Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jBd8yr8gYBM9h4rAbm6g_D42SGk.cer
File:                     jBd8yr8gYBM9h4rAbm6g_D42SGk.cer (raw, json)
Hash identifier:          Sf8uC6YSMsXY/qJ6pad3R3/PZff0TuCsjcolOY7dM3Y=
Subject key identifier:   8C:17:7C:CA:BF:20:60:13:3D:87:8A:C0:6E:6E:A0:FC:3E:36:48:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708B97A974172290D6D10ADCCEB85C56
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/dd1c98-86e8-41e8-bd22-c79169a55d86/1/jBd8yr8gYBM9h4rAbm6g_D42SGk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/dd1c98-86e8-41e8-bd22-c79169a55d86/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:34:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 203023

Validation:               Failed, certificate revoked on Tue 15 Aug 2023 03:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:97:a9:74:17:22:90:d6:d1:0a:dc:ce:b8:5c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8c177ccabf2060133d878ac06e6ea0fc3e364869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:4e:e1:91:03:63:d0:4f:c5:5b:27:97:c5:
                    23:21:91:ec:da:9b:e8:ac:50:62:1d:c3:5e:be:e7:
                    e7:43:25:85:0b:15:fa:49:77:26:22:53:69:92:4d:
                    49:9c:6b:17:e5:ea:4e:51:4b:e3:27:9f:ba:99:65:
                    a3:dc:5f:6b:09:9a:b1:2a:f1:c2:42:6c:de:6e:fd:
                    87:1b:d3:fd:96:79:37:46:bb:34:db:23:c6:14:ec:
                    1c:bf:a7:75:7e:b9:34:6c:be:bc:f4:a6:15:f8:75:
                    ec:3c:ed:09:a4:ef:f1:6e:53:e9:af:0f:c3:8e:14:
                    3f:49:19:96:78:23:4d:26:14:76:15:3b:12:33:1a:
                    9a:3e:7e:80:be:ab:9d:31:08:94:4d:ba:45:94:28:
                    0a:bd:96:07:ce:41:a0:ce:47:84:dd:66:d8:3c:e3:
                    06:03:a3:08:f2:df:5c:56:0c:15:d3:99:57:d3:ac:
                    1d:15:ec:da:ea:ee:1a:2e:a0:90:d5:44:af:5b:00:
                    1f:d9:80:e6:85:8f:df:a7:5e:66:cf:63:99:66:68:
                    09:68:a9:b5:a6:59:da:f8:03:b8:22:07:c6:62:a2:
                    bc:b2:24:9f:80:7b:24:79:23:e9:01:cc:fe:84:ac:
                    61:2a:4e:91:ae:75:de:3d:e0:59:98:97:9d:b6:bb:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:17:7C:CA:BF:20:60:13:3D:87:8A:C0:6E:6E:A0:FC:3E:36:48:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dd1c98-86e8-41e8-bd22-c79169a55d86/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dd1c98-86e8-41e8-bd22-c79169a55d86/1/jBd8yr8gYBM9h4rAbm6g_D42SGk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203023

    Signature Algorithm: sha256WithRSAEncryption
         8c:50:44:b8:f1:3e:91:c2:60:e8:03:62:79:e0:ff:69:6b:1c:
         31:23:d2:7c:3b:94:19:a3:d6:08:0c:55:a5:ca:9f:db:16:e7:
         49:16:c7:4f:77:90:05:d2:d8:b7:0a:fc:96:3b:d3:fa:18:28:
         ad:31:0b:0d:05:b2:8e:68:62:7e:aa:5b:19:ba:24:75:cc:20:
         ad:38:b5:3a:41:85:32:44:c0:d4:d0:84:97:d7:62:b9:fe:57:
         97:fd:14:75:78:24:d1:fa:36:4d:f8:b4:51:75:83:8b:55:6c:
         84:1f:4e:67:25:95:f0:ea:a9:b5:af:7f:66:ad:5c:2d:76:92:
         6e:27:43:78:63:75:2a:12:a1:ae:12:85:0e:e7:0c:44:50:09:
         af:0f:46:65:8a:ad:ef:0c:ff:21:8d:7b:28:68:cb:c5:6d:d9:
         cd:17:6f:8e:70:d5:be:7f:c5:52:1f:74:65:23:7f:0e:06:c9:
         51:91:38:8d:13:90:43:15:9d:99:18:34:e4:1c:25:fe:fb:7b:
         92:b1:78:72:84:08:de:d8:b7:30:15:55:a6:f7:cf:13:bd:b5:
         18:3c:8d:3d:c3:8f:0b:33:86:46:d5:d2:91:b7:c2:84:12:c3:
         f3:82:5f:fc:5c:6b:17:0d:79:19:35:cc:35:ea:8a:79:46:74:
         ed:5b:53:88
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVwi5epdBcikNbRCtzOuFxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzNDM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzE3N2NjYWJmMjA2MDEzM2Q4NzhhYzA2ZTZlYTBmYzNlMzY0ODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLhO4ZEDY9BPxVsnl8UjIZHs2pvo
rFBiHcNevufnQyWFCxX6SXcmIlNpkk1JnGsX5epOUUvjJ5+6mWWj3F9rCZqxKvHC
Qmzebv2HG9P9lnk3Rrs02yPGFOwcv6d1frk0bL689KYV+HXsPO0JpO/xblPprw/D
jhQ/SRmWeCNNJhR2FTsSMxqaPn6AvqudMQiUTbpFlCgKvZYHzkGgzkeE3WbYPOMG
A6MI8t9cVgwV05lX06wdFeza6u4aLqCQ1USvWwAf2YDmhY/fp15mz2OZZmgJaKm1
plna+AO4IgfGYqK8siSfgHskeSPpAcz+hKxhKk6RrnXePeBZmJedtrujRwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIwXfMq/IGATPYeKwG5uoPw+NkhpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2RkMWM5
OC04NmU4LTQxZTgtYmQyMi1jNzkxNjlhNTVkODYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvZGQxYzk4
LTg2ZTgtNDFlOC1iZDIyLWM3OTE2OWE1NWQ4Ni8xL2pCZDh5cjhnWUJNOWg0ckFi
bTZnX0Q0MlNHay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMZDzANBgkqhkiG9w0BAQsFAAOCAQEAjFBEuPE+kcJg
6ANieeD/aWscMSPSfDuUGaPWCAxVpcqf2xbnSRbHT3eQBdLYtwr8ljvT+hgorTEL
DQWyjmhifqpbGbokdcwgrTi1OkGFMkTA1NCEl9diuf5Xl/0UdXgk0fo2Tfi0UXWD
i1VshB9OZyWV8Oqpta9/Zq1cLXaSbidDeGN1KhKhrhKFDucMRFAJrw9GZYqt7wz/
IY17KGjLxW3ZzRdvjnDVvn/FUh90ZSN/DgbJUZE4jROQQxWdmRg05Bwl/vt7krF4
coQI3ti3MBVVpvfPE721GDyNPcOPCzOGRtXSkbfChBLD84Jf/FxrFw15GTXMNeqK
eUZ07VtTiA==
-----END CERTIFICATE-----