Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sBIvwKHScAuOQo0CQPQBXBMrQIE.cer
File:                     sBIvwKHScAuOQo0CQPQBXBMrQIE.cer (raw, json)
Hash identifier:          wIZ+ksLzXYSzp7XCjCmyEsNGOQgDimzwMeWzs+uYJIk=
Subject key identifier:   B0:12:2F:C0:A1:D2:70:0B:8E:42:8D:02:40:F4:01:5C:13:2B:40:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D894F06F33C26DB6B91F5FD763C2313
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/18dd65-9459-457c-bdb3-1c0c5d09475a/1/sBIvwKHScAuOQo0CQPQBXBMrQIE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/18dd65-9459-457c-bdb3-1c0c5d09475a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.163.87.0/24
                          IP: 2a0b:a040::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:4f:06:f3:3c:26:db:6b:91:f5:fd:76:3c:23:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b0122fc0a1d2700b8e428d0240f4015c132b4081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:51:29:25:f1:ac:3d:34:be:bd:e3:3c:5e:
                    0b:43:97:52:f9:c9:ff:16:1a:6e:c2:34:89:6f:40:
                    dc:c8:3d:c3:b0:51:cf:17:8b:95:9d:3d:59:dd:b3:
                    61:2c:22:04:6d:8b:f8:ef:91:b2:11:7b:3e:04:51:
                    60:cd:8a:e5:f9:d3:5e:d2:e3:c0:49:15:43:d1:93:
                    31:9f:00:bd:8d:cf:84:f2:5a:e3:cb:6e:d3:2c:9b:
                    92:66:8b:6f:47:38:cd:7c:e6:77:ce:10:91:11:9d:
                    ca:c5:aa:8c:1f:f6:77:50:af:bf:f8:3e:92:9e:0b:
                    b4:18:4e:38:94:99:e2:56:e2:a3:7c:b5:dc:ff:56:
                    0d:dc:52:30:9d:01:88:52:7c:96:5e:5b:0b:0b:c8:
                    7f:81:24:38:5e:61:16:e5:f9:c3:7c:6a:7d:42:dd:
                    6f:ad:13:47:f1:32:fe:81:44:d4:b5:cc:97:b5:b3:
                    08:6e:43:44:87:ff:a5:ad:6c:b8:0e:3e:02:46:a3:
                    b6:21:26:cd:f4:04:c6:19:03:af:31:14:00:35:68:
                    fe:6d:26:4c:dc:57:63:3a:ec:61:82:84:16:3a:4a:
                    b7:a1:e5:cb:6a:ba:b6:87:a7:39:11:f5:da:8d:5b:
                    d1:88:6a:98:bc:47:a4:f2:d9:d7:5c:e7:9b:18:e7:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:12:2F:C0:A1:D2:70:0B:8E:42:8D:02:40:F4:01:5C:13:2B:40:81
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18dd65-9459-457c-bdb3-1c0c5d09475a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18dd65-9459-457c-bdb3-1c0c5d09475a/1/sBIvwKHScAuOQo0CQPQBXBMrQIE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.87.0/24
                IPv6:
                  2a0b:a040::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:ed:76:85:c3:ba:6a:83:2a:96:ba:45:21:53:cd:b3:5a:d3:
         bb:87:a5:d7:15:65:b0:25:0b:f0:0c:3c:cd:d4:c1:7d:90:5d:
         32:04:24:3b:88:7c:ac:c0:ea:1f:29:7d:20:8c:ce:2a:0c:dd:
         ab:80:32:c2:02:13:6b:cb:d2:5b:89:49:7a:a6:98:1a:00:a7:
         14:f0:64:6e:1d:84:c0:2a:1c:60:69:1c:b5:bd:dc:28:b9:fc:
         9f:01:cf:76:f8:9a:83:29:3c:3a:9f:fc:55:be:ae:42:f6:0c:
         dd:6b:6d:aa:75:57:97:86:2a:8c:60:e4:00:61:c4:30:b5:11:
         7d:ad:1c:1b:02:4b:c7:c2:3a:31:26:81:4e:1b:d2:46:e9:11:
         4e:8e:d0:4d:30:03:9e:cc:c1:40:0b:29:64:f0:ee:06:50:e2:
         ed:fc:aa:7b:89:0a:4d:d9:4c:57:8f:c4:91:d5:ca:05:99:d8:
         40:90:dc:9e:0a:08:0b:c8:7c:77:43:64:a5:74:2a:8c:d4:08:
         82:44:d3:0d:5d:68:27:7b:d0:d2:3f:aa:c1:bf:dd:e5:9b:88:
         ae:25:8f:bb:5b:07:74:de:f2:9d:1d:e8:09:8c:90:57:7b:8f:
         e1:8f:58:4d:ad:92:86:85:4b:73:5a:ea:b4:c3:31:38:41:e7:
         10:f3:e9:1d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVtiU8G8zwm22uR9f12PCMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTMzMzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDEyMmZjMGExZDI3MDBiOGU0MjhkMDI0MGY0MDE1YzEzMmI0MDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7hRKSXxrD00vr3jPF4LQ5dS+cn/
FhpuwjSJb0DcyD3DsFHPF4uVnT1Z3bNhLCIEbYv475GyEXs+BFFgzYrl+dNe0uPA
SRVD0ZMxnwC9jc+E8lrjy27TLJuSZotvRzjNfOZ3zhCREZ3KxaqMH/Z3UK+/+D6S
ngu0GE44lJniVuKjfLXc/1YN3FIwnQGIUnyWXlsLC8h/gSQ4XmEW5fnDfGp9Qt1v
rRNH8TL+gUTUtcyXtbMIbkNEh/+lrWy4Dj4CRqO2ISbN9ATGGQOvMRQANWj+bSZM
3FdjOuxhgoQWOkq3oeXLarq2h6c5EfXajVvRiGqYvEek8tnXXOebGOfY0wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLASL8Ch0nALjkKNAkD0AVwTK0CBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzE4ZGQ2
NS05NDU5LTQ1N2MtYmRiMy0xYzBjNWQwOTQ3NWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvMThkZDY1
LTk0NTktNDU3Yy1iZGIzLTFjMGM1ZDA5NDc1YS8xL3NCSXZ3S0hTY0F1T1FvMENR
UFFCWEJNclFJRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwaNXMA0EAgACMAcDBQMqC6BAMA0GCSqGSIb3
DQEBCwUAA4IBAQAT7XaFw7pqgyqWukUhU82zWtO7h6XXFWWwJQvwDDzN1MF9kF0y
BCQ7iHyswOofKX0gjM4qDN2rgDLCAhNry9JbiUl6ppgaAKcU8GRuHYTAKhxgaRy1
vdwoufyfAc92+JqDKTw6n/xVvq5C9gzda22qdVeXhiqMYOQAYcQwtRF9rRwbAkvH
wjoxJoFOG9JG6RFOjtBNMAOezMFACylk8O4GUOLt/Kp7iQpN2UxXj8SR1coFmdhA
kNyeCggLyHx3Q2SldCqM1AiCRNMNXWgne9DSP6rBv93lm4iuJY+7Wwd03vKdHegJ
jJBXe4/hj1hNrZKGhUtzWuq0wzE4QecQ8+kd
-----END CERTIFICATE-----