Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bHIo27F_ZOYt4dxGmIFaNbtHIC0.cer
File:                     bHIo27F_ZOYt4dxGmIFaNbtHIC0.cer (raw, json)
Hash identifier:          F+Uz8sv3gCA6qof60BTyq94I/nkMmzvyCLmZXX1+csM=
Subject key identifier:   6C:72:28:DB:B1:7F:64:E6:2D:E1:DC:46:98:81:5A:35:BB:47:20:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018712B3667CEA69B4DCC029481497C913A0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/bHIo27F_ZOYt4dxGmIFaNbtHIC0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 24 Mar 2023 08:19:19 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 204335
                          IP: 2a0c:34c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:12:b3:66:7c:ea:69:b4:dc:c0:29:48:14:97:c9:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 24 08:19:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c7228dbb17f64e62de1dc4698815a35bb47202d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b9:be:5e:93:95:3c:a4:d8:fe:72:ce:87:69:
                    85:f0:76:e2:06:a3:9f:62:15:a9:ac:d6:55:ba:c4:
                    8b:49:75:06:78:f3:64:b9:c0:b6:94:1a:2d:0d:a9:
                    0e:44:f3:54:9f:43:f2:cd:8c:fa:11:52:f6:83:5f:
                    d0:27:14:95:d9:9d:32:ca:07:c9:32:e5:b2:84:80:
                    de:fc:67:6c:71:a7:bc:46:ba:91:57:9c:ab:31:81:
                    5b:94:6e:d5:b9:f2:52:d6:9a:fa:07:9e:05:9f:30:
                    14:c5:08:97:e4:c5:3d:6a:d7:33:2d:ca:d8:9e:f5:
                    ae:89:9e:2c:3c:e7:38:97:49:eb:f8:be:c5:ad:2b:
                    e7:b5:7e:7c:3b:88:c2:58:62:ff:d6:62:38:66:12:
                    66:52:7e:69:5b:0f:66:05:59:81:ab:dd:2d:1d:fa:
                    97:cd:f4:06:d0:ed:6d:90:4b:da:a9:27:1a:0a:0d:
                    c9:6e:15:69:57:9a:ad:54:9a:b1:b1:9f:a6:34:db:
                    00:b5:d6:02:08:1e:d3:75:e2:92:15:ee:2f:8a:0e:
                    67:9a:4c:4e:f9:00:ed:8b:12:33:ad:ab:ff:24:c4:
                    b8:3d:c4:ce:38:32:98:c3:8f:78:7b:c1:bf:3d:83:
                    25:7f:6e:4b:78:7d:6d:c6:64:80:5a:f8:76:f1:32:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:72:28:DB:B1:7F:64:E6:2D:E1:DC:46:98:81:5A:35:BB:47:20:2D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/bHIo27F_ZOYt4dxGmIFaNbtHIC0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:34c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204335

    Signature Algorithm: sha256WithRSAEncryption
         aa:19:c8:a3:ed:8b:45:b8:f9:fc:d4:ca:ce:33:ab:89:7b:c3:
         e8:90:4c:96:c2:f7:c1:99:48:d4:3c:ae:9d:fa:51:14:3a:c4:
         8e:a6:fc:be:cf:03:4f:bc:9f:2d:c3:c9:cd:bc:49:6b:70:c5:
         d4:f6:ec:5c:d5:38:a6:41:3d:c8:fe:6a:fc:e7:e3:6d:bd:71:
         e6:ec:3a:f8:fc:f9:10:eb:97:f7:b3:83:ac:93:56:9e:0c:f2:
         25:cf:f9:ed:8f:c5:9b:3a:ac:d1:b8:8a:75:10:38:aa:90:57:
         62:ed:7c:e9:74:7e:42:14:e0:7f:46:e4:dd:97:ff:99:05:af:
         08:31:26:a9:b0:f9:72:0b:05:ef:7c:ae:ae:f2:9a:6b:b5:14:
         76:54:3c:4b:9b:bb:72:49:63:48:1b:98:b2:49:6a:ae:3f:4e:
         5f:3b:7e:eb:de:ac:b2:77:fc:7b:6d:18:9d:6d:33:1b:88:58:
         e6:75:50:78:50:0d:a1:51:1e:18:7c:10:df:6b:44:1e:48:33:
         3b:28:88:53:7d:fc:64:18:ea:8b:54:31:1f:03:c8:34:8e:4f:
         58:5e:95:58:0f:e1:ea:5a:45:ac:53:95:2f:62:cb:18:14:db:
         b4:f7:ed:88:f7:e5:7d:a6:17:69:08:ae:02:bf:af:ee:a8:c8:
         f7:b3:91:b5
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAYcSs2Z86mm03MApSBSXyROgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzI0MDgxOTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzcyMjhkYmIxN2Y2NGU2MmRlMWRjNDY5ODgxNWEzNWJiNDcyMDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rm+XpOVPKTY/nLOh2mF8HbiBqOf
YhWprNZVusSLSXUGePNkucC2lBotDakORPNUn0PyzYz6EVL2g1/QJxSV2Z0yygfJ
MuWyhIDe/Gdscae8RrqRV5yrMYFblG7VufJS1pr6B54FnzAUxQiX5MU9atczLcrY
nvWuiZ4sPOc4l0nr+L7FrSvntX58O4jCWGL/1mI4ZhJmUn5pWw9mBVmBq90tHfqX
zfQG0O1tkEvaqScaCg3JbhVpV5qtVJqxsZ+mNNsAtdYCCB7TdeKSFe4vig5nmkxO
+QDtixIzrav/JMS4PcTOODKYw494e8G/PYMlf25LeH1txmSAWvh28TKu2wIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFGxyKNuxf2TmLeHcRpiBWjW7RyAtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzI5ZTk2
MC1lZmY1LTQ0ZjItYmM0MC1hZGU2MDcyOGVjMzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvMjllOTYw
LWVmZjUtNDRmMi1iYzQwLWFkZTYwNzI4ZWMzNy8xL2JISW8yN0ZfWk9ZdDRkeEdt
SUZhTmJ0SElDMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgw0wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDHi8wDQYJKoZIhvcNAQELBQADggEBAKoZyKPti0W4+fzUys4zq4l7w+iQTJbC
98GZSNQ8rp36URQ6xI6m/L7PA0+8ny3Dyc28SWtwxdT27FzVOKZBPcj+avzn4229
cebsOvj8+RDrl/ezg6yTVp4M8iXP+e2PxZs6rNG4inUQOKqQV2LtfOl0fkIU4H9G
5N2X/5kFrwgxJqmw+XILBe98rq7ymmu1FHZUPEubu3JJY0gbmLJJaq4/Tl87fuve
rLJ3/HttGJ1tMxuIWOZ1UHhQDaFRHhh8EN9rRB5IMzsoiFN9/GQY6otUMR8DyDSO
T1helVgP4epaRaxTlS9iyxgU27T37Yj35X2mF2kIrgK/r+6oyPezkbU=
-----END CERTIFICATE-----