83:66:a8:72:98:f2:90:b3:61:2b:4b:b4:86:a6:58:49:
         a8:70:8b:33:01:4c:d2:9b:16:97:71:e2:ff:a7:2a:b0:08:ca:
         f8:cc:52:53:21:49:99:5f:95:55:da:1d:cf:b8:1c:cb:1c:7c:
         9f:82:af:20:84:17:62:db:63:ec:ca:b6:ce:33:67:52:51:99:
         94:d6:a9:07:4e:5c:8a:56:6c:38:3a:c8:1c:9c:9e:66:ea:33:
         07:cc:b6:0f:49:f4:dc:6a:5a:aa:fe:28:b7:64:f5:0f:1e:6e:
         9e:e6:0a:dc
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVuZWQWfCwUrk02fD5RrqZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTczMzM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWFiMmU0NjNhNzQ5ZjgxY2EzNWUxZTlkY2IzYjQxNTc3OWY0YmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqOoES1mTwidXYRRtoQBLCvZBfRl
OtXzK41kfn2D9QOYdMRaxKCOPcigLuvDIhxxB2PSIfrREkPnpyo8bwJ8Nksw/joR
AeA324u2/GSYvvNkYKipY8z50ojvt/lZQQ1t5/GeRpW8dw7PH67RkVvIwBgctsJh
RJJqNEOJuLCclVxbM9QzMGTaMeu0oYzvGjzAGijQbjeUwUPYGr2/GjNwcGeq6pdU
LNEcx3rsij+2sYG33n7dhQcpGOf2rRpdDVmGlZNgOjvsbFhHOxhYOXimzHzJRyQ2
aV/44JowJzO5vJB/MCfSfF+B5PRKulbgf48BGDWn6Xinl6J1cLwLDhBFQQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFImrLkY6dJ+ByjXh6dyztBV3n0vxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzFkMGQz
OC00ZDFjLTRhNzktOThjZS1iNjc5YjZmMWFlODMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvMWQwZDM4
LTRkMWMtNGE3OS05OGNlLWI2NzliNmYxYWU4My8xL2lhc3VSanAwbjRIS05lSHAz
TE8wRlhlZlNfRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLYhcMA0GCSqGSIb3DQEBCwUAA4IBAQBhQQGS
V7kbSOwmhRxPMJp8u1LIDcyXwEomQX9wLEu5FXmi3615AfcAsYV2AALVDDn5vqWp
g0mueWQt1b8qYR8htVnODP89AHPirb59C3kL8Hjxy3xUzBGA3GjuHavItitFeT8l
Rc3BMy2QMmtghE3zYavij30f3uHi642XJATaqke9CnF6CkRGyJE16lLqGXIuToNm
qHKY8pCzYStLtIamWEmocIszAUzSmxaXceL/pyqwCMr4zFJTIUmZX5VV2h3PuBzL
HHyfgq8ghBdi22PsyrbOM2dSUZmU1qkHTlyKVmw4OsgcnJ5m6jMHzLYPSfTcalqq
/ii3ZPUPHm6e5grc
-----END CERTIFICATE-----