Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer
File:                     0D_r_VN-Mgy77CtOImd7muZvYE4.cer (raw, json)
Hash identifier:          vIYG1X3h6jHnjW7Y0HYdyLohd6aWFqOqyZ4imG/Ddl0=
Subject key identifier:   D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018DF5222C8C1B4DBE48D9B4138EA8289E80
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 29 Feb 2024 13:51:14 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 80.91.213.0/24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 10:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:f5:22:2c:8c:1b:4d:be:48:d9:b4:13:8e:a8:28:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 29 13:51:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2f:ad:d0:e3:ab:7e:c4:76:19:b1:95:10:7c:
                    2d:73:2a:91:6a:fc:50:7d:9a:fd:e2:8f:9e:da:c7:
                    26:4a:b6:69:a2:30:be:34:67:3b:cf:e8:f4:b5:82:
                    3e:a3:26:73:43:be:16:3f:72:1b:07:3b:01:b2:9b:
                    c1:4f:74:8f:cd:36:4a:d0:94:5a:e6:2b:5d:6d:63:
                    f2:38:20:91:bb:80:6f:8f:e5:0c:7b:88:b9:62:c0:
                    ca:53:46:60:7e:85:e7:e9:9c:fa:af:da:a3:20:55:
                    03:21:50:3c:2a:da:74:5f:0e:91:e6:85:8f:03:c9:
                    f5:ae:42:4f:06:f9:25:bb:63:f2:db:26:ea:c6:bf:
                    71:da:c1:f7:56:bd:4a:fe:e8:fc:c8:7f:55:70:05:
                    cd:0a:35:5f:5f:36:cd:85:8a:9e:f3:b6:95:9a:b6:
                    07:21:17:b0:e1:61:02:65:a4:3e:b9:a2:0e:75:76:
                    36:da:e6:d0:d8:04:b3:62:e2:53:ff:b8:48:ee:06:
                    3c:4b:ac:ba:ab:03:6d:22:f4:07:cb:aa:f6:4b:bb:
                    98:f8:25:0d:e7:a0:8a:34:f5:d2:fc:77:42:8c:f3:
                    75:96:c0:36:67:a5:b7:b2:29:15:b1:5d:13:7f:05:
                    74:42:0a:55:47:9a:18:82:6c:d5:11:b7:05:96:21:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.91.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:a4:38:a9:0c:a7:0f:ab:d0:da:7c:85:e1:fd:79:d4:0c:f2:
         c8:15:39:b0:db:f8:6a:7e:ad:f0:b2:b6:46:b9:5d:e2:0d:8b:
         5e:aa:8c:00:09:f4:86:1e:60:79:62:d4:e3:d1:78:1a:7a:33:
         80:9f:21:8f:1c:13:1d:fe:38:0a:63:d1:93:15:25:58:78:c4:
         c2:ef:38:c0:d2:bb:28:77:76:17:86:e0:6e:17:5e:7a:2f:91:
         24:63:70:d2:b0:00:af:91:b1:3f:a1:33:3e:1e:a6:00:6b:42:
         c3:2c:7d:2b:c5:44:f8:3a:bd:8b:ef:1e:31:d4:a5:71:00:96:
         15:a6:de:93:af:8e:79:fb:8c:00:f6:d8:3e:0f:7a:aa:e4:68:
         21:ba:14:0f:8d:8b:da:47:73:10:64:c1:a0:6a:31:c2:f3:a6:
         90:74:ff:eb:0d:27:37:9a:66:a0:91:70:ad:d0:3b:26:45:dc:
         0e:19:78:05:07:23:da:07:55:ef:cc:24:ee:b8:14:c9:ee:67:
         68:ab:00:d1:90:21:bb:10:83:cb:6e:1e:a2:a2:08:c0:56:26:
         0e:f1:06:d1:e5:c3:91:20:be:e2:15:a0:82:1f:0f:0f:a9:11:
         fe:cd:35:79:fe:df:d9:2f:f0:51:e3:69:98:e3:0e:4c:17:0a:
         29:5e:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 14:21:18 2024 by rpki-client on console-fra.rpki-client.org