Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer
File:                     w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer (raw, json)
Hash identifier:          A3/49JjPADIgp2rYgUWvbHbTSGxTBMCJIY0o25yqZt0=
Subject key identifier:   C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D6D3DA4120096C7E851AE5669F3437
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/w0wT7PJqxwL3aMmREL9mLpkTl5Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 41792
                          IP: 185.145.244.0/24
                          IP: 2a10:1cc0::/29

Validation:               Failed, certificate revoked on Fri 07 Jul 2023 09:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:d3:da:41:20:09:6c:7e:85:1a:e5:66:9f:34:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c34c13ecf26ac702f768c99110bf662e99139794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:14:5e:ff:5d:b8:c1:50:0e:a7:24:45:32:
                    ad:23:90:37:31:4c:75:87:2d:8f:b4:04:d4:c2:d5:
                    1e:0c:a4:c7:98:a7:2c:1e:37:1f:20:16:95:11:7e:
                    34:a3:06:c8:f7:eb:d2:ec:b1:f0:3a:59:be:dc:db:
                    15:1c:44:72:0d:d2:68:b2:62:b8:48:ad:85:fe:22:
                    ee:b2:12:54:73:dd:2c:79:de:da:6e:c7:50:90:ed:
                    ee:00:16:68:8b:09:9e:d7:e6:9e:2f:25:7d:50:04:
                    44:20:ab:f5:48:d1:5a:96:e9:a5:bb:98:1f:72:bb:
                    b6:34:39:5f:fa:f8:36:19:cb:56:f5:e6:20:12:cf:
                    d0:ac:7a:ac:e2:e3:de:a4:dc:f1:70:67:99:07:37:
                    50:ad:40:cb:52:a4:8e:8c:8c:b6:76:af:f5:a5:b0:
                    67:a1:3f:a0:c6:3f:24:da:cc:11:6c:d3:7a:24:37:
                    d0:f2:d2:92:ec:0c:71:c8:18:e8:95:a1:9a:ca:66:
                    e0:78:50:aa:e9:b0:10:4e:09:6c:8f:18:21:7d:b2:
                    24:d9:23:8e:02:e4:f9:44:f9:b4:c1:9c:6d:f6:61:
                    5b:82:09:e6:36:f6:09:55:68:59:14:14:fc:e4:11:
                    4a:ea:82:8e:cd:46:f6:27:5a:f8:54:c3:b6:46:83:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/w0wT7PJqxwL3aMmREL9mLpkTl5Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.244.0/24
                IPv6:
                  2a10:1cc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41792

    Signature Algorithm: sha256WithRSAEncryption
         ae:d4:b9:96:e6:86:42:7c:8e:d7:f5:1f:68:72:41:e7:cf:d6:
         78:d7:e0:83:68:02:72:2a:a3:c8:ac:fa:fe:78:9f:68:2d:19:
         c9:f4:f5:91:ee:53:0a:97:05:87:cd:ed:aa:fd:8f:ce:01:ef:
         6a:ea:dc:b4:af:42:62:c6:85:ae:fd:c9:d6:42:b8:a5:ff:b3:
         d9:e5:2e:2a:3d:89:68:a1:6a:9a:83:ff:e1:d4:51:7b:24:ad:
         56:e2:9d:08:47:51:8d:0a:b3:a3:7d:eb:bf:39:90:28:c0:ae:
         72:37:28:4e:1c:a6:f9:19:1b:17:d2:72:41:96:5c:8f:60:51:
         a2:1a:bc:72:d4:10:bd:bc:7b:53:f2:f9:fe:40:f3:23:54:b7:
         c6:ea:c8:fb:4a:68:91:70:fe:4f:fe:43:fb:b6:c6:98:65:14:
         82:1f:dc:67:b5:22:47:f1:fd:45:cb:f2:f4:f7:20:6f:67:63:
         00:cf:76:b5:01:e5:93:4a:b4:ad:d0:b5:af:a9:7c:c6:c7:e4:
         34:3a:6d:55:dd:a6:7e:04:ae:58:ac:53:ac:35:6f:00:61:f6:
         16:cc:e1:ef:d4:2a:be:e5:27:2b:c3:70:95:95:52:f1:20:f6:
         66:d6:f1:8e:53:3a:d9:9c:95:ec:e4:47:d5:bd:00:67:61:95:
         b5:8b:31:f3
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYVx1tPaQSAJbH6FGuVmnzQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNjIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzRjMTNlY2YyNmFjNzAyZjc2OGM5OTExMGJmNjYyZTk5MTM5Nzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcoUXv9duMFQDqckRTKtI5A3MUx1
hy2PtATUwtUeDKTHmKcsHjcfIBaVEX40owbI9+vS7LHwOlm+3NsVHERyDdJosmK4
SK2F/iLushJUc90sed7absdQkO3uABZoiwme1+aeLyV9UAREIKv1SNFalumlu5gf
cru2NDlf+vg2GctW9eYgEs/QrHqs4uPepNzxcGeZBzdQrUDLUqSOjIy2dq/1pbBn
oT+gxj8k2swRbNN6JDfQ8tKS7AxxyBjolaGaymbgeFCq6bAQTglsjxghfbIk2SOO
AuT5RPm0wZxt9mFbggnmNvYJVWhZFBT85BFK6oKOzUb2J1r4VMO2RoOjSQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFMNME+zyascC92jJkRC/Zi6ZE5eUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2EzYTRl
OC0xZmM5LTQ1ODktOTdlOC0xZTU4YmQ3NGJlNjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvYTNhNGU4
LTFmYzktNDU4OS05N2U4LTFlNThiZDc0YmU2MC8xL3cwd1Q3UEpxeHdMM2FNbVJF
TDltTHBrVGw1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuZH0MA0EAgACMAcDBQMqEBzAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCjQDANBgkqhkiG9w0BAQsFAAOCAQEArtS5luaGQnyO
1/UfaHJB58/WeNfgg2gCciqjyKz6/nifaC0ZyfT1ke5TCpcFh83tqv2PzgHvaurc
tK9CYsaFrv3J1kK4pf+z2eUuKj2JaKFqmoP/4dRReyStVuKdCEdRjQqzo33rvzmQ
KMCucjcoThym+RkbF9JyQZZcj2BRohq8ctQQvbx7U/L5/kDzI1S3xurI+0pokXD+
T/5D+7bGmGUUgh/cZ7UiR/H9Rcvy9Pcgb2djAM92tQHlk0q0rdC1r6l8xsfkNDpt
Vd2mfgSuWKxTrDVvAGH2Fszh79QqvuUnK8NwlZVS8SD2ZtbxjlM62ZyV7ORH1b0A
Z2GVtYsx8w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:38 2024 by rpki-client on console-ams.rpki-client.org