Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0WLKpqmE8Ihb_op-XgkfkyN3RCs.cer
File:                     0WLKpqmE8Ihb_op-XgkfkyN3RCs.cer (raw, json)
Hash identifier:          0G9HvGdJfBhSIk9szLexg4QNBeMAIDN+o6yYj15rpoo=
Subject key identifier:   D1:62:CA:A6:A9:84:F0:88:5B:FE:8A:7E:5E:09:1F:93:23:77:44:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC726C09D0084C82C8D2528EFB80176ED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/0WLKpqmE8Ihb_op-XgkfkyN3RCs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 22:30:54 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 212346
                          IP: 185.217.36.0/24
                          IP: 2a10:c500::/29

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:26:c0:9d:00:84:c8:2c:8d:25:28:ef:b8:01:76:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:30:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d162caa6a984f0885bfe8a7e5e091f932377442b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:03:e8:01:36:de:0f:93:14:a2:0c:d1:90:
                    9b:91:d5:d0:69:e5:11:f7:48:39:6f:1f:6d:fd:57:
                    9f:16:5c:8f:0a:96:e0:07:6b:1e:d5:0d:23:b7:48:
                    3f:3e:c3:f4:ae:49:1c:a8:04:65:4c:af:b9:2a:61:
                    1b:de:40:b0:fa:f7:ca:8d:71:0a:f2:08:83:fb:50:
                    cc:35:eb:5c:96:f0:47:a3:43:8e:f3:3b:f1:b8:f8:
                    92:86:ea:3d:b4:48:dd:d2:86:8e:00:69:a9:44:72:
                    99:b0:d9:e6:ce:f2:e5:20:52:be:07:31:ff:3d:85:
                    24:d8:d3:8b:dc:97:50:00:0c:b4:c6:03:96:91:53:
                    b9:cd:b6:9e:d5:be:88:fa:5f:00:21:ad:d9:40:ff:
                    2d:8e:ef:7e:ba:e6:52:b1:98:1c:0f:a1:3a:f4:55:
                    72:70:eb:ee:f2:9a:56:0c:3c:c2:f1:c8:5f:75:5f:
                    80:e0:91:e7:d8:b7:42:2d:c0:dd:8f:3e:d4:25:52:
                    a6:77:ca:d4:1c:59:3f:15:c0:fe:34:72:c7:3d:d9:
                    fe:08:e4:ab:6a:27:f0:15:d4:56:72:db:24:aa:d8:
                    f1:fa:53:8e:74:4d:53:92:7c:b3:e1:74:31:27:87:
                    7f:4d:12:4f:6e:e9:58:6b:2e:f3:4e:76:52:8d:d0:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:62:CA:A6:A9:84:F0:88:5B:FE:8A:7E:5E:09:1F:93:23:77:44:2B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/0WLKpqmE8Ihb_op-XgkfkyN3RCs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.36.0/24
                IPv6:
                  2a10:c500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212346

    Signature Algorithm: sha256WithRSAEncryption
         8e:27:30:ff:96:f9:4b:bf:9b:6c:41:2b:e3:1f:54:f8:87:67:
         ef:29:b7:15:ab:ca:88:90:40:ae:cc:84:99:e1:01:ac:73:61:
         6f:ec:ea:8c:f2:5f:4f:a9:ca:a7:aa:49:02:a4:17:e1:99:5c:
         db:bf:20:30:6d:61:28:35:d6:61:e0:a1:ac:29:b1:de:e2:08:
         79:e1:b3:93:63:66:4c:c1:9a:0e:c3:bd:49:76:28:80:6b:61:
         26:2e:94:84:22:e6:88:f2:99:c5:2b:4b:c1:c5:f7:ac:0b:82:
         0a:93:43:0c:0f:30:11:4f:5d:cd:0f:6a:e8:aa:aa:8f:5d:00:
         69:73:49:98:7e:8b:9f:f8:57:d1:40:9e:4c:a3:75:3e:08:4c:
         3a:e2:b8:5e:a2:54:44:22:dc:b7:0b:74:e4:56:b6:4b:9c:02:
         20:9d:f1:34:8c:6d:2a:d6:c9:27:7d:be:5a:49:2d:65:9d:2c:
         95:24:4f:91:f9:e9:a9:f8:ef:75:0a:87:39:d0:74:04:63:fb:
         e4:f5:3d:7c:f6:bc:90:ed:6e:c9:ee:76:52:12:dc:bd:9a:9e:
         8a:7f:b6:d5:0a:69:e7:89:51:2e:01:f6:4b:32:a3:27:16:34:
         17:7c:72:81:ac:fb:ef:4a:59:f7:7a:a4:eb:e8:1e:b4:b4:25:
         f7:4f:4f:e3
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzHJsCdAITILI0lKO+4AXbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTYyY2FhNmE5ODRmMDg4NWJmZThhN2U1ZTA5MWY5MzIzNzc0NDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6ID6AE23g+TFKIM0ZCbkdXQaeUR
90g5bx9t/VefFlyPCpbgB2se1Q0jt0g/PsP0rkkcqARlTK+5KmEb3kCw+vfKjXEK
8giD+1DMNetclvBHo0OO8zvxuPiShuo9tEjd0oaOAGmpRHKZsNnmzvLlIFK+BzH/
PYUk2NOL3JdQAAy0xgOWkVO5zbae1b6I+l8AIa3ZQP8tju9+uuZSsZgcD6E69FVy
cOvu8ppWDDzC8chfdV+A4JHn2LdCLcDdjz7UJVKmd8rUHFk/FcD+NHLHPdn+COSr
aifwFdRWctskqtjx+lOOdE1Tknyz4XQxJ4d/TRJPbulYay7zTnZSjdBNxQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFNFiyqaphPCIW/6Kfl4JH5Mjd0QrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzNjOWUy
NC03ZTVhLTQ4YjYtYjc1Zi1kMWIzNjg0MWRlZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvM2M5ZTI0
LTdlNWEtNDhiNi1iNzVmLWQxYjM2ODQxZGVlMS8xLzBXTEtwcW1FOEloYl9vcC1Y
Z2tma3lOM1JDcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAudkkMA0EAgACMAcDBQMqEMUAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM9ejANBgkqhkiG9w0BAQsFAAOCAQEAjicw/5b5S7+b
bEEr4x9U+Idn7ym3FavKiJBArsyEmeEBrHNhb+zqjPJfT6nKp6pJAqQX4Zlc278g
MG1hKDXWYeChrCmx3uIIeeGzk2NmTMGaDsO9SXYogGthJi6UhCLmiPKZxStLwcX3
rAuCCpNDDA8wEU9dzQ9q6Kqqj10AaXNJmH6Ln/hX0UCeTKN1PghMOuK4XqJURCLc
twt05Fa2S5wCIJ3xNIxtKtbJJ32+WkktZZ0slSRPkfnpqfjvdQqHOdB0BGP75PU9
fPa8kO1uye52UhLcvZqein+21Qpp54lRLgH2SzKjJxY0F3xygaz770pZ93qk6+ge
tLQl909P4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:06 2024 by rpki-client on console-ams.rpki-client.org