Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yW2G2GSV3GdrfxPbp9JYpjYqzSQ.cer
File:                     yW2G2GSV3GdrfxPbp9JYpjYqzSQ.cer (raw, json)
Hash identifier:          OG3Wl83U/pETDmF6vBrnxlWb9e5Z9atbOlJKCtXLNMY=
Subject key identifier:   C9:6D:86:D8:64:95:DC:67:6B:7F:13:DB:A7:D2:58:A6:36:2A:CD:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD10FC463B568EBBE7F567422090F53
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/yW2G2GSV3GdrfxPbp9JYpjYqzSQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.205.220.0/24

Validation:               Failed, certificate revoked on Fri 25 Aug 2023 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:0f:c4:63:b5:68:eb:be:7f:56:74:22:09:0f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c96d86d86495dc676b7f13dba7d258a6362acd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:93:1c:cf:07:bc:1f:6e:3e:5a:21:f4:82:
                    36:74:34:94:15:4c:a2:39:f7:55:bb:fb:a9:04:45:
                    d8:00:05:31:87:cc:cf:ff:57:98:63:91:b5:ea:a7:
                    ed:5f:f8:b1:2c:6c:3f:70:e6:3e:e6:e3:7c:8f:24:
                    bc:76:41:7c:b4:bb:28:bb:bf:f8:d5:e8:f8:05:ee:
                    d1:ee:ed:c4:e7:ab:fb:5a:2b:7e:0d:da:c8:c2:04:
                    ab:ae:16:6e:85:ec:a6:01:c2:9c:9d:58:da:0d:e0:
                    60:35:d0:8c:27:b0:b2:0d:af:30:13:bf:7e:dc:f7:
                    1a:09:51:a6:b0:85:63:72:4c:cf:8e:a2:b0:17:11:
                    2e:b6:72:53:f9:8c:3d:f0:75:e5:fa:03:5f:52:54:
                    40:92:45:cc:95:cc:bd:58:7a:98:64:ad:89:c8:0d:
                    1d:99:3f:89:88:b9:7d:92:e9:cc:15:ed:6e:27:52:
                    aa:96:ec:a4:8b:20:d6:e7:7f:37:30:2a:e8:88:b2:
                    6b:09:40:8c:0f:fe:7b:b5:47:3e:e1:e9:b9:9a:0d:
                    34:39:66:57:ab:ee:c7:0b:72:01:35:7d:6c:4b:6a:
                    5a:11:91:a0:8d:dd:bc:5f:06:6b:38:4f:fc:72:e0:
                    00:26:48:bb:32:8e:9f:09:20:ad:17:3d:ae:c3:4a:
                    d4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6D:86:D8:64:95:DC:67:6B:7F:13:DB:A7:D2:58:A6:36:2A:CD:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/yW2G2GSV3GdrfxPbp9JYpjYqzSQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:a5:9d:3f:f7:59:dd:d6:c6:30:6a:a2:96:04:d7:1f:26:
         e3:ff:a3:8e:33:1b:37:84:be:d5:7e:71:66:6a:0c:a2:99:92:
         e4:ec:45:2b:24:db:95:8b:d8:c5:52:14:b6:07:cc:7a:37:3d:
         91:95:cc:fc:cb:97:b0:dc:3a:28:c0:32:ea:69:4f:2d:e2:b4:
         17:78:9c:85:22:a5:5b:62:13:62:cd:56:4a:79:43:f1:e8:6e:
         83:42:32:ce:07:a6:a2:9e:62:58:8b:c5:b9:57:7f:5b:a5:f1:
         2c:cb:5b:58:7a:28:7e:08:43:b6:59:5e:18:4f:b7:71:2f:4f:
         e7:35:43:1e:51:d4:b7:49:21:59:11:84:9e:cd:2c:f3:92:4c:
         5d:49:ed:77:4f:56:e2:ce:bb:a9:b8:93:9b:bb:87:8b:a3:45:
         b6:82:b5:9a:91:94:23:b2:76:c8:35:f7:a9:18:cd:46:74:8d:
         4f:11:f2:02:6e:4a:de:c3:de:71:06:e2:b3:ff:bc:7d:14:44:
         d2:8a:09:23:22:d2:71:aa:88:f0:84:f0:20:91:80:b8:ca:61:
         7f:35:e5:e7:86:4a:b7:40:5e:26:0e:cd:34:1e:4e:fa:4d:b9:
         78:64:b8:3e:63:14:e8:2b:77:fd:32:e1:66:9d:8c:d6:92:29:
         c4:85:ae:5d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVr0Q/EY7Vo675/VnQiCQ9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTZkODZkODY0OTVkYzY3NmI3ZjEzZGJhN2QyNThhNjM2MmFjZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphOTHM8HvB9uPloh9II2dDSUFUyi
OfdVu/upBEXYAAUxh8zP/1eYY5G16qftX/ixLGw/cOY+5uN8jyS8dkF8tLsou7/4
1ej4Be7R7u3E56v7Wit+DdrIwgSrrhZuheymAcKcnVjaDeBgNdCMJ7CyDa8wE79+
3PcaCVGmsIVjckzPjqKwFxEutnJT+Yw98HXl+gNfUlRAkkXMlcy9WHqYZK2JyA0d
mT+JiLl9kunMFe1uJ1KqluykiyDW5383MCroiLJrCUCMD/57tUc+4em5mg00OWZX
q+7HC3IBNX1sS2paEZGgjd28XwZrOE/8cuAAJki7Mo6fCSCtFz2uw0rUDwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMlththkldxna38T26fSWKY2Ks0kMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2E2ZTg5
ZS1iYjk5LTQ0MzUtOWU1MC0yMGM0MWQyYzI0ZGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvYTZlODll
LWJiOTktNDQzNS05ZTUwLTIwYzQxZDJjMjRkYi8xL3lXMkcyR1NWM0dkcmZ4UGJw
OUpZcGpZcXpTUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW83cMA0GCSqGSIb3DQEBCwUAA4IBAQATbqWd
P/dZ3dbGMGqilgTXHybj/6OOMxs3hL7VfnFmagyimZLk7EUrJNuVi9jFUhS2B8x6
Nz2Rlcz8y5ew3DoowDLqaU8t4rQXeJyFIqVbYhNizVZKeUPx6G6DQjLOB6ainmJY
i8W5V39bpfEsy1tYeih+CEO2WV4YT7dxL0/nNUMeUdS3SSFZEYSezSzzkkxdSe13
T1bizrupuJObu4eLo0W2grWakZQjsnbINfepGM1GdI1PEfICbkrew95xBuKz/7x9
FETSigkjItJxqojwhPAgkYC4ymF/NeXnhkq3QF4mDs00Hk76Tbl4ZLg+YxToK3f9
MuFmnYzWkinEha5d
-----END CERTIFICATE-----