Certificate

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/t7xg6ZtXdcYhy-YGTMk_ONTD31E.cer
File:                     t7xg6ZtXdcYhy-YGTMk_ONTD31E.cer (raw, json)
Hash identifier:          i0CcDZJlVClPyeiGiyGUjnou2lcGn8pY/rcgtGGk9os=
Subject key identifier:   B7:BC:60:E9:9B:57:75:C6:21:CB:E6:06:4C:C9:3F:38:D4:C3:DF:51
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Certificate issuer:       /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial:       F83D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Manifest:                 rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/cb/t7xg6ZtXdcYhy-YGTMk_ONTD31E.mft
caRepository:             rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/cb/
Notify URL:               https://chloe.sobornost.net/rpki/news.xml
Certificate not before:   Thu 13 Apr 2023 04:19:56 +0000
Certificate not after:    Fri 12 Apr 2024 04:01:44 +0000
Subordinate resources:    IP: 2001:67c:208c:ffff:ffff:ffff:ffff:ffff/128

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63549 (0xf83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
        Validity
            Not Before: Apr 13 04:19:56 2023 GMT
            Not After : Apr 12 04:01:44 2024 GMT
        Subject: CN=B7BC60E99B5775C621CBE6064CC93F38D4C3DF51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:3f:b6:ae:eb:57:9e:8d:5e:58:dd:41:67:
                    89:33:9e:21:64:78:aa:00:7f:57:4d:15:a8:4f:30:
                    48:8a:fb:c4:7e:b3:a3:da:2e:d5:88:39:28:46:bb:
                    b4:8f:ba:c1:19:5e:88:87:6c:c7:d4:c3:60:24:b2:
                    50:ad:40:3a:98:a8:3a:f9:d6:ff:d2:30:fb:78:a7:
                    c8:bc:a3:cb:c3:7f:72:20:7a:e8:0a:82:63:ca:34:
                    73:58:c2:be:9c:8f:50:d5:3f:b7:a8:30:dc:82:38:
                    6f:0c:8a:3c:2c:d5:e1:74:a5:aa:ae:c4:26:5a:ad:
                    c6:9a:50:d5:c4:02:fe:e2:a2:d1:34:25:0d:9d:46:
                    1d:88:88:02:0d:92:6d:9e:10:be:58:18:d2:05:76:
                    24:31:1a:b4:b5:04:a6:09:29:29:98:d5:2c:0c:2c:
                    4d:39:fd:ba:cc:d8:79:35:56:ee:5b:4e:e6:a7:24:
                    6e:9b:ee:f1:8d:75:9a:d6:fa:85:ff:90:00:4a:8e:
                    9d:5f:ec:b5:f3:bb:f7:81:f7:f0:3b:86:13:9c:dc:
                    97:61:12:28:dc:ce:33:5b:55:7d:70:b1:57:9b:bb:
                    b7:5e:17:26:22:fc:84:01:47:a3:66:c4:08:57:3d:
                    5e:16:09:ea:5c:2e:71:b9:99:ab:e5:74:d3:cd:69:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BC:60:E9:9B:57:75:C6:21:CB:E6:06:4C:C9:3F:38:D4:C3:DF:51
            X509v3 Authority Key Identifier:
                keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/cb/
                RPKI Manifest - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/cb/t7xg6ZtXdcYhy-YGTMk_ONTD31E.mft
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c:ffff:ffff:ffff:ffff:ffff/128

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:a7:7a:5d:aa:b8:52:c3:f2:c2:b3:a0:16:8f:8f:c2:7b:
         2a:a2:16:32:5b:3e:a7:f1:62:21:43:25:5f:f9:86:f8:16:02:
         de:42:89:b1:27:15:37:d8:50:63:4d:05:d0:69:0f:18:f7:55:
         e8:a3:82:e5:b4:2d:3d:0b:66:42:7d:c6:25:97:9d:fc:b9:5c:
         c6:7d:7e:e3:d5:56:65:79:39:8a:0a:b4:c2:a2:e1:15:5b:f5:
         d5:13:da:c2:63:0c:19:bf:c3:fa:3e:68:a6:33:b6:9d:c9:62:
         c6:fd:02:5d:92:de:85:9a:84:70:d0:fb:28:bf:91:f2:d6:57:
         0e:11:54:11:8d:04:40:98:1e:c1:c2:4e:4d:df:72:ed:22:8a:
         e9:86:a8:a5:06:cc:c6:a7:c8:bb:40:21:63:a5:63:1b:ba:ad:
         06:a6:bb:78:56:b5:44:91:c4:99:7d:7a:13:3a:d3:89:d4:cb:
         e7:82:e6:38:94:f4:eb:22:a9:7b:f7:b2:d3:9c:55:37:be:86:
         f2:30:ac:1b:29:3b:b4:36:18:e5:06:fb:40:48:9b:85:cd:f9:
         10:48:bc:51:15:31:f3:74:13:b2:2a:26:cf:34:9f:89:ed:09:
         fa:c0:7c:6d:ad:99:97:ed:16:3c:19:55:97:ed:40:ab:85:bb:
         8d:b7:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 20:37:04 2024 by rpki-client on console-ams.rpki-client.org