Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BfFmOVUdCyhpDBet_jRaHoTbomQ.cer
File:                     BfFmOVUdCyhpDBet_jRaHoTbomQ.cer (raw, json)
Hash identifier:          /PTSA71Fadxcdb1QDyWeAJBtJrllsOSqo21h/5bc+mI=
Subject key identifier:   05:F1:66:39:55:1D:0B:28:69:0C:17:AD:FE:34:5A:1E:84:DB:A2:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0189DD146811076E8427E3E9FE85DF1696B8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/05F16639551D0B28690C17ADFE345A1E84DBA264.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 10 Aug 2023 01:34:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 60301

Validation:               Failed, certificate revoked on Sun 03 Dec 2023 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:dd:14:68:11:07:6e:84:27:e3:e9:fe:85:df:16:96:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 10 01:34:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05f16639551d0b28690c17adfe345a1e84dba264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9b:4f:08:c1:21:15:0f:cc:b8:32:84:9d:b0:
                    80:53:db:3e:f8:82:8c:05:52:bd:ad:51:68:c2:32:
                    18:57:d5:ba:6c:30:82:38:53:5e:78:ed:25:69:dd:
                    dc:c8:2e:7b:b7:e2:5c:d5:3e:75:e3:c2:fe:bf:5a:
                    13:da:3b:cf:05:bb:6a:af:66:f6:af:9b:d1:d8:cd:
                    b8:af:9f:95:a8:8c:db:4b:cc:26:d6:84:a5:2d:b6:
                    f7:44:ef:74:7a:30:5b:0f:9e:b8:5e:e8:45:ec:02:
                    99:78:b7:1a:14:10:c1:f8:1e:3a:1f:28:ee:bf:5c:
                    60:9a:84:98:d2:c4:65:0e:95:25:81:b9:58:f7:e5:
                    6d:ae:96:fc:8b:6a:df:a2:c5:47:9f:a4:c2:62:5b:
                    be:2e:71:71:cb:5a:48:66:88:93:8c:fa:32:04:a0:
                    50:42:50:5a:e2:87:5f:2e:59:51:53:d2:9f:5a:93:
                    a0:31:9a:f7:ab:08:4e:b1:56:4c:51:33:f7:65:ec:
                    97:49:d0:94:63:9a:4d:c6:cf:2d:20:c1:17:dd:5e:
                    48:f8:cd:4c:93:a6:60:f9:62:e2:12:04:0f:bc:c5:
                    59:4a:2e:08:21:3e:89:b6:e6:1d:96:41:a1:96:5a:
                    ec:96:54:18:31:40:4e:5f:e2:38:04:9f:2f:19:0f:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F1:66:39:55:1D:0B:28:69:0C:17:AD:FE:34:5A:1E:84:DB:A2:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/05F16639551D0B28690C17ADFE345A1E84DBA264.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60301

    Signature Algorithm: sha256WithRSAEncryption
         0c:2a:3a:90:2c:be:b5:1a:20:5a:f6:5d:cb:2b:47:90:bf:f1:
         e5:29:d8:59:d0:a0:d1:9f:f0:5d:0d:e3:d4:5b:0c:a2:f7:45:
         c0:d7:16:af:48:35:f1:da:ed:77:eb:66:79:81:07:25:42:ec:
         68:bf:04:5a:6c:3c:6b:20:6e:84:f1:08:e7:ae:64:e1:fb:08:
         b2:5c:9f:65:d1:d1:91:f9:7d:7c:0e:4c:4e:27:de:20:da:32:
         84:9d:4b:c5:2c:b3:84:fb:14:22:d9:93:ce:2b:66:e2:2d:11:
         69:47:1c:7f:b2:08:c3:10:25:d8:c1:c6:b1:e8:f7:b6:b6:f6:
         94:71:0c:c0:9b:0f:d6:3a:45:e6:a6:49:bb:a6:ba:2e:56:46:
         a0:3f:af:b4:2f:f7:ab:77:5f:43:51:40:d5:c3:f6:23:5b:ee:
         3d:28:e5:3f:61:3f:31:ec:fb:48:b4:96:15:91:90:4c:0d:a2:
         d6:56:8d:89:24:f4:00:73:6c:28:59:c5:6f:c8:90:0a:02:6e:
         b9:13:03:83:a9:59:57:37:2c:e7:79:72:33:86:7a:82:ac:d0:
         64:17:c0:66:76:ec:4f:f9:4e:f1:b3:9c:e1:af:61:75:25:95:
         4b:22:a2:5e:0b:ba:66:56:de:a3:15:cb:eb:00:20:43:74:6f:
         b3:1f:f4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:22 2024 by rpki-client on console-ams.rpki-client.org