Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lGjkm7lTCtsIRMOGDdfvXNjkofg.cer
File:                     lGjkm7lTCtsIRMOGDdfvXNjkofg.cer (raw, json)
Hash identifier:          Bina52IxgIYdT8cht/f6KuXKR7B/4snHbUXVkL0BHgQ=
Subject key identifier:   94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018580CD372CF791CAB897E0B3DD111D4428
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/lGjkm7lTCtsIRMOGDdfvXNjkofg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 05 Jan 2023 07:20:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 47365

Validation:               Failed, certificate revoked on Fri 06 Jan 2023 07:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:80:cd:37:2c:f7:91:ca:b8:97:e0:b3:dd:11:1d:44:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  5 07:20:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9468e49bb9530adb0844c3860dd7ef5cd8e4a1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:9b:fd:7e:57:e4:2e:ef:e8:84:0c:e3:31:
                    2f:22:ce:54:b9:e5:bd:7a:7f:7c:b9:01:ac:ab:e4:
                    17:20:da:4d:39:b9:71:bf:40:e6:1b:62:0f:31:c8:
                    b4:dc:e0:14:2d:38:cb:35:7e:0c:92:d9:db:05:6d:
                    f0:3b:9e:25:53:2a:38:4d:40:13:3d:cb:05:ec:d9:
                    05:41:d9:2f:4f:68:ca:0f:a6:ab:43:2f:36:6d:a4:
                    bf:04:0b:82:1a:51:95:88:2b:a5:e1:af:66:87:47:
                    85:da:17:4a:81:61:91:23:30:14:c0:1d:a8:c4:55:
                    b1:63:2e:75:76:e7:e9:ba:6b:6f:10:ec:e0:e6:3e:
                    ef:e4:c9:67:6b:31:d3:cb:50:10:e8:aa:21:88:14:
                    42:8c:55:4d:b8:c0:f9:a3:bd:89:2e:a1:cf:e5:69:
                    26:44:e2:23:c8:57:fd:4c:9a:e5:52:65:d8:9d:38:
                    67:5e:aa:8e:44:9f:97:59:a1:a3:63:eb:ec:5f:b8:
                    04:79:84:8d:91:ff:b4:7f:e9:0a:38:58:c4:1f:97:
                    01:59:4a:02:66:81:5a:6d:da:3d:b0:5c:3d:ac:df:
                    9c:59:3b:57:20:5a:07:1a:cd:d4:45:56:6a:fa:45:
                    d3:fa:e8:e9:03:ad:b4:9d:a6:78:6a:79:48:81:ea:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/lGjkm7lTCtsIRMOGDdfvXNjkofg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47365

    Signature Algorithm: sha256WithRSAEncryption
         50:2b:b9:a9:56:3f:0c:5e:73:ff:c7:b0:9f:38:38:44:a1:08:
         75:b8:69:1a:42:b2:44:0f:18:01:94:ee:99:ef:0e:d6:fc:a8:
         d5:3b:88:23:55:85:be:d2:10:a8:68:1c:14:4f:f1:01:07:a4:
         4f:ed:98:c9:c5:1f:f7:b1:c4:0d:85:b7:a6:03:21:64:40:bc:
         21:72:fe:2b:6c:0f:7c:26:f8:d3:c7:94:53:88:1b:ac:4c:b2:
         8c:d2:d5:e6:52:f7:9e:74:f4:0e:0b:9b:c5:ee:46:3c:83:0a:
         0c:b8:dd:f9:d3:57:ac:66:93:bc:70:89:19:0d:da:61:e5:6a:
         fa:99:b3:99:bb:b8:25:1d:89:9c:0a:3b:cf:7c:0b:61:fa:72:
         20:98:78:e6:1e:d0:2b:e3:45:82:7b:36:5a:ae:93:8b:64:9f:
         c6:26:b2:f0:b4:4e:6d:ab:c7:10:d4:e7:47:13:d6:92:e8:80:
         d6:65:34:d9:29:35:3b:e1:63:6b:cb:76:ed:cf:67:55:96:e4:
         52:ff:88:b6:15:00:15:fc:74:f1:97:9e:e2:34:11:b8:74:13:
         60:ef:08:55:97:79:6f:be:c0:fc:e1:5a:fb:17:a4:39:5a:d9:
         2d:09:d7:d6:3d:f7:d8:88:88:46:ad:dc:ca:16:1e:b6:f7:12:
         b6:3b:66:60
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYWAzTcs95HKuJfgs90RHUQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTA1MDcyMDEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDY4ZTQ5YmI5NTMwYWRiMDg0NGMzODYwZGQ3ZWY1Y2Q4ZTRhMWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt6b/X5X5C7v6IQM4zEvIs5UueW9
en98uQGsq+QXINpNOblxv0DmG2IPMci03OAULTjLNX4MktnbBW3wO54lUyo4TUAT
PcsF7NkFQdkvT2jKD6arQy82baS/BAuCGlGViCul4a9mh0eF2hdKgWGRIzAUwB2o
xFWxYy51dufpumtvEOzg5j7v5MlnazHTy1AQ6KohiBRCjFVNuMD5o72JLqHP5Wkm
ROIjyFf9TJrlUmXYnThnXqqORJ+XWaGjY+vsX7gEeYSNkf+0f+kKOFjEH5cBWUoC
ZoFabdo9sFw9rN+cWTtXIFoHGs3URVZq+kXT+ujpA620naZ4anlIgeq2jwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFJRo5Ju5UwrbCETDhg3X71zY5KH4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzgyYjhh
NC05YTRhLTQzZmYtYWFlOS02NTRiNTUyMGFlNjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvODJiOGE0
LTlhNGEtNDNmZi1hYWU5LTY1NGI1NTIwYWU2My8xL2xHamttN2xUQ3RzSVJNT0dE
ZGZ2WE5qa29mZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC5BTANBgkqhkiG9w0BAQsFAAOCAQEAUCu5qVY/DF5z
/8ewnzg4RKEIdbhpGkKyRA8YAZTume8O1vyo1TuII1WFvtIQqGgcFE/xAQekT+2Y
ycUf97HEDYW3pgMhZEC8IXL+K2wPfCb408eUU4gbrEyyjNLV5lL3nnT0Dgubxe5G
PIMKDLjd+dNXrGaTvHCJGQ3aYeVq+pmzmbu4JR2JnAo7z3wLYfpyIJh45h7QK+NF
gns2Wq6Ti2Sfxiay8LRObavHENTnRxPWkuiA1mU02Sk1O+Fja8t27c9nVZbkUv+I
thUAFfx08Zee4jQRuHQTYO8IVZd5b77A/OFa+xekOVrZLQnX1j332IiIRq3cyhYe
tvcStjtmYA==
-----END CERTIFICATE-----