Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer
File:                     t-z503TMD3OWce5VBVvVjF-3Z6g.cer (raw, json)
Hash identifier:          j2ea5S6PIdGEl4KBD4mitIM4cNwKOvFoEYoCrmr/dvA=
Subject key identifier:   B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D71FD689CB22A4DA8291D655B01EB2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/t-z503TMD3OWce5VBVvVjF-3Z6g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 208254

Validation:               Failed, certificate revoked on Thu 13 Jul 2023 10:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:1f:d6:89:cb:22:a4:da:82:91:d6:55:b0:1e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:8a:92:49:4e:be:29:16:14:e8:20:d6:fe:
                    d4:a4:ac:8c:3a:bf:7c:94:fa:ad:ae:e1:6d:99:e2:
                    0d:65:3d:4d:65:ca:49:4f:c8:bd:fb:83:dd:b4:f2:
                    07:bf:66:e8:07:c0:67:d0:27:94:37:b4:22:2a:d0:
                    93:22:7f:7e:c3:4d:e6:73:05:ac:26:a5:6b:a0:9a:
                    fc:d2:de:2c:9c:24:54:3b:63:f0:01:62:9f:87:a8:
                    f0:bd:f1:89:26:5a:c3:f5:e2:bd:7c:6b:f8:ec:10:
                    4c:90:4d:67:68:e5:51:f9:aa:89:4a:5d:fa:38:f6:
                    ab:4c:0d:f5:e7:1a:eb:42:04:5f:af:c5:18:b5:c7:
                    c0:57:36:78:2a:7a:dc:2e:61:22:6e:b1:32:4d:66:
                    d2:60:70:d9:2e:bc:c2:4d:ac:77:25:3a:a1:29:5e:
                    16:5f:77:34:2c:a5:f7:1a:9a:ac:d3:40:70:3f:c9:
                    6d:d2:aa:ae:38:70:1c:bb:e7:ea:18:99:51:42:0d:
                    66:f9:c3:0f:18:69:ac:1f:9b:9d:e8:69:21:87:19:
                    fd:9f:3b:92:33:02:ea:60:08:b4:31:31:e9:c3:7c:
                    d9:c6:19:be:9e:96:e5:cb:2f:48:ba:b4:42:23:ba:
                    c9:83:92:c9:a3:bb:db:bc:2b:60:09:f6:cc:b6:38:
                    c8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/t-z503TMD3OWce5VBVvVjF-3Z6g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208254

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:e2:a1:31:5e:46:a5:3e:6e:19:6e:f9:00:30:b0:2f:7f:
         d0:56:b1:12:0f:e2:76:25:ae:a4:42:12:f6:56:bd:fb:ce:7b:
         bb:2f:81:d6:f4:cc:6b:2c:8d:0f:a7:f1:cc:c7:97:27:a3:f1:
         48:a5:51:e1:a9:07:f1:03:88:c6:c8:69:c5:9d:1f:5b:90:49:
         c8:54:02:c8:d1:ad:3c:95:6f:c3:39:83:4f:8e:5c:0c:c6:f9:
         a5:8d:ef:88:c0:ec:0f:2e:8a:a2:84:b4:6e:57:1b:a0:cc:3b:
         13:2a:69:c2:1b:0c:de:9c:5a:95:53:1d:0e:57:d9:1c:e1:f6:
         1c:82:80:05:3d:c3:9d:d7:96:8a:1c:bb:f7:3e:84:f6:0e:c7:
         d0:da:e9:dc:fa:d4:fc:33:8b:c5:18:e0:7e:25:86:01:d7:9b:
         af:72:01:67:b1:65:87:4f:6f:30:13:46:76:c2:1e:a4:9f:75:
         13:26:6e:9f:ec:49:a8:5d:9b:5e:58:ec:34:30:f9:5b:e2:0c:
         62:08:3a:ad:06:3d:60:e1:61:4b:4a:1f:3f:d7:57:7e:56:5b:
         e9:a9:f9:e4:5d:7c:59:c2:43:da:90:c8:74:b2:0c:4e:4f:a9:
         ef:80:96:f8:20:52:b4:57:20:47:3a:09:33:0c:36:13:00:cb:
         71:b2:7c:02
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVx1x/WicsipNqCkdZVsB6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2VjZjlkMzc0Y2MwZjczOTY3MWVlNTUwNTViZDU4YzVmYjc2N2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh6KkklOvikWFOgg1v7UpKyMOr98
lPqtruFtmeINZT1NZcpJT8i9+4PdtPIHv2boB8Bn0CeUN7QiKtCTIn9+w03mcwWs
JqVroJr80t4snCRUO2PwAWKfh6jwvfGJJlrD9eK9fGv47BBMkE1naOVR+aqJSl36
OParTA315xrrQgRfr8UYtcfAVzZ4KnrcLmEibrEyTWbSYHDZLrzCTax3JTqhKV4W
X3c0LKX3Gpqs00BwP8lt0qquOHAcu+fqGJlRQg1m+cMPGGmsH5ud6Gkhhxn9nzuS
MwLqYAi0MTHpw3zZxhm+npblyy9IurRCI7rJg5LJo7vbvCtgCfbMtjjI2QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLfs+dN0zA9zlnHuVQVb1Yxft2eoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2LzUxZjg5
NS03Yjk4LTQ2MDQtYjRkMi01Y2UxMWQ2NzM0YzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvNTFmODk1
LTdiOTgtNDYwNC1iNGQyLTVjZTExZDY3MzRjMC8xL3QtejUwM1RNRDNPV2NlNVZC
VnZWakYtM1o2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMtfjANBgkqhkiG9w0BAQsFAAOCAQEAAl3ioTFeRqU+
bhlu+QAwsC9/0FaxEg/idiWupEIS9la9+857uy+B1vTMayyND6fxzMeXJ6PxSKVR
4akH8QOIxshpxZ0fW5BJyFQCyNGtPJVvwzmDT45cDMb5pY3viMDsDy6KooS0blcb
oMw7EyppwhsM3pxalVMdDlfZHOH2HIKABT3DndeWihy79z6E9g7H0Nrp3PrU/DOL
xRjgfiWGAdebr3IBZ7Flh09vMBNGdsIepJ91EyZun+xJqF2bXljsNDD5W+IMYgg6
rQY9YOFhS0ofP9dXflZb6an55F18WcJD2pDIdLIMTk+p74CW+CBStFcgRzoJMww2
EwDLcbJ8Ag==
-----END CERTIFICATE-----