Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vlTl2BkgyXrq9JXMblCQPVJLiJ4.cer
File:                     vlTl2BkgyXrq9JXMblCQPVJLiJ4.cer (raw, json)
Hash identifier:          NlJOXL2XEyEuj346v+HN/sRTuobwwZTzfc/vpu4FZAk=
Subject key identifier:   BE:54:E5:D8:19:20:C9:7A:EA:F4:95:CC:6E:50:90:3D:52:4B:88:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A932545F9C68B4831E808D18F1E3205CE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/4e40b1-6198-47cf-ad1a-83c125dd070e/1/vlTl2BkgyXrq9JXMblCQPVJLiJ4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/4e40b1-6198-47cf-ad1a-83c125dd070e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 14 Sep 2023 10:03:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 216304

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:93:25:45:f9:c6:8b:48:31:e8:08:d1:8f:1e:32:05:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 14 10:03:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be54e5d81920c97aeaf495cc6e50903d524b889e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:65:56:f8:72:4d:db:56:9f:06:13:c6:ab:
                    52:b9:f7:31:14:c6:6c:b9:bb:20:08:bd:a5:9a:d2:
                    09:20:12:76:50:90:0a:fb:ac:e8:d4:df:d1:87:62:
                    40:ad:a7:ab:3b:49:65:09:83:24:af:07:2d:e1:17:
                    c7:e8:8b:75:20:c0:93:14:7f:83:78:dd:4c:e0:d0:
                    75:3c:8c:5a:69:2e:07:0a:31:36:ea:fb:81:e3:34:
                    b6:b3:1c:ee:05:c6:e8:b5:f2:02:a9:91:7d:8a:fc:
                    6e:02:d7:68:09:ed:2e:49:c9:7d:e9:51:ed:15:d8:
                    c5:9e:b6:88:af:1a:21:62:84:6e:02:3d:bb:37:5e:
                    77:01:83:3b:e0:d4:6d:7e:1d:3e:cf:b7:4e:f7:79:
                    46:73:82:f4:e5:b1:bd:7d:ed:54:20:02:ba:90:0f:
                    52:4b:b0:26:fc:14:85:7f:d3:8e:c8:bd:ff:24:d7:
                    24:c9:57:bb:c3:91:f6:1c:16:12:3d:32:d7:11:3c:
                    28:e0:a6:29:64:42:ff:d5:c8:54:4b:48:ce:d2:bb:
                    25:05:44:17:a8:ee:f6:13:17:ef:0b:df:fc:82:fa:
                    be:df:68:75:70:ee:b8:bc:41:83:00:e3:12:60:ae:
                    4f:dd:4d:2f:06:6a:06:6d:97:79:50:f0:88:f6:d6:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:54:E5:D8:19:20:C9:7A:EA:F4:95:CC:6E:50:90:3D:52:4B:88:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4e40b1-6198-47cf-ad1a-83c125dd070e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4e40b1-6198-47cf-ad1a-83c125dd070e/1/vlTl2BkgyXrq9JXMblCQPVJLiJ4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216304

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:e0:34:ec:b4:8d:fa:44:7f:4b:20:da:8a:9f:ad:02:57:
         97:e3:ef:0d:d1:df:b0:64:87:06:42:77:40:26:73:67:76:55:
         18:fa:a1:87:74:83:f1:40:67:b2:d8:48:14:19:49:ae:d7:90:
         2d:72:db:3f:b5:fd:f9:f7:0e:7a:2d:97:f3:92:5e:c1:7a:da:
         7d:63:3a:4e:6e:99:f8:9c:da:6d:98:ae:29:13:1f:a3:3c:31:
         75:c5:e3:4d:f6:69:54:07:2a:35:25:aa:0b:10:a1:f6:46:6b:
         50:2a:09:88:b5:0a:fc:48:18:25:ff:78:28:e4:52:d5:b3:df:
         cc:92:0e:f7:e9:9c:f8:b4:a2:f2:5b:12:b4:5a:92:57:ca:27:
         24:01:43:82:e2:5c:0a:53:c7:7c:99:d4:fd:2e:2b:5e:c8:94:
         3d:2c:45:01:bd:13:db:dd:b6:64:b5:fe:89:1d:55:83:86:ec:
         53:37:37:4e:fe:ee:9c:e7:53:cc:bb:3a:24:6f:5d:42:32:fb:
         5e:2d:c9:84:66:44:bf:6c:16:61:e1:0e:6e:db:3a:32:e4:cd:
         4d:d7:e7:ce:93:84:a5:53:69:ac:49:9b:72:a9:8d:b4:4c:ed:
         7d:15:4e:e7:c2:d0:5a:bc:bd:5c:76:83:4c:ef:99:f3:aa:bf:
         3d:b7:7a:5f
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYqTJUX5xotIMegI0Y8eMgXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwOTE0MTAwMzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTU0ZTVkODE5MjBjOTdhZWFmNDk1Y2M2ZTUwOTAzZDUyNGI4ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFplVvhyTdtWnwYTxqtSufcxFMZs
ubsgCL2lmtIJIBJ2UJAK+6zo1N/Rh2JAraerO0llCYMkrwct4RfH6It1IMCTFH+D
eN1M4NB1PIxaaS4HCjE26vuB4zS2sxzuBcbotfICqZF9ivxuAtdoCe0uScl96VHt
FdjFnraIrxohYoRuAj27N153AYM74NRtfh0+z7dO93lGc4L05bG9fe1UIAK6kA9S
S7Am/BSFf9OOyL3/JNckyVe7w5H2HBYSPTLXETwo4KYpZEL/1chUS0jO0rslBUQX
qO72ExfvC9/8gvq+32h1cO64vEGDAOMSYK5P3U0vBmoGbZd5UPCI9tY02wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFL5U5dgZIMl66vSVzG5QkD1SS4ieMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzRlNDBi
MS02MTk4LTQ3Y2YtYWQxYS04M2MxMjVkZDA3MGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvNGU0MGIx
LTYxOTgtNDdjZi1hZDFhLTgzYzEyNWRkMDcwZS8xL3ZsVGwyQmtneVhycTlKWE1i
bENRUFZKTGlKNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNM8DANBgkqhkiG9w0BAQsFAAOCAQEAbE3gNOy0jfpE
f0sg2oqfrQJXl+PvDdHfsGSHBkJ3QCZzZ3ZVGPqhh3SD8UBnsthIFBlJrteQLXLb
P7X9+fcOei2X85JewXrafWM6Tm6Z+JzabZiuKRMfozwxdcXjTfZpVAcqNSWqCxCh
9kZrUCoJiLUK/EgYJf94KORS1bPfzJIO9+mc+LSi8lsStFqSV8onJAFDguJcClPH
fJnU/S4rXsiUPSxFAb0T2922ZLX+iR1Vg4bsUzc3Tv7unOdTzLs6JG9dQjL7Xi3J
hGZEv2wWYeEObts6MuTNTdfnzpOEpVNprEmbcqmNtEztfRVO58LQWry9XHaDTO+Z
86q/Pbd6Xw==
-----END CERTIFICATE-----