Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_JAkEv97aX-MoMPqqcE3bYoV9KE.cer
File:                     _JAkEv97aX-MoMPqqcE3bYoV9KE.cer (raw, json)
Hash identifier:          91aM05+hsU4k50cxYToWmUKzH6bUObUac9qy3YYYq2s=
Subject key identifier:   FC:90:24:12:FF:7B:69:7F:8C:A0:C3:EA:A9:C1:37:6D:8A:15:F4:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D89994016E1FDA0B87EEBC965E93D46
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/a059e3-6b86-4150-81c4-656c45a1c119/1/_JAkEv97aX-MoMPqqcE3bYoV9KE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/a059e3-6b86-4150-81c4-656c45a1c119/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:32 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 41343

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:99:40:16:e1:fd:a0:b8:7e:eb:c9:65:e9:3d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc902412ff7b697f8ca0c3eaa9c1376d8a15f4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cd:35:f3:79:78:34:fa:08:1d:6c:df:82:26:
                    f9:bb:81:40:19:4d:b6:5f:0c:40:86:80:85:92:d7:
                    e9:2a:0b:84:a7:26:56:13:45:49:72:9d:08:09:0f:
                    43:c0:6a:e7:32:55:c6:ef:fa:bc:65:49:5d:b9:3d:
                    18:d0:ab:7d:40:0a:3c:91:ec:fc:61:05:18:41:03:
                    af:c4:ea:ec:24:7a:de:ff:75:ae:1c:72:b3:50:26:
                    20:2b:84:f7:81:87:af:ab:d1:4c:78:bc:93:0e:1f:
                    0d:1d:9f:74:66:71:c5:f5:d0:4c:65:64:b1:3e:bf:
                    60:48:91:b5:30:16:11:1c:61:6b:87:c1:27:81:26:
                    e6:23:68:34:23:cd:04:9a:97:2d:0c:34:66:45:81:
                    0a:fa:1b:03:19:80:75:6a:5e:14:93:85:e8:5d:93:
                    c6:1c:f4:95:29:0a:7a:a2:34:02:d8:6c:b9:1b:96:
                    91:a8:85:97:57:94:a4:da:e1:f7:19:21:2f:eb:7f:
                    6d:3b:04:40:1e:70:7e:7d:d4:d2:d3:a3:4f:92:02:
                    26:57:aa:57:50:ed:84:e6:7c:b7:b9:1f:94:a8:89:
                    65:03:bc:95:c6:7e:e5:3a:19:35:41:9b:43:68:69:
                    ac:e2:1c:4c:60:8e:cb:5c:e7:35:c6:16:87:76:fd:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:90:24:12:FF:7B:69:7F:8C:A0:C3:EA:A9:C1:37:6D:8A:15:F4:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a059e3-6b86-4150-81c4-656c45a1c119/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a059e3-6b86-4150-81c4-656c45a1c119/1/_JAkEv97aX-MoMPqqcE3bYoV9KE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41343

    Signature Algorithm: sha256WithRSAEncryption
         77:09:e8:54:a9:6a:85:21:9c:30:60:cf:57:4b:e1:03:46:b6:
         83:26:d6:03:04:7d:11:f9:e1:8c:1a:1f:21:b2:8c:d8:16:06:
         cc:65:63:2d:e9:c9:d8:20:03:e1:53:e3:15:1f:25:1e:2d:9e:
         ed:b6:cf:46:c1:a9:2c:00:a9:72:47:66:0e:e0:40:be:12:35:
         a9:c4:95:95:af:4d:2b:ec:58:fb:28:ac:a9:64:d2:b1:b4:e5:
         63:37:71:b2:5e:cf:02:a8:bb:cc:bb:93:bb:58:78:52:5e:bc:
         66:4f:95:af:68:e6:1b:bf:3e:96:21:6c:b9:d9:b5:97:4c:82:
         30:47:9a:ee:89:aa:1c:b2:ea:23:c9:98:31:bb:43:c3:a0:e4:
         0b:8f:27:96:57:68:ee:3c:f0:3b:1b:6f:cf:bf:3a:fa:75:83:
         2f:5e:e6:d4:77:ac:9b:8f:c4:8f:52:ec:6e:ec:30:1f:cd:fc:
         fa:94:0d:31:77:ef:84:91:1a:78:0d:30:a8:00:66:ea:c0:2b:
         55:d4:e0:11:79:7c:e4:66:a7:dd:2f:19:9f:06:c4:a0:35:10:
         f4:43:ac:18:45:09:73:a1:ee:75:4d:56:e8:1b:c0:a5:40:7b:
         52:46:15:4e:fa:ff:4f:5e:4b:cb:65:e7:13:d8:35:d9:12:96:
         99:07:9f:d5
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVtiZlAFuH9oLh+68ll6T1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTMzMzMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzkwMjQxMmZmN2I2OTdmOGNhMGMzZWFhOWMxMzc2ZDhhMTVmNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA680183l4NPoIHWzfgib5u4FAGU22
XwxAhoCFktfpKguEpyZWE0VJcp0ICQ9DwGrnMlXG7/q8ZUlduT0Y0Kt9QAo8kez8
YQUYQQOvxOrsJHre/3WuHHKzUCYgK4T3gYevq9FMeLyTDh8NHZ90ZnHF9dBMZWSx
Pr9gSJG1MBYRHGFrh8EngSbmI2g0I80EmpctDDRmRYEK+hsDGYB1al4Uk4XoXZPG
HPSVKQp6ojQC2Gy5G5aRqIWXV5Sk2uH3GSEv639tOwRAHnB+fdTS06NPkgImV6pX
UO2E5ny3uR+UqIllA7yVxn7lOhk1QZtDaGms4hxMYI7LXOc1xhaHdv0nkwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPyQJBL/e2l/jKDD6qnBN22KFfShMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2EwNTll
My02Yjg2LTQxNTAtODFjNC02NTZjNDVhMWMxMTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvYTA1OWUz
LTZiODYtNDE1MC04MWM0LTY1NmM0NWExYzExOS8xL19KQWtFdjk3YVgtTW9NUHFx
Y0UzYllvVjlLRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwChfzANBgkqhkiG9w0BAQsFAAOCAQEAdwnoVKlqhSGc
MGDPV0vhA0a2gybWAwR9EfnhjBofIbKM2BYGzGVjLenJ2CAD4VPjFR8lHi2e7bbP
RsGpLACpckdmDuBAvhI1qcSVla9NK+xY+yisqWTSsbTlYzdxsl7PAqi7zLuTu1h4
Ul68Zk+Vr2jmG78+liFsudm1l0yCMEea7omqHLLqI8mYMbtDw6DkC48nlldo7jzw
Oxtvz786+nWDL17m1Hesm4/Ej1LsbuwwH838+pQNMXfvhJEaeA0wqABm6sArVdTg
EXl85Gan3S8ZnwbEoDUQ9EOsGEUJc6HudU1W6BvApUB7UkYVTvr/T15Ly2XnE9g1
2RKWmQef1Q==
-----END CERTIFICATE-----