Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer
File:                     alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer (raw, json)
Hash identifier:          UdSnsgT0RIdKqiIac0DAHteKpzqdvTJEw34Buo4exb4=
Subject key identifier:   6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1B44E85E9019B4C82DB45A9948A72F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/alaUz0M1bOQXInM-gN_DiIf0ZVQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:33:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 197945
                          IP: 193.150.88.0/23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1b:44:e8:5e:90:19:b4:c8:2d:b4:5a:99:48:a7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:33:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a5694cf43356ce41722733e80dfc38887f46554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:28:23:a0:a9:53:43:ce:23:35:12:e6:f4:
                    1b:c8:98:ae:ed:64:09:6c:88:22:42:bd:e9:93:09:
                    93:ee:d0:f4:40:f0:ee:5d:fa:5b:5b:e0:44:1d:89:
                    fa:35:73:bd:ed:ba:d9:fb:eb:99:95:21:d4:b4:89:
                    89:ce:20:20:d3:3e:19:f1:ed:83:1f:3c:48:9a:34:
                    72:22:71:17:8e:bc:f8:18:5d:77:77:2c:92:c3:b4:
                    a9:c1:c2:73:67:96:50:ed:c5:af:e6:b2:e8:09:e2:
                    b8:88:3b:3d:7d:2b:d4:fc:b2:7b:2d:d6:73:7c:77:
                    78:0c:8c:4f:be:34:97:c4:a9:39:d2:e5:bf:bc:98:
                    71:10:27:92:0a:fe:f8:83:9d:4b:ac:f0:56:cf:3d:
                    b5:06:31:3c:8e:81:48:43:48:3e:12:1f:b3:1c:69:
                    aa:62:24:5c:c6:6e:ed:c1:b1:17:39:1e:45:60:d6:
                    e0:33:fb:6b:1c:97:db:00:a0:54:30:97:7b:7e:8b:
                    ee:94:59:54:ff:f2:e7:01:36:13:d9:e3:ea:85:2c:
                    5f:3c:e2:19:45:0c:05:8c:16:d0:1c:f0:c4:8b:89:
                    c5:e3:52:b2:8f:a9:62:f3:6b:b7:e8:79:82:88:10:
                    73:7b:fb:f4:ed:38:ab:f2:eb:78:ef:5d:56:22:01:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/alaUz0M1bOQXInM-gN_DiIf0ZVQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.88.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197945

    Signature Algorithm: sha256WithRSAEncryption
         71:75:8c:28:26:d5:49:45:cb:fb:50:7f:7f:ec:f8:16:19:01:
         82:a6:72:f7:a9:57:49:ca:34:7f:a4:34:02:b7:ef:59:07:1c:
         b0:54:13:66:ad:bf:e0:f8:5b:5d:9f:a7:65:ae:a8:db:1f:24:
         c7:b9:91:a5:d9:ad:45:28:ff:65:72:38:ab:93:4d:a3:2a:3a:
         fe:eb:4a:06:e2:46:91:59:33:09:4e:65:2d:33:4d:4d:23:08:
         ac:2d:09:11:4a:7b:32:fe:44:4f:02:18:62:b9:6e:81:52:ec:
         1e:19:85:d9:89:ff:b7:c0:b5:af:80:2c:60:19:ac:23:e1:86:
         46:46:12:61:e5:17:70:f6:1e:97:fa:58:79:0e:53:b8:f0:9d:
         67:5f:80:4c:cd:36:48:39:75:a9:80:29:0a:34:53:d6:04:08:
         09:41:b6:c4:9d:30:a6:b9:81:10:5a:27:75:f4:0e:c3:a4:59:
         82:b3:49:73:ea:48:d3:09:36:51:87:4b:3b:a9:2d:5d:18:7e:
         d8:f7:18:3e:5b:d6:f6:b5:3f:a3:6a:ae:91:ad:f3:ff:e6:aa:
         a9:a3:d0:08:78:d2:08:d0:df:27:35:a2:75:72:1b:ef:88:39:
         97:2b:17:47:c3:e1:14:f0:bf:6b:3f:5c:22:40:61:bf:3e:27:
         16:7e:73:4e
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYVtG0ToXpAZtMgttFqZSKcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMzAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTU2OTRjZjQzMzU2Y2U0MTcyMjczM2U4MGRmYzM4ODg3ZjQ2NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC0oI6CpU0POIzUS5vQbyJiu7WQJ
bIgiQr3pkwmT7tD0QPDuXfpbW+BEHYn6NXO97brZ++uZlSHUtImJziAg0z4Z8e2D
HzxImjRyInEXjrz4GF13dyySw7SpwcJzZ5ZQ7cWv5rLoCeK4iDs9fSvU/LJ7LdZz
fHd4DIxPvjSXxKk50uW/vJhxECeSCv74g51LrPBWzz21BjE8joFIQ0g+Eh+zHGmq
YiRcxm7twbEXOR5FYNbgM/trHJfbAKBUMJd7fovulFlU//LnATYT2ePqhSxfPOIZ
RQwFjBbQHPDEi4nF41Kyj6li82u36HmCiBBze/v07Tir8ut4711WIgHGlwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFGpWlM9DNWzkFyJzPoDfw4iH9GVUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzgyOWEx
MS01YmRlLTQ1MjgtOWFkYy05MzNkNThhZDNmNmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvODI5YTEx
LTViZGUtNDUyOC05YWRjLTkzM2Q1OGFkM2Y2YS8xL2FsYVV6ME0xYk9RWEluTS1n
Tl9EaUlmMFpWUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwZZYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMFOTANBgkqhkiG9w0BAQsFAAOCAQEAcXWMKCbVSUXL+1B/f+z4FhkBgqZy96lX
Sco0f6Q0ArfvWQccsFQTZq2/4PhbXZ+nZa6o2x8kx7mRpdmtRSj/ZXI4q5NNoyo6
/utKBuJGkVkzCU5lLTNNTSMIrC0JEUp7Mv5ETwIYYrlugVLsHhmF2Yn/t8C1r4As
YBmsI+GGRkYSYeUXcPYel/pYeQ5TuPCdZ1+ATM02SDl1qYApCjRT1gQICUG2xJ0w
prmBEFondfQOw6RZgrNJc+pI0wk2UYdLO6ktXRh+2PcYPlvW9rU/o2quka3z/+aq
qaPQCHjSCNDfJzWidXIb74g5lysXR8PhFPC/az9cIkBhvz4nFn5zTg==
-----END CERTIFICATE-----