Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Vf2WqI9us6lsc-DOmNILvPkMFc.cer
File:                     1Vf2WqI9us6lsc-DOmNILvPkMFc.cer (raw, json)
Hash identifier:          nImKNeBE7hRgjqOfHlBRnpxCoTtTTp13HvxHg1Zek78=
Subject key identifier:   D5:57:F6:5A:A2:3D:BA:CE:A5:B1:CF:83:3A:63:48:2E:F3:E4:30:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC94DDE3FC640699753BE1D617391F237
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/1Vf2WqI9us6lsc-DOmNILvPkMFc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 08:32:52 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 204434
                          IP: 185.248.224.0/23

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 17:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:de:3f:c6:40:69:97:53:be:1d:61:73:91:f2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:32:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d557f65aa23dbacea5b1cf833a63482ef3e43057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4d:71:c1:c3:6c:14:69:ef:f7:d6:b4:6d:94:
                    c2:03:f6:0e:03:2e:ce:63:8f:ff:67:0e:48:80:50:
                    2a:cc:cc:0a:f9:7e:f5:c9:cc:f9:96:92:36:68:c8:
                    93:58:4c:bb:ea:70:a9:95:f6:ce:7c:e6:37:2b:97:
                    a6:9a:41:7f:71:c8:74:7b:aa:63:25:a6:98:86:b0:
                    19:14:d1:09:32:29:33:ec:c0:1a:f5:c2:92:2d:d8:
                    be:41:96:d6:f0:05:b0:c8:cb:64:26:e8:95:c2:d4:
                    86:d9:28:5d:0d:d2:1e:8e:e3:cc:db:a4:69:5b:3a:
                    65:4e:98:60:5c:6b:17:61:52:9e:10:da:fb:a4:b4:
                    d9:d3:17:63:a5:69:32:6a:42:22:a4:3a:59:f2:13:
                    a8:33:b5:21:9c:ab:22:14:a4:20:7f:ed:c1:9f:e7:
                    e6:67:32:bd:37:29:29:39:39:84:73:b7:28:fd:89:
                    64:51:92:9d:d5:6c:9f:71:cd:ac:dd:45:c9:0c:70:
                    95:81:2a:79:d7:7d:9d:9e:76:90:6c:b4:32:73:fa:
                    39:80:41:6a:a1:5f:30:fe:c1:b3:4e:41:60:85:9f:
                    16:5b:7e:ee:7f:f0:82:89:d7:27:89:75:d3:a1:e7:
                    a3:9d:25:fb:a5:5c:55:e0:a0:f4:87:a1:44:f0:c7:
                    d3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:57:F6:5A:A2:3D:BA:CE:A5:B1:CF:83:3A:63:48:2E:F3:E4:30:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/1Vf2WqI9us6lsc-DOmNILvPkMFc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.224.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204434

    Signature Algorithm: sha256WithRSAEncryption
         9d:07:a8:1d:3f:2c:d4:9a:6f:5f:ed:80:b3:49:4d:7c:07:8c:
         37:b9:c7:ba:39:1a:4f:11:fd:e8:20:83:a8:89:f6:a2:0e:24:
         c1:8b:51:76:92:02:d0:7c:8d:1b:1c:af:8b:12:62:78:dd:1d:
         c7:0c:43:f0:0c:35:de:88:8c:e7:18:b1:0c:2f:d0:19:ac:a9:
         de:64:32:ea:a5:6c:04:6b:6a:27:b3:f4:c6:ca:16:97:63:28:
         1e:c8:60:39:2f:96:c4:4c:78:f6:4a:03:47:b5:32:63:0d:96:
         c5:5e:dd:47:24:7a:17:44:4f:be:f1:b6:20:17:ed:37:93:e8:
         72:03:ce:56:77:31:bd:17:19:1a:15:01:16:70:ea:4b:92:62:
         c3:74:a2:6f:b2:41:ce:86:0d:e4:9d:9a:1e:90:df:03:85:b6:
         22:6f:ee:a8:59:7e:2c:d4:20:21:86:05:12:7a:9b:84:e1:47:
         3a:da:81:a3:ae:7e:d8:1a:b7:e4:d0:05:cc:ec:00:f3:a8:be:
         f6:65:45:06:1f:01:de:7b:ee:48:e1:43:50:88:83:37:22:a6:
         a5:14:bd:5e:15:f6:aa:28:37:c6:b4:c1:b6:03:4e:26:17:76:
         46:fd:02:13:32:65:76:ea:9e:3f:f7:b3:46:f9:f0:50:fd:88:
         25:77:c4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 22:10:58 2024 by rpki-client on console-fra.rpki-client.org