Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
File:                     lIRnQROSYziNmE2x6X4DFmnGSG4.cer (raw, json)
Hash identifier:          RAehaFEVt3ygxX4GyrTuo2htY6j9YuPFsbhCnZ+86z8=
Subject key identifier:   94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0191D6ACA668EEB7BAF7548DA0624CB9A1AC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 09 Sep 2024 12:05:24 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 188.95.89.0/24

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 13:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d6:ac:a6:68:ee:b7:ba:f7:54:8d:a0:62:4c:b9:a1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep  9 12:05:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=94846741139263388d984db1e97e031669c6486e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f0:f0:c1:36:e5:f6:bb:da:e0:69:f0:15:09:
                    d1:0d:e9:80:ef:e9:12:fa:8f:30:9e:e5:d2:6f:b8:
                    57:3f:f4:f7:99:40:d2:c3:6e:75:0c:31:62:4d:2a:
                    cb:71:97:86:1b:f1:e1:1e:0b:8e:e6:3f:19:66:41:
                    c1:1f:c3:c3:46:26:92:de:f3:5d:ca:e9:41:8e:e6:
                    eb:a7:1b:8f:ac:f4:e2:6a:23:55:7a:d6:67:cd:41:
                    94:f3:5c:3d:1e:ab:44:75:e8:49:64:f7:0f:1d:da:
                    f5:37:ef:34:3f:06:26:2d:d7:20:d0:a7:18:45:88:
                    94:d4:8b:9e:fc:96:86:3f:af:d5:8d:a1:2d:bc:02:
                    a5:fe:da:c0:24:23:18:97:7c:21:06:29:d4:d2:47:
                    c7:10:0b:0e:4f:38:b8:c8:bc:7f:3d:94:4a:0e:21:
                    08:6f:71:f4:96:e6:d8:6c:80:89:da:05:42:89:0b:
                    77:e3:13:3a:7a:77:a5:87:c8:a4:ab:4e:c2:9a:85:
                    79:5f:57:bc:28:4d:e8:a2:56:28:af:a0:a1:30:b1:
                    a9:1d:81:74:29:f4:3f:fd:a6:4e:8a:b6:c0:74:e3:
                    b6:ea:55:81:c6:55:c3:7c:04:51:54:b1:40:c8:b1:
                    af:25:c7:32:fd:5f:b7:d6:90:e6:dc:8c:33:99:f2:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.95.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:a6:ed:08:03:2b:ab:04:d5:cb:11:b5:91:c1:9b:b2:66:c9:
         7b:36:0b:43:c3:32:3d:ea:07:82:67:08:7b:10:d1:cb:5e:2f:
         07:45:2b:96:95:63:b9:7e:20:c9:56:b3:bd:92:ae:b4:18:65:
         8f:e2:10:1a:bf:71:93:60:f5:b2:02:b4:01:9b:27:b3:06:54:
         9b:a9:94:e6:01:ec:3d:db:55:b1:57:c5:f0:dc:67:6d:22:22:
         c2:ce:39:3e:a6:38:d4:b7:ef:21:4d:5b:de:97:d9:d8:b0:db:
         1b:ec:98:ff:93:e1:28:5e:a1:4a:5e:d2:6a:6e:e5:1d:bd:3b:
         84:63:41:7f:f4:bf:30:2d:ee:dc:65:99:02:8d:c2:4c:9f:d4:
         3a:47:3e:e3:af:94:a7:28:08:58:a4:5e:f7:7b:a2:29:cc:31:
         b6:7d:47:ab:0d:6d:14:bb:c5:35:b0:f4:21:01:ea:40:d2:a0:
         1a:19:95:cc:76:b0:15:d1:79:68:7f:61:6e:6e:b9:fb:cf:5e:
         23:9d:01:68:f5:9c:b2:26:64:af:71:09:cb:57:c5:1d:2f:40:
         d5:cc:a0:74:51:18:05:ed:fc:af:6d:9b:19:58:e0:2f:55:fc:
         6a:49:99:ae:06:3c:db:78:dc:e9:f2:81:42:ae:8e:cb:34:77:
         9b:e6:5d:1a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZHWrKZo7re691SNoGJMuaGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTA5MTIwNTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDg0Njc0MTEzOTI2MzM4OGQ5ODRkYjFlOTdlMDMxNjY5YzY0ODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/DwwTbl9rva4GnwFQnRDemA7+kS
+o8wnuXSb7hXP/T3mUDSw251DDFiTSrLcZeGG/HhHguO5j8ZZkHBH8PDRiaS3vNd
yulBjubrpxuPrPTiaiNVetZnzUGU81w9HqtEdehJZPcPHdr1N+80PwYmLdcg0KcY
RYiU1Iue/JaGP6/VjaEtvAKl/trAJCMYl3whBinU0kfHEAsOTzi4yLx/PZRKDiEI
b3H0lubYbICJ2gVCiQt34xM6enelh8ikq07CmoV5X1e8KE3oolYor6ChMLGpHYF0
KfQ//aZOirbAdOO26lWBxlXDfARRVLFAyLGvJccy/V+31pDm3IwzmfKYcQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJSEZ0ETkmM4jZhNsel+AxZpxkhuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwL2E0OTEw
Mi0wNjEyLTQ3YTAtODExNy1jYjExMjUwMDdkZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvYTQ5MTAy
LTA2MTItNDdhMC04MTE3LWNiMTEyNTAwN2RmYi8xL2xJUm5RUk9TWXppTm1FMng2
WDRERm1uR1NHNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAvF9ZMA0GCSqGSIb3DQEBCwUAA4IBAQA8pu0I
AyurBNXLEbWRwZuyZsl7NgtDwzI96geCZwh7ENHLXi8HRSuWlWO5fiDJVrO9kq60
GGWP4hAav3GTYPWyArQBmyezBlSbqZTmAew921WxV8Xw3GdtIiLCzjk+pjjUt+8h
TVvel9nYsNsb7Jj/k+EoXqFKXtJqbuUdvTuEY0F/9L8wLe7cZZkCjcJMn9Q6Rz7j
r5SnKAhYpF73e6IpzDG2fUerDW0Uu8U1sPQhAepA0qAaGZXMdrAV0Xlof2Fubrn7
z14jnQFo9ZyyJmSvcQnLV8UdL0DVzKB0URgF7fyvbZsZWOAvVfxqSZmuBjzbeNzp
8oFCro7LNHeb5l0a
-----END CERTIFICATE-----