Certificate

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer
File:                     1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer (raw, json)
Hash identifier:          DSUVW1aFPyCKvPsGZVeu54XwvwG8T3BeW2PxLKWw1Yc=
Subject key identifier:   1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3
Authority key identifier: 0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00
Certificate issuer:       /CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
Certificate serial:       4393CFCAE81250F3ABEE0655CA7E9ECACEB51A9D
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 23 Jul 2024 19:44:32 +0000
Certificate not after:    Tue 22 Jul 2025 19:49:32 +0000
Subordinate resources:    IP: 2a0a:6045:c000::/34

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 19:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:93:cf:ca:e8:12:50:f3:ab:ee:06:55:ca:7e:9e:ca:ce:b5:1a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
        Validity
            Not Before: Jul 23 19:44:32 2024 GMT
            Not After : Jul 22 19:49:32 2025 GMT
        Subject: CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:fb:3a:f3:a6:96:d4:8a:e8:f9:a6:f9:cc:
                    b2:bc:86:a4:d6:b0:ba:34:18:99:88:15:ec:30:c7:
                    f1:bb:84:ae:c4:13:8c:89:f6:a2:4d:d1:c8:19:7a:
                    4c:86:a8:65:88:0f:01:71:48:55:b5:f9:d8:07:47:
                    87:0d:b5:77:69:91:40:07:c0:38:39:7c:c1:c7:31:
                    2c:2b:39:0f:1d:37:09:ad:c4:44:86:6f:7b:a1:d4:
                    f3:83:58:06:15:8b:fd:f2:e3:78:e9:aa:55:dc:42:
                    4f:d6:c9:6e:1e:a4:de:73:c6:49:4d:a7:91:31:e4:
                    46:0c:60:0b:50:21:2f:33:09:bb:15:ab:af:23:5b:
                    95:e8:74:bf:73:a6:6a:6a:f6:48:96:77:4d:db:e0:
                    e3:aa:5a:78:73:88:9b:2b:12:f9:00:c9:12:52:6e:
                    5d:df:68:87:12:d1:3e:e6:6a:29:d7:f5:c4:fe:7d:
                    9e:93:09:42:2c:fb:e5:b2:92:8c:b9:16:87:a7:10:
                    c5:aa:7a:25:1c:09:27:32:0e:4a:16:5b:b9:03:c3:
                    30:75:c7:25:57:77:b6:14:d8:97:74:c3:96:0f:5e:
                    32:fe:51:ad:88:7f:24:04:3d:b8:1a:7e:7e:96:15:
                    85:7c:2a:0c:b4:ff:61:36:c5:bb:69:c4:14:7b:b9:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3
            X509v3 Authority Key Identifier:
                keyid:0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         af:e5:d1:f8:26:13:b0:3c:a1:75:fc:92:a2:9d:5d:27:66:d4:
         76:c2:4f:b0:3f:7b:43:01:c0:a8:99:9c:28:b5:cf:e2:c5:3a:
         29:b9:46:29:a2:04:41:42:32:e3:c3:cd:ee:4a:20:e3:6f:3c:
         8b:8a:e4:d7:18:7d:c6:7f:7f:cc:94:45:0f:20:8d:de:63:3c:
         12:e4:1a:64:98:25:42:71:e9:18:bc:cd:ee:24:3f:99:82:7a:
         5b:96:a9:aa:ac:f1:89:6f:52:92:4b:d9:e4:38:85:56:9c:5e:
         f6:20:d1:97:64:c4:fe:6f:91:40:36:97:ad:fb:ad:8c:17:3f:
         77:f4:46:b3:c6:03:ab:b6:15:1b:1a:15:17:51:d0:c5:2f:ee:
         83:2b:f3:69:30:1c:e7:20:9e:54:6f:c8:bd:fb:8a:b7:37:87:
         dd:fd:de:c2:80:02:f2:9b:2b:31:e0:8a:63:22:f2:8b:94:84:
         1a:0f:66:a6:bf:f0:2b:81:ee:26:cf:a1:80:13:ea:03:81:3f:
         1a:55:d9:1a:d6:e8:c7:7e:ea:c4:77:74:4e:93:18:ce:0e:2a:
         70:a5:25:73:a0:15:05:98:d4:5d:f1:1f:d5:e2:98:90:bb:aa:
         42:c6:2d:9d:e9:1f:7d:37:0d:e2:aa:c9:e8:c1:5b:66:70:12:
         12:ac:af:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----