Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k14FffGD8JfaZnyooBQIXniTmkE.cer
File:                     k14FffGD8JfaZnyooBQIXniTmkE.cer (raw, json)
Hash identifier:          b1obImz3oslzAJpsRmrh1Pbr1GTJ7lFntsglek7WysE=
Subject key identifier:   93:5E:05:7D:F1:83:F0:97:DA:66:7C:A8:A0:14:08:5E:78:93:9A:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A01F010F83CCF0E1ACBA34B8A53176704
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/k14FffGD8JfaZnyooBQIXniTmkE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 17 Aug 2023 05:20:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a0c:8340::/29

Validation:               Failed, certificate revoked on Mon 30 Oct 2023 08:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:01:f0:10:f8:3c:cf:0e:1a:cb:a3:4b:8a:53:17:67:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 17 05:20:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=935e057df183f097da667ca8a014085e78939a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:68:1f:c2:62:95:d0:3b:2b:40:9f:d6:3b:
                    56:56:cb:f0:c0:4f:9f:7a:2e:75:9f:49:17:a0:4e:
                    cf:f3:7c:08:35:9a:cc:da:9f:99:8c:f8:3a:19:c5:
                    b6:18:a1:b1:8f:db:d5:bf:9a:d7:19:56:d2:40:00:
                    72:a4:c5:2e:4e:7f:0d:f9:51:a2:b6:41:fa:54:db:
                    91:af:cf:ee:3e:7e:e9:02:3d:ec:8f:00:39:26:98:
                    7f:c4:94:1a:b6:0f:af:71:f7:3e:61:bb:18:b2:ef:
                    a9:64:43:17:9f:a8:97:55:18:fa:cb:11:d4:6d:81:
                    d1:43:f7:3f:ed:2d:7e:11:b2:9c:1c:9a:6e:67:a9:
                    fa:0d:e6:96:d2:ec:20:7d:66:ce:cb:09:4f:63:74:
                    43:40:f9:ef:5e:0f:97:5d:33:ef:56:88:ae:b6:70:
                    f8:69:ad:d7:ba:7b:f5:b6:6d:34:7a:c2:08:22:e8:
                    21:a5:da:bb:d0:8d:d6:a0:5f:b8:ab:51:2f:a7:3e:
                    5e:a6:c6:99:47:45:e4:86:78:18:50:34:58:39:eb:
                    4d:04:5e:a7:1c:52:ba:4d:03:83:18:d7:ee:af:7e:
                    43:87:9e:98:8c:d1:03:1f:02:1e:a6:d0:bc:db:2e:
                    d6:45:bc:e9:25:e7:fc:d8:d8:56:f2:c1:97:19:25:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5E:05:7D:F1:83:F0:97:DA:66:7C:A8:A0:14:08:5E:78:93:9A:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/k14FffGD8JfaZnyooBQIXniTmkE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:8340::/29

    Signature Algorithm: sha256WithRSAEncryption
         49:7b:13:75:30:28:b5:a5:0a:01:32:28:62:df:2d:e5:90:e7:
         1b:8d:3e:69:84:e2:1f:71:64:97:82:30:c3:38:03:5e:46:82:
         42:3b:78:87:1c:4d:65:37:01:1b:b5:eb:ca:f6:51:a1:e0:cf:
         03:0a:63:94:70:bb:e6:bb:bc:e1:80:46:6e:4e:21:36:a2:6a:
         0e:dc:47:bd:ad:61:35:84:ba:89:db:4a:f5:c8:29:d3:a0:cf:
         f8:eb:ef:7d:54:08:ba:5c:d8:38:1d:50:6d:75:92:74:dd:8b:
         e5:5b:47:4f:69:f4:99:a6:2f:6e:05:38:e4:fa:2b:f6:13:32:
         71:53:d1:ba:d4:ba:ad:8a:d2:35:8e:f4:29:9f:5e:f2:d5:cb:
         36:a6:76:bd:df:a5:d0:ef:31:cd:19:22:59:08:5c:ab:2b:b1:
         dd:3a:75:4a:d7:d8:b3:fc:a8:57:09:94:3b:c3:98:cd:d9:e3:
         02:1a:ca:8f:c5:bd:0f:26:cc:a0:84:bb:ac:53:f9:ee:03:88:
         70:90:d4:aa:0f:30:87:bd:07:a5:47:d2:58:90:1a:49:88:b0:
         14:c9:6c:38:61:7e:7b:51:42:5a:dc:b6:84:82:8b:1a:d6:cc:
         24:82:72:db:25:e5:35:b7:62:f3:fc:9b:a7:6c:f6:22:af:20:
         1e:be:82:a1
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYoB8BD4PM8OGsujS4pTF2cEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwODE3MDUyMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzVlMDU3ZGYxODNmMDk3ZGE2NjdjYThhMDE0MDg1ZTc4OTM5YTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArshoH8JildA7K0Cf1jtWVsvwwE+f
ei51n0kXoE7P83wINZrM2p+ZjPg6GcW2GKGxj9vVv5rXGVbSQABypMUuTn8N+VGi
tkH6VNuRr8/uPn7pAj3sjwA5Jph/xJQatg+vcfc+YbsYsu+pZEMXn6iXVRj6yxHU
bYHRQ/c/7S1+EbKcHJpuZ6n6DeaW0uwgfWbOywlPY3RDQPnvXg+XXTPvVoiutnD4
aa3Xunv1tm00esIIIughpdq70I3WoF+4q1Evpz5epsaZR0XkhngYUDRYOetNBF6n
HFK6TQODGNfur35Dh56YjNEDHwIeptC82y7WRbzpJef82NhW8sGXGSVFHwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFJNeBX3xg/CX2mZ8qKAUCF54k5pBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2JkMjAw
NS1mYjdiLTQwNTItYjNmMi04OGZhM2I2ZWIwMDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvYmQyMDA1
LWZiN2ItNDA1Mi1iM2YyLTg4ZmEzYjZlYjAwNi8xL2sxNEZmZkdEOEpmYVpueW9v
QlFJWG5pVG1rRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgyDQDANBgkqhkiG9w0BAQsFAAOCAQEASXsT
dTAotaUKATIoYt8t5ZDnG40+aYTiH3Fkl4IwwzgDXkaCQjt4hxxNZTcBG7XryvZR
oeDPAwpjlHC75ru84YBGbk4hNqJqDtxHva1hNYS6idtK9cgp06DP+OvvfVQIulzY
OB1QbXWSdN2L5VtHT2n0maYvbgU45Por9hMycVPRutS6rYrSNY70KZ9e8tXLNqZ2
vd+l0O8xzRkiWQhcqyux3Tp1StfYs/yoVwmUO8OYzdnjAhrKj8W9DybMoIS7rFP5
7gOIcJDUqg8wh70HpUfSWJAaSYiwFMlsOGF+e1FCWty2hIKLGtbMJIJy2yXlNbdi
8/ybp2z2Iq8gHr6CoQ==
-----END CERTIFICATE-----