Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x_6uq01cHAIpHd--iBKmFCZFT-o.cer
File:                     x_6uq01cHAIpHd--iBKmFCZFT-o.cer (raw, json)
Hash identifier:          xvIdIfyxufNWcQonVNQ3vkI+30bdCXtDHI9Gb5cJoPk=
Subject key identifier:   C7:FE:AE:AB:4D:5C:1C:02:29:1D:DF:BE:88:12:A6:14:26:45:4F:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F41E0FA1DE0E9F3F7FD2539FEB362D0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/x_6uq01cHAIpHd--iBKmFCZFT-o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.3.37.0/24

Validation:               Failed, certificate revoked on Thu 16 Nov 2023 07:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:41:e0:fa:1d:e0:e9:f3:f7:fd:25:39:fe:b3:62:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c7feaeab4d5c1c02291ddfbe8812a61426454fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:cf:e4:b2:5d:35:77:55:62:c3:18:ec:55:
                    0c:6c:d3:aa:f5:f3:56:42:59:bf:25:3b:38:c4:0a:
                    b5:bf:4c:74:83:5b:47:48:78:d7:26:be:47:17:2f:
                    2f:ed:23:f6:1b:50:ff:bf:3d:ea:01:56:74:60:f9:
                    ae:7a:4a:a9:e1:d3:cc:6b:f0:3e:31:b1:a3:44:42:
                    2a:97:1a:dd:54:85:19:da:ed:9a:6e:7f:9b:98:8d:
                    56:e0:d5:4a:e4:e3:58:ac:7d:80:e5:35:46:4c:5c:
                    4d:32:40:7f:d9:8f:87:7b:7a:8f:95:81:3d:1f:b3:
                    70:fe:2c:c3:c3:cc:81:0e:a3:88:01:ba:3a:e4:58:
                    22:80:5b:bb:82:44:15:41:c3:9f:fc:16:9e:2d:bc:
                    4d:4c:8f:5c:32:bc:a7:5b:aa:49:13:c2:3e:de:76:
                    c2:03:13:6f:75:ba:12:9a:a9:e1:58:3e:5f:36:f1:
                    6b:13:97:f1:18:a9:4e:a3:a4:2f:62:f4:50:80:2d:
                    8e:9b:2f:e9:78:8e:3c:70:73:a0:58:3c:1c:6e:77:
                    7c:b9:b8:44:49:89:aa:44:4e:3a:a8:df:69:36:a1:
                    2c:b8:ac:dd:c1:f9:de:07:02:70:70:43:04:a5:bb:
                    f6:c0:d0:6b:f2:6d:d1:3a:31:bb:6c:70:8c:44:4c:
                    a1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FE:AE:AB:4D:5C:1C:02:29:1D:DF:BE:88:12:A6:14:26:45:4F:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/x_6uq01cHAIpHd--iBKmFCZFT-o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a8:c7:32:a8:ee:55:13:26:d9:07:26:a3:6b:c0:ae:df:b0:
         80:e5:ed:8a:14:05:7d:91:ec:5d:4b:e6:cb:a0:77:bb:e0:f8:
         4d:a2:e5:e0:42:3c:e8:ba:1b:5b:c0:73:ed:c6:05:74:91:64:
         13:ee:b6:f6:87:de:ad:d6:bd:78:0b:64:a8:32:74:47:ba:6e:
         0f:04:f2:38:3e:71:a0:79:04:54:3a:60:55:ea:d7:07:b5:38:
         60:2a:db:62:47:00:11:af:55:64:9b:c3:d7:ed:b8:a4:c2:1a:
         38:82:98:e8:90:2d:fc:81:b4:a9:8c:03:87:96:c0:ec:ba:48:
         fd:ab:00:2a:1e:63:0c:2f:07:43:f0:60:13:6a:c2:d6:2d:90:
         89:c2:06:5f:9a:9c:70:94:d8:7a:c3:05:c2:22:21:79:7b:d4:
         f3:cd:20:9c:86:20:ab:35:57:3f:35:99:12:fd:12:52:2a:d9:
         41:bd:fe:85:7c:8f:39:5a:70:05:71:05:f8:4b:2d:88:94:1f:
         e7:30:61:c5:aa:20:db:0b:86:4d:be:c7:22:ac:81:3c:ce:3d:
         f7:10:48:09:45:f4:a7:ea:95:8b:48:8a:eb:2c:94:11:4e:83:
         b2:66:cb:20:47:95:32:05:5f:e1:94:ba:dc:9b:fd:ff:36:8f:
         73:d0:cb:68
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVvQeD6HeDp8/f9JTn+s2LQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjEzNDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2ZlYWVhYjRkNWMxYzAyMjkxZGRmYmU4ODEyYTYxNDI2NDU0ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IjP5LJdNXdVYsMY7FUMbNOq9fNW
Qlm/JTs4xAq1v0x0g1tHSHjXJr5HFy8v7SP2G1D/vz3qAVZ0YPmuekqp4dPMa/A+
MbGjREIqlxrdVIUZ2u2abn+bmI1W4NVK5ONYrH2A5TVGTFxNMkB/2Y+He3qPlYE9
H7Nw/izDw8yBDqOIAbo65FgigFu7gkQVQcOf/BaeLbxNTI9cMrynW6pJE8I+3nbC
AxNvdboSmqnhWD5fNvFrE5fxGKlOo6QvYvRQgC2Omy/peI48cHOgWDwcbnd8ubhE
SYmqRE46qN9pNqEsuKzdwfneBwJwcEMEpbv2wNBr8m3ROjG7bHCMREyh+QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMf+rqtNXBwCKR3fvogSphQmRU/qMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzNiMDgy
My1jYjY5LTRmOGUtOGYwOC03OGQ1NTRjMThlOGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvM2IwODIz
LWNiNjktNGY4ZS04ZjA4LTc4ZDU1NGMxOGU4YS8xL3hfNnVxMDFjSEFJcEhkLS1p
QkttRkNaRlQtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAPgMlMA0GCSqGSIb3DQEBCwUAA4IBAQChqMcy
qO5VEybZByaja8Cu37CA5e2KFAV9kexdS+bLoHe74PhNouXgQjzouhtbwHPtxgV0
kWQT7rb2h96t1r14C2SoMnRHum4PBPI4PnGgeQRUOmBV6tcHtThgKttiRwARr1Vk
m8PX7bikwho4gpjokC38gbSpjAOHlsDsukj9qwAqHmMMLwdD8GATasLWLZCJwgZf
mpxwlNh6wwXCIiF5e9TzzSCchiCrNVc/NZkS/RJSKtlBvf6FfI85WnAFcQX4Sy2I
lB/nMGHFqiDbC4ZNvscirIE8zj33EEgJRfSn6pWLSIrrLJQRToOyZssgR5UyBV/h
lLrcm/3/No9z0Mto
-----END CERTIFICATE-----