Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.cer
File:                     oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.cer (raw, json)
Hash identifier:          a9Dv7AiKDRa9rHrJoUewgK3oUS4LsGREpBhc3CQHPLk=
Subject key identifier:   A0:D6:02:00:F4:D2:5C:0C:1B:D7:D7:7D:66:72:75:56:EF:5D:A9:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FB03C95E2DF730CBEFEC92C975BDE0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:16 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 188.93.140.0/24

Validation:               Failed, certificate revoked on Thu 14 Dec 2023 12:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:03:c9:5e:2d:f7:30:cb:ef:ec:92:c9:75:bd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a0d60200f4d25c0c1bd7d77d66727556ef5da9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:16:cb:83:83:86:5e:75:17:8b:24:28:55:c3:
                    a9:55:1d:9c:43:63:e2:7f:a9:69:2a:92:fa:c5:af:
                    35:60:27:64:9f:77:71:b4:e8:92:3c:e8:6c:ad:0c:
                    ea:27:1c:02:2e:e4:c5:eb:9f:e2:e4:6a:73:2a:0c:
                    7c:6a:09:c8:55:40:8f:3c:77:71:58:6c:0b:30:cf:
                    39:78:73:b8:5a:0b:b5:e0:d4:73:32:21:42:fd:85:
                    66:cd:1b:0f:ef:20:4c:bd:bd:1e:6b:8f:2b:59:72:
                    b5:67:ea:5c:f7:8d:3c:d1:fe:4d:31:42:fd:c6:af:
                    a1:73:e2:03:11:ce:09:50:40:c8:ff:5b:95:b9:1c:
                    24:5f:c6:eb:cc:55:23:8b:3e:3b:8f:bc:a2:c8:24:
                    b6:4b:8e:01:00:fd:dd:f6:cd:bb:ed:af:99:e7:29:
                    a4:88:52:96:b2:75:16:64:fe:bb:43:30:ca:f0:34:
                    9a:f9:a7:31:01:27:8e:8d:a4:5b:b0:c8:8a:42:ad:
                    6e:a3:de:06:af:02:dc:3d:06:64:8b:c6:27:1c:3b:
                    2d:88:40:73:2a:8d:b1:b3:50:e2:dd:c6:00:e8:cf:
                    d5:86:7a:43:54:e1:ac:35:b5:cb:93:3a:2f:74:b2:
                    61:b0:a3:0c:9f:09:19:ef:e3:4a:af:38:df:d2:2c:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D6:02:00:F4:D2:5C:0C:1B:D7:D7:7D:66:72:75:56:EF:5D:A9:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:0a:8a:7d:8d:25:a5:10:24:56:a2:53:04:37:60:34:b3:
         df:f5:0f:b3:50:ad:46:ae:41:0d:06:a1:90:14:33:05:f7:a5:
         c1:b8:e6:41:63:93:0d:d9:56:e0:c8:1a:33:c4:86:81:bc:e7:
         98:fd:78:a1:7f:c5:1d:3a:bc:97:3a:6d:d0:75:18:06:af:77:
         58:4d:35:72:8e:56:41:ff:20:9f:f7:c3:e0:38:b4:0e:c7:5e:
         fa:5c:22:a4:de:20:d7:e4:24:e9:a9:fb:ba:71:67:f1:9e:2b:
         ba:2e:7f:a8:8f:fc:98:58:71:9f:ee:76:76:d4:da:6a:3a:d5:
         a1:b6:91:26:4d:45:22:82:0f:4f:bb:71:ca:5b:ce:0b:76:58:
         b7:0f:07:5a:9d:c9:e9:11:53:ef:2f:da:f1:65:cd:03:35:ca:
         7a:dd:ae:b5:d8:aa:d3:c9:8b:05:fc:6f:72:6c:4a:c5:f4:7b:
         4a:60:d6:1d:02:7f:34:fa:9e:99:1a:21:17:14:4d:53:f4:71:
         ee:7d:45:2a:a4:73:34:b2:08:29:d0:cf:19:15:49:1f:18:07:
         12:64:42:89:75:54:f0:14:11:12:ce:e1:90:93:91:6c:24:da:
         83:9c:59:75:38:cc:ec:b3:08:d6:7b:31:c7:ae:62:63:52:b2:
         fc:5d:0e:0f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVw+wPJXi33MMvv7JLJdb3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGQ2MDIwMGY0ZDI1YzBjMWJkN2Q3N2Q2NjcyNzU1NmVmNWRhOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBbLg4OGXnUXiyQoVcOpVR2cQ2Pi
f6lpKpL6xa81YCdkn3dxtOiSPOhsrQzqJxwCLuTF65/i5GpzKgx8agnIVUCPPHdx
WGwLMM85eHO4Wgu14NRzMiFC/YVmzRsP7yBMvb0ea48rWXK1Z+pc94080f5NMUL9
xq+hc+IDEc4JUEDI/1uVuRwkX8brzFUjiz47j7yiyCS2S44BAP3d9s277a+Z5ymk
iFKWsnUWZP67QzDK8DSa+acxASeOjaRbsMiKQq1uo94GrwLcPQZki8YnHDstiEBz
Ko2xs1Di3cYA6M/VhnpDVOGsNbXLkzovdLJhsKMMnwkZ7+NKrzjf0iz/ywIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKDWAgD00lwMG9fXfWZydVbvXan0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzE1MzE5
Yy0yYjYxLTQwNzUtYWY4My0yMTIzZGYwNTBjZjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvMTUzMTlj
LTJiNjEtNDA3NS1hZjgzLTIxMjNkZjA1MGNmMi8xL29OWUNBUFRTWEF3YjE5ZDla
bkoxVnU5ZHFmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAvF2MMA0GCSqGSIb3DQEBCwUAA4IBAQBNDQqK
fY0lpRAkVqJTBDdgNLPf9Q+zUK1GrkENBqGQFDMF96XBuOZBY5MN2VbgyBozxIaB
vOeY/Xihf8UdOryXOm3QdRgGr3dYTTVyjlZB/yCf98PgOLQOx176XCKk3iDX5CTp
qfu6cWfxniu6Ln+oj/yYWHGf7nZ21NpqOtWhtpEmTUUigg9Pu3HKW84Ldli3Dwda
ncnpEVPvL9rxZc0DNcp63a612KrTyYsF/G9ybErF9HtKYNYdAn80+p6ZGiEXFE1T
9HHufUUqpHM0sggp0M8ZFUkfGAcSZEKJdVTwFBESzuGQk5FsJNqDnFl1OMzsswjW
ezHHrmJjUrL8XQ4P
-----END CERTIFICATE-----