Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vD2lZrx-k6JiL0aLy-Y_T66lcTM.cer
File:                     vD2lZrx-k6JiL0aLy-Y_T66lcTM.cer (raw, json)
Hash identifier:          KJGyM38vvhT+mQbAQbIbNoWtA/GJHuftY28ElX7QPZg=
Subject key identifier:   BC:3D:A5:66:BC:7E:93:A2:62:2F:46:8B:CB:E6:3F:4F:AE:A5:71:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D8983D5FFFAD94B525056C0A7597A53
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b5/9685f8-1dfe-4954-8c39-bc8f12f92c73/1/vD2lZrx-k6JiL0aLy-Y_T66lcTM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b5/9685f8-1dfe-4954-8c39-bc8f12f92c73/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.0.234.0/24

Validation:               Failed, certificate revoked on Wed 15 Nov 2023 14:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:83:d5:ff:fa:d9:4b:52:50:56:c0:a7:59:7a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc3da566bc7e93a2622f468bcbe63f4faea57133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:68:9d:5d:9b:a3:4e:2c:f2:7c:e4:b0:64:7a:
                    1b:b5:de:65:e7:ba:a7:1c:e6:38:54:e0:41:2b:70:
                    da:c9:ec:40:f3:d4:3e:50:23:c7:89:f1:21:17:81:
                    fc:bd:dc:04:5a:07:56:19:82:be:60:cd:af:23:32:
                    92:e9:fd:d1:79:e7:0a:05:a7:47:6b:ac:91:ac:ef:
                    37:25:74:51:97:c0:c3:40:b9:82:a6:ee:9e:b7:f3:
                    8f:d7:67:ea:6a:89:02:00:6b:7c:73:68:0e:b6:2f:
                    db:79:7b:b1:49:08:8f:a8:65:1a:bb:ca:14:3a:43:
                    23:0f:99:3b:fe:29:0b:86:bb:43:0c:d7:6b:53:43:
                    be:28:37:4a:30:18:a8:91:e4:ad:95:a0:5e:d2:94:
                    de:8e:88:cc:c4:2d:8c:00:ed:0b:39:e1:9b:ed:36:
                    0b:4a:e2:58:c0:53:79:5a:44:e6:bb:5a:a6:8a:02:
                    46:9b:ac:80:c7:85:1a:8d:59:96:17:d8:1c:d3:74:
                    03:4d:cf:ac:0a:a7:2b:82:01:29:f3:ef:6e:20:a9:
                    ba:ae:df:c8:56:85:ae:d7:81:fb:35:9e:19:01:ce:
                    e5:ef:d0:15:d2:0f:9b:31:eb:ae:f5:c1:7e:cf:df:
                    92:1d:1e:ac:de:4d:50:78:12:d6:e3:9d:b1:4b:e7:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3D:A5:66:BC:7E:93:A2:62:2F:46:8B:CB:E6:3F:4F:AE:A5:71:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/9685f8-1dfe-4954-8c39-bc8f12f92c73/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/9685f8-1dfe-4954-8c39-bc8f12f92c73/1/vD2lZrx-k6JiL0aLy-Y_T66lcTM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:57:e1:24:dd:09:b3:88:82:09:2e:9e:ab:bf:22:56:b0:50:
         43:13:55:b6:3e:fb:7b:19:42:63:0b:a7:06:f9:2a:b7:f6:bf:
         f8:9b:ce:d5:b1:23:03:34:14:6d:2c:9d:3a:26:fb:d0:02:9f:
         51:07:f9:65:dc:fe:1b:22:49:6e:e7:5d:a9:5e:b3:02:94:46:
         d2:d0:2b:75:1f:ee:95:3a:0d:b1:b0:d0:35:9f:48:31:e6:3c:
         11:fe:27:65:e6:58:19:3a:04:86:21:7a:91:40:19:af:c8:1d:
         dc:c8:98:8e:c3:3a:89:08:24:80:8c:5c:ab:1d:1f:29:fc:0d:
         da:a5:41:6a:71:bc:5f:97:00:78:22:60:3e:a5:04:68:12:15:
         de:1d:b3:fb:fd:fa:1f:53:ba:c0:27:2e:cc:67:a7:45:05:db:
         a7:b1:b0:51:4a:9f:e3:91:7c:35:4e:26:b1:ac:81:7b:09:dd:
         4a:01:bb:14:69:27:48:11:86:35:17:8a:0d:6e:cf:8a:96:74:
         d3:e0:89:04:86:7f:c5:b2:74:7e:cf:6d:b0:75:34:fc:05:b2:
         37:d0:b2:da:68:50:a3:fd:48:03:ca:f9:a7:61:d3:15:eb:57:
         1d:8f:6d:8f:c1:47:e1:17:96:a2:b2:f7:96:ab:4e:97:22:0b:
         4e:2b:12:eb
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVtiYPV//rZS1JQVsCnWXpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTMzMzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzNkYTU2NmJjN2U5M2EyNjIyZjQ2OGJjYmU2M2Y0ZmFlYTU3MTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGidXZujTizyfOSwZHobtd5l57qn
HOY4VOBBK3DayexA89Q+UCPHifEhF4H8vdwEWgdWGYK+YM2vIzKS6f3ReecKBadH
a6yRrO83JXRRl8DDQLmCpu6et/OP12fqaokCAGt8c2gOti/beXuxSQiPqGUau8oU
OkMjD5k7/ikLhrtDDNdrU0O+KDdKMBiokeStlaBe0pTejojMxC2MAO0LOeGb7TYL
SuJYwFN5WkTmu1qmigJGm6yAx4UajVmWF9gc03QDTc+sCqcrggEp8+9uIKm6rt/I
VoWu14H7NZ4ZAc7l79AV0g+bMeuu9cF+z9+SHR6s3k1QeBLW452xS+czKwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLw9pWa8fpOiYi9Gi8vmP0+upXEzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1Lzk2ODVm
OC0xZGZlLTQ5NTQtOGMzOS1iYzhmMTJmOTJjNzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvOTY4NWY4
LTFkZmUtNDk1NC04YzM5LWJjOGYxMmY5MmM3My8xL3ZEMmxacngtazZKaUwwYUx5
LVlfVDY2bGNUTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwgDqMA0GCSqGSIb3DQEBCwUAA4IBAQCQV+Ek
3QmziIIJLp6rvyJWsFBDE1W2Pvt7GUJjC6cG+Sq39r/4m87VsSMDNBRtLJ06JvvQ
Ap9RB/ll3P4bIklu512pXrMClEbS0Ct1H+6VOg2xsNA1n0gx5jwR/idl5lgZOgSG
IXqRQBmvyB3cyJiOwzqJCCSAjFyrHR8p/A3apUFqcbxflwB4ImA+pQRoEhXeHbP7
/fofU7rAJy7MZ6dFBdunsbBRSp/jkXw1TiaxrIF7Cd1KAbsUaSdIEYY1F4oNbs+K
lnTT4IkEhn/FsnR+z22wdTT8BbI30LLaaFCj/UgDyvmnYdMV61cdj22PwUfhF5ai
sveWq06XIgtOKxLr
-----END CERTIFICATE-----