Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r_1leKfLxohASaDr62XAOcWOJYM.cer
File:                     r_1leKfLxohASaDr62XAOcWOJYM.cer (raw, json)
Hash identifier:          5X/YCMJ7eNv+SnAha/UjKXg/ZqSqi6T0prwrUOE5BgE=
Subject key identifier:   AF:FD:65:78:A7:CB:C6:88:40:49:A0:EB:EB:65:C0:39:C5:8E:25:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB06D4321DFE1A7C05866B0FCBE099F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/r_1leKfLxohASaDr62XAOcWOJYM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:11 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.9.21.0/24

Validation:               Failed, certificate revoked on Mon 27 Feb 2023 13:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:6d:43:21:df:e1:a7:c0:58:66:b0:fc:be:09:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=affd6578a7cbc6884049a0ebeb65c039c58e2583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:7c:17:3d:a2:53:49:a0:c6:72:9e:f4:7c:
                    0d:b5:93:e4:3c:ce:b8:17:1f:ee:1c:36:98:1e:2e:
                    e6:96:37:f0:b9:45:b7:16:86:f8:9b:56:f6:6a:2b:
                    7d:5f:84:e9:82:02:25:16:5d:79:69:ca:30:a6:68:
                    36:3a:cd:a9:fc:5b:07:21:27:bf:ab:34:b9:a5:ce:
                    c6:12:e0:17:f5:c7:ca:b3:0b:74:31:a7:99:2e:72:
                    3c:46:00:48:ea:c8:ee:3e:31:02:af:65:b0:63:7b:
                    94:9c:93:9d:28:17:9f:19:ad:f4:c6:1c:70:4f:55:
                    44:06:d0:93:f3:0b:51:46:21:db:ee:91:85:1f:71:
                    74:26:53:d3:d1:ed:f4:6e:91:80:d6:98:cf:f3:97:
                    96:97:98:85:28:43:ab:cd:78:23:3b:e1:c8:69:3d:
                    c9:57:03:d0:22:ca:6c:d9:7a:7d:2b:fb:2d:3b:c1:
                    5d:65:7f:6b:b9:6d:75:93:8a:37:07:7e:19:27:ca:
                    98:eb:69:01:07:4e:af:e6:0b:ea:57:d4:04:74:e2:
                    ac:4c:8c:76:3e:86:7c:fe:97:8a:6a:70:a0:e7:f8:
                    ab:31:4c:da:38:f1:e8:e4:d4:26:27:f3:0a:86:5c:
                    4e:13:a1:cf:09:0c:db:ee:e1:94:da:7b:34:48:98:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FD:65:78:A7:CB:C6:88:40:49:A0:EB:EB:65:C0:39:C5:8E:25:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/r_1leKfLxohASaDr62XAOcWOJYM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:e0:a7:e1:7c:51:44:50:da:38:62:96:9b:c4:a9:8c:6f:32:
         6b:51:7c:d3:4e:7e:a9:0d:87:c4:69:5c:da:7d:72:df:78:7b:
         e7:a0:a4:f0:92:00:4a:2e:3f:f2:9d:12:ec:3b:4b:54:fa:a2:
         82:5f:87:50:32:59:85:23:78:9a:4e:dd:4c:ba:e3:5d:97:02:
         0f:34:f1:26:5e:5f:a0:9e:1c:fd:1d:98:46:bb:16:f0:03:81:
         8d:e4:f4:1e:8a:8a:59:0c:4e:77:93:58:ee:ec:51:98:94:7a:
         af:d7:86:bb:b5:29:20:0a:61:4c:ed:02:a8:09:e9:8e:6a:4f:
         c4:a6:ed:5e:30:41:41:e5:88:a9:d9:47:4e:b1:61:6c:cb:68:
         45:49:ef:30:c9:a3:7b:36:34:52:85:69:0d:3f:b8:7b:c3:9f:
         ff:b5:fe:29:45:1f:48:be:a6:e3:fe:a4:49:12:79:34:75:3c:
         7b:81:b0:50:11:db:f3:e3:23:8e:53:82:86:d7:9e:a5:7a:2d:
         aa:cc:46:6e:b0:3c:60:f9:f4:d1:c1:fb:70:15:e3:f1:50:bb:
         75:65:4d:08:a6:c5:f1:b6:09:cd:3a:36:1c:80:11:87:9e:68:
         fe:eb:a6:3a:1f:33:39:5b:dc:fb:93:9a:71:97:0c:a6:8a:12:
         2a:c0:79:dc
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVvsG1DId/hp8BYZrD8vgmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmZkNjU3OGE3Y2JjNjg4NDA0OWEwZWJlYjY1YzAzOWM1OGUyNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EN8Fz2iU0mgxnKe9HwNtZPkPM64
Fx/uHDaYHi7mljfwuUW3Fob4m1b2ait9X4TpggIlFl15acowpmg2Os2p/FsHISe/
qzS5pc7GEuAX9cfKswt0MaeZLnI8RgBI6sjuPjECr2WwY3uUnJOdKBefGa30xhxw
T1VEBtCT8wtRRiHb7pGFH3F0JlPT0e30bpGA1pjP85eWl5iFKEOrzXgjO+HIaT3J
VwPQIsps2Xp9K/stO8FdZX9ruW11k4o3B34ZJ8qY62kBB06v5gvqV9QEdOKsTIx2
PoZ8/peKanCg5/irMUzaOPHo5NQmJ/MKhlxOE6HPCQzb7uGU2ns0SJjOewIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFK/9ZXiny8aIQEmg6+tlwDnFjiWDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzNkMDFk
Yy0zNWY1LTQ4ZDUtYTQ4OS1lNWMxY2EyYzZjZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvM2QwMWRj
LTM1ZjUtNDhkNS1hNDg5LWU1YzFjYTJjNmNmYi8xL3JfMWxlS2ZMeG9oQVNhRHI2
MlhBT2NXT0pZTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQALQkVMA0GCSqGSIb3DQEBCwUAA4IBAQAt4Kfh
fFFEUNo4YpabxKmMbzJrUXzTTn6pDYfEaVzafXLfeHvnoKTwkgBKLj/ynRLsO0tU
+qKCX4dQMlmFI3iaTt1MuuNdlwIPNPEmXl+gnhz9HZhGuxbwA4GN5PQeiopZDE53
k1ju7FGYlHqv14a7tSkgCmFM7QKoCemOak/Epu1eMEFB5Yip2UdOsWFsy2hFSe8w
yaN7NjRShWkNP7h7w5//tf4pRR9Ivqbj/qRJEnk0dTx7gbBQEdvz4yOOU4KG156l
ei2qzEZusDxg+fTRwftwFePxULt1ZU0IpsXxtgnNOjYcgBGHnmj+66Y6HzM5W9z7
k5pxlwymihIqwHnc
-----END CERTIFICATE-----