Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_eqyTJ5af5Ha904lujNlV9aWTNY.cer
File:                     _eqyTJ5af5Ha904lujNlV9aWTNY.cer (raw, json)
Hash identifier:          /ZWWt7AEeAunO6xj00VPB/Gk9CQ96hnGwFiEezp/iv4=
Subject key identifier:   FD:EA:B2:4C:9E:5A:7F:91:DA:F7:4E:25:BA:33:65:57:D6:96:4C:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FAE6FCBEA61C52399716E3AEAFC063
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3b/ba0495-22d3-4770-ab79-903ad2e46245/1/_eqyTJ5af5Ha904lujNlV9aWTNY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3b/ba0495-22d3-4770-ab79-903ad2e46245/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 204907
                          IP: 2001:678:5a4::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:e6:fc:be:a6:1c:52:39:97:16:e3:ae:af:c0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fdeab24c9e5a7f91daf74e25ba336557d6964cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:41:4d:49:cc:29:ce:3b:b6:5f:09:d5:83:
                    b0:d8:b2:77:61:6e:63:2a:ba:21:b3:5a:46:84:06:
                    9f:90:69:c9:22:6e:52:45:6d:a2:47:71:47:99:31:
                    52:65:71:64:db:61:5a:5c:3e:6c:80:50:40:1c:19:
                    0c:85:24:ef:3a:ae:cb:2a:20:4b:0c:3e:23:ce:1d:
                    d7:e5:fd:9c:44:7a:34:16:c8:99:e3:78:91:90:16:
                    c9:19:6a:2d:93:44:05:85:03:e2:8f:a2:40:08:ca:
                    7a:31:51:52:be:98:6d:3d:ce:50:c6:dc:cf:56:76:
                    a2:f1:30:2d:4c:46:dd:4b:78:7f:3a:3e:34:71:61:
                    11:f4:f7:4a:00:99:1a:df:d7:26:43:a0:f5:9d:25:
                    f3:af:0a:ea:17:ec:3a:9f:9c:7a:f6:b0:08:58:49:
                    03:d5:1b:89:86:1b:33:3b:8e:98:c3:97:43:a3:fe:
                    a6:ed:db:fb:83:1f:4a:5e:ba:a2:1c:17:5a:0b:9e:
                    a9:2e:83:b4:3b:be:3b:cb:91:e3:44:8d:c8:f7:21:
                    8b:cf:92:b0:e1:e0:33:3b:b4:94:2d:c6:12:5d:cd:
                    32:57:23:64:82:ae:09:e7:26:79:00:03:da:fc:4e:
                    a7:7c:9a:aa:ce:d8:67:73:25:24:c9:e7:14:a9:e9:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EA:B2:4C:9E:5A:7F:91:DA:F7:4E:25:BA:33:65:57:D6:96:4C:D6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/ba0495-22d3-4770-ab79-903ad2e46245/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/ba0495-22d3-4770-ab79-903ad2e46245/1/_eqyTJ5af5Ha904lujNlV9aWTNY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:5a4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204907

    Signature Algorithm: sha256WithRSAEncryption
         77:42:51:72:41:42:c6:26:30:87:9c:fb:3d:c8:bd:15:19:58:
         9a:f7:86:e9:8b:dd:44:b6:0d:52:c2:48:8b:eb:39:2b:9c:e3:
         c1:88:87:24:b6:cd:f2:65:7a:bc:7b:d9:bb:74:ba:2f:5c:0a:
         6a:94:dd:51:19:2a:f0:0b:7d:71:c1:4c:34:17:bf:10:e2:0d:
         99:97:fb:d2:27:47:79:00:9f:d4:5a:d3:42:2c:5e:e8:9f:d6:
         36:cb:93:39:1d:45:36:eb:79:05:d8:ae:28:fc:87:d6:95:ff:
         ff:cc:b3:1f:24:72:b8:7a:93:a8:d6:14:ba:91:ea:e4:2f:65:
         fc:b5:f6:8b:8d:e5:1f:93:87:a4:82:33:9e:fd:a7:a4:2d:6c:
         1a:b9:45:d2:64:20:8b:7e:1d:99:61:cb:77:ec:f8:02:57:dc:
         ec:ba:bc:a6:09:eb:ab:dc:62:17:44:ba:e7:4a:49:0b:af:51:
         57:9f:aa:ed:0d:1d:3b:d3:98:aa:e8:38:8f:61:de:7e:27:3a:
         67:7d:ea:20:73:96:df:68:fd:52:7c:6d:6c:68:64:24:9a:f8:
         bc:cf:bf:d0:db:d8:43:bd:f9:8d:d7:2a:21:09:10:6f:98:bf:
         e7:87:2f:4d:ef:cb:38:07:76:9b:ff:e4:55:34:f4:7f:5e:46:
         92:c1:e1:23
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYVw+ub8vqYcUjmXFuOur8BjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGVhYjI0YzllNWE3ZjkxZGFmNzRlMjViYTMzNjU1N2Q2OTY0Y2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z1BTUnMKc47tl8J1YOw2LJ3YW5j
Krohs1pGhAafkGnJIm5SRW2iR3FHmTFSZXFk22FaXD5sgFBAHBkMhSTvOq7LKiBL
DD4jzh3X5f2cRHo0FsiZ43iRkBbJGWotk0QFhQPij6JACMp6MVFSvphtPc5QxtzP
Vnai8TAtTEbdS3h/Oj40cWER9PdKAJka39cmQ6D1nSXzrwrqF+w6n5x69rAIWEkD
1RuJhhszO46Yw5dDo/6m7dv7gx9KXrqiHBdaC56pLoO0O747y5HjRI3I9yGLz5Kw
4eAzO7SULcYSXc0yVyNkgq4J5yZ5AAPa/E6nfJqqzthncyUkyecUqelyrQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFP3qskyeWn+R2vdOJbozZVfWlkzWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiL2JhMDQ5
NS0yMmQzLTQ3NzAtYWI3OS05MDNhZDJlNDYyNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYmEwNDk1
LTIyZDMtNDc3MC1hYjc5LTkwM2FkMmU0NjI0NS8xL19lcXlUSjVhZjVIYTkwNGx1
ak5sVjlhV1ROWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAWkMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMgazANBgkqhkiG9w0BAQsFAAOCAQEAd0JRckFCxiYwh5z7Pci9FRlYmveG
6YvdRLYNUsJIi+s5K5zjwYiHJLbN8mV6vHvZu3S6L1wKapTdURkq8At9ccFMNBe/
EOINmZf70idHeQCf1FrTQixe6J/WNsuTOR1FNut5BdiuKPyH1pX//8yzHyRyuHqT
qNYUupHq5C9l/LX2i43lH5OHpIIznv2npC1sGrlF0mQgi34dmWHLd+z4Alfc7Lq8
pgnrq9xiF0S650pJC69RV5+q7Q0dO9OYqug4j2Hefic6Z33qIHOW32j9UnxtbGhk
JJr4vM+/0NvYQ735jdcqIQkQb5i/54cvTe/LOAd2m//kVTT0f15GksHhIw==
-----END CERTIFICATE-----