Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ipBopXCJio_E6vm128uV24GpqEA.cer
File:                     ipBopXCJio_E6vm128uV24GpqEA.cer (raw, json)
Hash identifier:          PtNEsoShCVSw0WrHdLeT2mvcxo1XwZkIa+PTbzHsXvc=
Subject key identifier:   8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01887BC9E967993D07F58422A1AC4A539AEC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 11:06:50 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.216.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7b:c9:e9:67:99:3d:07:f5:84:22:a1:ac:4a:53:9a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  2 11:06:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8a9068a570898a8fc4eaf9b5dbcb95db81a9a840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:0e:7c:89:2c:41:97:7d:60:3e:d0:49:fe:
                    73:5f:8e:b3:1f:72:73:a9:03:aa:a7:7e:79:d6:3c:
                    a4:3a:53:5a:c5:ed:a6:5a:0f:01:ec:de:6b:cd:b0:
                    de:07:23:44:b0:a1:fb:f9:ca:40:df:43:56:74:19:
                    6f:45:66:ef:8d:a6:05:ab:8c:8a:da:6e:24:13:8d:
                    bf:4e:1b:1d:18:6a:a5:10:19:3f:29:c2:f8:95:b2:
                    43:bd:57:df:10:81:99:f3:99:05:2a:f3:e5:56:11:
                    ab:31:07:49:d7:06:a9:e3:f6:eb:d9:ec:87:e5:34:
                    d2:cf:61:31:be:6b:8b:a0:82:9d:8a:3a:46:26:45:
                    4c:2c:bc:01:bb:7b:59:22:dc:0f:99:c0:35:b7:a9:
                    6a:76:6d:51:50:26:e1:12:d5:34:76:cf:9a:84:97:
                    5e:39:62:a0:6a:ed:1f:59:cc:47:3b:9c:fe:1d:3d:
                    5c:3d:eb:b0:9d:a0:bd:f5:9e:62:28:e2:d4:05:30:
                    97:4f:ec:3c:26:5b:86:ea:80:bc:6d:50:91:f3:70:
                    ac:bb:c4:87:4a:f0:da:a5:1b:d3:bf:97:59:61:e8:
                    6e:f7:b5:99:67:d8:8e:c6:02:4d:50:7c:c9:6f:82:
                    46:9d:56:1b:a8:dd:42:9d:61:30:05:aa:d9:58:dd:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:79:7a:25:d7:05:1e:f7:ee:2d:20:55:59:b0:c0:aa:4f:
         fd:96:c9:ef:d5:e2:fe:72:b8:84:25:0e:22:24:d6:df:71:87:
         31:8c:d5:34:09:db:41:50:ac:60:ce:a9:90:42:f0:3e:0c:44:
         c7:93:e4:d1:a0:f0:24:c6:43:d7:8a:61:f2:c6:c0:b4:79:c9:
         43:7e:de:c2:70:90:c0:0a:1c:77:d3:87:04:60:85:c6:35:a5:
         ff:2f:ed:8d:bd:91:ae:26:8c:d0:74:73:b8:8d:4e:5a:4d:dd:
         77:1b:cf:85:7e:92:37:be:5d:38:b5:4c:db:a6:a7:a4:52:9e:
         34:b0:32:df:61:28:2c:5a:f2:e5:30:08:66:ba:37:b3:10:5c:
         39:82:eb:04:46:a7:f1:01:f7:80:be:01:19:b0:cd:cf:c9:b0:
         a2:a9:f5:b1:ef:75:85:c4:6f:e9:66:0f:31:e7:05:87:d4:d9:
         8f:c9:f3:09:19:71:9d:9a:a7:c9:94:bb:07:e7:fa:39:70:73:
         51:03:b9:39:3e:c7:0e:38:a6:53:a2:99:62:ba:d6:f3:e5:f3:
         e6:7a:89:b2:d8:4e:21:66:79:4a:f3:10:1a:aa:17:1d:62:ca:
         cf:d8:e2:3e:f3:3c:a0:e8:b5:d6:8b:68:f2:a2:e0:e9:54:8e:
         70:9b:8b:f7
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYh7yelnmT0H9YQioaxKU5rsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNjAyMTEwNjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTkwNjhhNTcwODk4YThmYzRlYWY5YjVkYmNiOTVkYjgxYTlhODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9wOfIksQZd9YD7QSf5zX46zH3Jz
qQOqp3551jykOlNaxe2mWg8B7N5rzbDeByNEsKH7+cpA30NWdBlvRWbvjaYFq4yK
2m4kE42/ThsdGGqlEBk/KcL4lbJDvVffEIGZ85kFKvPlVhGrMQdJ1wap4/br2eyH
5TTSz2ExvmuLoIKdijpGJkVMLLwBu3tZItwPmcA1t6lqdm1RUCbhEtU0ds+ahJde
OWKgau0fWcxHO5z+HT1cPeuwnaC99Z5iKOLUBTCXT+w8JluG6oC8bVCR83Csu8SH
SvDapRvTv5dZYehu97WZZ9iOxgJNUHzJb4JGnVYbqN1CnWEwBarZWN0VcQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFIqQaKVwiYqPxOr5tdvLlduBqahAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2I0MzRi
ZmViLWY4NGEtNDhhNC04YmFjLWMzYTU4ZjQzYmNlNS8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjQz
NGJmZWItZjg0YS00OGE0LThiYWMtYzNhNThmNDNiY2U1LzAvOEE5MDY4QTU3MDg5
OEE4RkM0RUFGOUI1REJDQjk1REI4MUE5QTg0MC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AJIT2DANBgkqhkiG9w0BAQsFAAOCAQEAAdd5eiXXBR737i0gVVmwwKpP/ZbJ79Xi
/nK4hCUOIiTW33GHMYzVNAnbQVCsYM6pkELwPgxEx5Pk0aDwJMZD14ph8sbAtHnJ
Q37ewnCQwAocd9OHBGCFxjWl/y/tjb2RriaM0HRzuI1OWk3ddxvPhX6SN75dOLVM
26anpFKeNLAy32EoLFry5TAIZro3sxBcOYLrBEan8QH3gL4BGbDNz8mwoqn1se91
hcRv6WYPMecFh9TZj8nzCRlxnZqnyZS7B+f6OXBzUQO5OT7HDjimU6KZYrrW8+Xz
5nqJsthOIWZ5SvMQGqoXHWLKz9jiPvM8oOi11oto8qLg6VSOcJuL9w==
-----END CERTIFICATE-----