Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/71C0E2EA020604E0CCF430B1C785D3A866E9A2FF.cer
File:                     71C0E2EA020604E0CCF430B1C785D3A866E9A2FF.cer (raw, json)
Hash identifier:          vUl0JV9GVKw2lgvAz6xYHXajoezQvNQwmeiVaUWRbBM=
Subject key identifier:   71:C0:E2:EA:02:06:04:E0:CC:F4:30:B1:C7:85:D3:A8:66:E9:A2:FF
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       6D72BF90FAA3F074505444C6E1D251E75557E377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/71C0E2EA020604E0CCF430B1C785D3A866E9A2FF.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 08 Dec 2023 02:04:26 +0000
Certificate not after:    Fri 06 Dec 2024 02:09:26 +0000
Subordinate resources:    IP: 2a0f:85c1:331::/48

Validation:               Failed, certificate revoked on Sat 09 Dec 2023 18:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:72:bf:90:fa:a3:f0:74:50:54:44:c6:e1:d2:51:e7:55:57:e3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: Dec  8 02:04:26 2023 GMT
            Not After : Dec  6 02:09:26 2024 GMT
        Subject: CN=71C0E2EA020604E0CCF430B1C785D3A866E9A2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b6:0a:f8:62:5f:a5:54:2f:f3:63:a4:4f:36:
                    8c:67:9f:bd:25:66:52:7f:ca:dc:49:f8:87:51:a8:
                    53:b3:55:9e:83:da:9a:7e:70:e7:d9:25:f0:37:e8:
                    5a:6a:f0:80:42:ba:25:14:05:39:4e:2f:21:aa:35:
                    f7:ce:6a:11:e7:50:44:e4:69:7f:7e:d1:10:dc:55:
                    67:a4:83:c8:47:8e:49:9a:af:50:bf:5d:56:c9:ef:
                    c1:09:9a:78:30:34:ca:f8:47:fc:83:aa:3a:70:6e:
                    e5:0d:c7:45:bf:1d:7e:e9:b8:88:2c:4f:ef:95:8e:
                    18:38:98:7d:49:75:39:ce:8b:c6:a3:c5:1a:0d:50:
                    1b:80:15:ed:4e:b5:8f:ac:98:fc:79:11:50:b6:82:
                    41:2e:79:66:91:63:b9:59:87:d7:0b:8c:ee:3a:be:
                    b7:0d:dd:2e:63:28:60:eb:a7:65:ba:7c:b7:50:0a:
                    1b:d3:12:ad:1f:46:a9:23:c2:35:93:6b:7d:a8:7a:
                    b1:c4:f9:8a:51:52:7e:c2:25:bf:84:c5:ee:14:24:
                    90:07:97:b0:6f:75:ec:14:62:aa:8f:04:95:7e:20:
                    c5:30:14:9b:01:93:9e:99:89:ab:ac:40:f0:bb:84:
                    27:8b:23:24:91:7b:da:4d:b9:7d:77:aa:ac:f6:b7:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:C0:E2:EA:02:06:04:E0:CC:F4:30:B1:C7:85:D3:A8:66:E9:A2:FF
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/71C0E2EA020604E0CCF430B1C785D3A866E9A2FF.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:331::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:a7:5a:b5:4e:d9:00:f6:b5:39:d0:ae:2b:96:ad:d6:77:99:
         60:4b:bc:97:4c:a8:02:a8:4c:6e:49:fe:10:4d:86:da:ff:18:
         59:f2:0b:c7:a3:1b:30:27:71:da:34:e3:36:6b:cb:b2:46:67:
         8a:9e:96:22:6d:48:07:c9:2b:b9:06:b6:a9:7e:59:3c:fc:a0:
         58:ce:18:89:cd:1a:bc:65:7c:f7:5c:14:07:f0:c7:95:5f:a5:
         70:8e:e4:73:64:11:76:9e:e2:e4:9d:a6:52:9c:97:dc:58:50:
         a2:f8:de:0a:2b:20:0e:c9:0a:ea:81:74:6c:88:3a:33:14:8c:
         0a:5d:b8:31:cf:d3:c6:03:ae:69:4f:00:4a:85:9d:8c:cd:2b:
         e4:47:1c:2a:b7:ba:b4:16:ca:11:3a:3d:89:28:2e:ea:b7:8a:
         fa:1f:25:4e:d2:ae:cd:33:ab:75:96:8d:85:bd:92:7e:aa:21:
         b6:e8:8f:12:4e:12:1d:74:10:0a:08:52:68:50:66:f1:86:a9:
         20:55:88:e4:ac:bf:b1:b7:b1:04:10:2c:cd:58:94:ff:46:af:
         c0:2c:f9:49:80:13:c4:cb:02:ae:29:41:9f:76:89:ac:5d:f1:
         09:96:72:e6:2c:ee:40:9c:e7:b4:13:a2:c9:52:25:54:6f:23:
         c6:ea:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org