Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/DDB4F7AA7EA3879A862D421A9E4B55BFB2A581DF.cer
File:                     DDB4F7AA7EA3879A862D421A9E4B55BFB2A581DF.cer (raw, json)
Hash identifier:          mdoBLNLI+p34eO0FYpvXDJAaSz82fnvmp+PFibUQf48=
Subject key identifier:   DD:B4:F7:AA:7E:A3:87:9A:86:2D:42:1A:9E:4B:55:BF:B2:A5:81:DF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0A5907F647DDE8A195C2A36803BFDD296C1F5E73
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/1/DDB4F7AA7EA3879A862D421A9E4B55BFB2A581DF.mft
caRepository:             rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/1/
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Sun 17 Sep 2023 18:50:54 +0000
Certificate not after:    Sun 15 Sep 2024 18:55:54 +0000
Subordinate resources:    IP: 2a0a:6040:1300::/40
                          IP: 2a0a:6040:9f00::/40

Validation:               Failed, certificate revoked on Tue 19 Sep 2023 02:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:59:07:f6:47:dd:e8:a1:95:c2:a3:68:03:bf:dd:29:6c:1f:5e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Sep 17 18:50:54 2023 GMT
            Not After : Sep 15 18:55:54 2024 GMT
        Subject: CN=DDB4F7AA7EA3879A862D421A9E4B55BFB2A581DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:e3:aa:7c:d0:0f:94:99:7d:08:ae:9e:68:
                    13:c8:76:42:1d:bc:f3:30:d4:8c:8f:7d:61:80:00:
                    81:d1:da:60:1a:ed:83:15:08:2c:89:c9:ae:89:fc:
                    27:b0:8c:85:46:e8:bd:32:ce:ee:4e:5e:e2:c1:86:
                    27:5f:41:08:8c:9d:38:3a:2e:5c:32:a9:15:8f:7c:
                    8a:64:48:c5:b0:60:cf:f0:ea:a0:36:20:2c:9f:40:
                    b6:61:b9:27:57:19:93:09:1c:ba:ce:84:aa:40:1f:
                    f5:2d:49:73:66:32:87:92:28:4c:b3:86:0d:28:b4:
                    16:44:99:90:54:a3:96:28:d7:52:07:fc:83:e1:e7:
                    67:4f:fe:0e:b2:61:e1:fc:eb:f7:7d:aa:4c:7f:ae:
                    d7:4c:5f:f7:fe:02:05:65:33:12:40:21:05:e5:89:
                    d3:75:96:18:d9:25:45:80:6e:64:93:4a:d4:7a:bc:
                    2f:e9:b3:a3:9f:3f:72:35:4d:e4:67:37:0e:2e:32:
                    5e:c5:be:af:df:ea:1f:36:9c:5f:21:80:a5:3d:df:
                    c2:29:88:a7:f6:c6:b5:30:e5:9b:fb:71:19:01:6b:
                    60:f7:57:20:1c:2f:a8:1c:ba:e6:1f:85:36:25:56:
                    82:ac:de:a3:ad:e4:c4:5b:e2:23:de:37:e9:14:f3:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:B4:F7:AA:7E:A3:87:9A:86:2D:42:1A:9E:4B:55:BF:B2:A5:81:DF
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/1/
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/1/DDB4F7AA7EA3879A862D421A9E4B55BFB2A581DF.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1300::/40
                  2a0a:6040:9f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:c0:62:d4:67:11:7b:38:e7:23:0a:66:ab:02:c3:ff:09:3b:
         b1:de:c4:c1:7a:db:bf:4e:e4:26:e4:73:d2:96:2c:b9:16:6f:
         3a:4d:07:4b:07:ff:af:07:26:55:c5:d8:76:1a:ac:a6:18:6f:
         2b:0f:d4:24:47:7f:b6:96:d4:5d:28:86:85:e3:ad:16:b9:8b:
         6b:e2:4c:bf:16:ea:95:eb:df:d8:d9:ed:a3:0f:ff:df:20:63:
         75:0d:e3:d5:24:45:27:63:de:c1:17:70:20:14:ef:f7:1c:ed:
         77:84:fb:28:1a:f8:82:77:ca:90:81:06:3f:0c:00:e8:cf:ee:
         e8:59:bc:bd:d6:9c:5a:24:3a:65:9f:c2:af:38:b1:54:99:f8:
         7f:15:97:10:23:0b:e9:95:99:76:b5:fb:c5:a2:95:31:dd:9a:
         cb:ab:cd:e2:bf:de:f7:74:dc:67:fd:ec:41:f4:54:76:39:46:
         c1:4c:e3:e7:cd:b2:b3:9a:a8:3c:a8:54:88:b4:2b:2f:c2:a6:
         2a:c1:dc:8c:ed:36:9a:ea:13:4c:bb:6b:77:09:69:5f:bb:8b:
         05:f3:fe:bb:d1:db:55:e7:22:46:61:38:df:c9:57:e3:e1:4f:
         91:82:2c:61:cf:82:0c:10:67:b2:dd:8a:bd:8c:37:dd:01:d9:
         b1:ad:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org