Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-bEIeM4wGibH-EFyPr6XPdWpH6k.cer
File:                     1-bEIeM4wGibH-EFyPr6XPdWpH6k.cer (raw, json)
Hash identifier:          aG0vw8FjDGqPW3rMVWPcSsWQczHcYgTJ6hnlF0iFLwg=
Subject key identifier:   F9:B1:08:78:CE:30:1A:26:C7:F8:41:72:3E:BE:97:3D:D5:A9:1F:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DAFB5C15F7EFA6AF7AA529CAB204F0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/1-bEIeM4wGibH-EFyPr6XPdWpH6k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:29:40 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 58281
                          IP: 91.240.69.0/24

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 09:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:fb:5c:15:f7:ef:a6:af:7a:a5:29:ca:b2:04:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:29:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f9b10878ce301a26c7f841723ebe973dd5a91fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:51:7a:a2:98:f9:9b:9e:1e:ae:96:01:7f:
                    c8:9a:ec:16:4d:54:eb:7d:98:d1:61:6d:9f:22:65:
                    91:35:e0:7b:08:5c:5b:2b:e1:58:59:39:4b:34:69:
                    b5:b7:09:15:1b:26:b0:17:c2:54:55:2f:76:fe:d3:
                    19:92:a0:6c:64:1d:ef:1d:cb:6f:6f:e3:f9:b2:89:
                    dc:5a:f5:12:5b:3b:9b:39:6d:b3:9a:10:32:d1:ea:
                    28:a0:b8:b5:b0:3e:a3:1f:e9:37:af:0b:a0:ef:90:
                    3a:26:b2:7e:d1:1f:ff:a5:8e:18:17:b2:a1:67:de:
                    26:16:5f:9c:77:59:95:ff:48:90:56:96:88:da:fd:
                    94:8e:e9:b3:77:5d:a9:e4:7e:c6:c8:d2:67:7f:69:
                    da:b8:a8:98:c4:d1:d9:2b:2b:f3:04:39:30:d1:47:
                    60:ba:a4:c7:d0:2e:68:2c:d3:bd:a8:76:13:3e:c9:
                    40:71:04:c9:a8:40:1d:2f:1f:21:3c:86:b0:9c:fd:
                    95:e2:b4:68:ba:44:f2:5e:25:29:2a:b6:c3:6c:ab:
                    95:83:4f:40:1c:ba:18:f6:9f:c2:95:06:3c:9c:29:
                    b7:38:8e:eb:c7:26:91:e5:d1:46:b9:5f:c2:29:7a:
                    41:8e:6c:b1:d5:7c:4d:e0:6e:c3:39:a5:f6:20:ab:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B1:08:78:CE:30:1A:26:C7:F8:41:72:3E:BE:97:3D:D5:A9:1F:A9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/1-bEIeM4wGibH-EFyPr6XPdWpH6k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.69.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58281

    Signature Algorithm: sha256WithRSAEncryption
         64:94:a8:b9:dc:57:8d:ea:5b:de:d6:cf:76:8e:1d:d1:20:42:
         86:63:f2:10:96:8a:ea:27:03:2e:81:0a:ae:e6:8b:0e:b5:72:
         91:8e:54:0c:9d:a5:0b:b4:91:54:01:01:1d:a5:51:38:4e:08:
         36:71:9e:ac:af:a2:dd:a9:a7:92:73:80:e4:f4:e6:93:a7:39:
         8d:7a:b4:0f:b6:7c:98:94:58:ee:f2:c3:a1:46:3e:63:95:ec:
         67:1d:67:02:8e:09:a5:5a:2d:10:da:94:2c:fe:46:39:fe:02:
         eb:0c:9e:8d:4b:0d:3f:bf:2c:ec:12:3e:dc:62:78:fa:77:32:
         98:af:21:56:9a:b4:d4:d3:e1:11:0d:7b:c1:e7:10:0a:56:40:
         d2:3b:d7:81:19:b5:28:9c:cf:b1:b1:77:41:3e:3b:11:4b:b2:
         c9:a4:f7:09:42:ed:ed:e0:48:e4:bf:d1:ee:8f:53:63:0e:43:
         57:ea:ed:7b:0e:53:ac:43:3b:a7:0c:35:13:ed:1b:11:b1:45:
         bb:ca:97:5c:bc:30:9d:a3:3f:15:d5:c0:30:5d:ad:41:e4:fd:
         c2:05:38:5c:86:52:20:8d:e4:6c:d0:8c:c0:b0:56:66:8e:86:
         be:6c:3c:f7:eb:7a:e8:77:e0:10:15:c7:1f:dd:ef:8f:9a:b5:
         9d:99:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 12:13:18 2024 by rpki-client on console-fra.rpki-client.org