Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.cer
File:                     4G6-pkxGTf8wF3tX1gKLZ9Huhi4.cer (raw, json)
Hash identifier:          M7vuEA/1omQr+aXuiQAhxWYs8zhc33i048Z1tqEo4js=
Subject key identifier:   E0:6E:BE:A6:4C:46:4D:FF:30:17:7B:57:D6:02:8B:67:D1:EE:86:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B6323D655519DC7E3DD28E0CF173FBB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.77.149.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:23:d6:55:51:9d:c7:e3:dd:28:e0:cf:17:3f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e06ebea64c464dff30177b57d6028b67d1ee862e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:c4:ae:29:90:ab:20:32:0e:be:2d:10:1e:
                    34:a6:e9:36:60:cb:a6:91:03:3e:60:d1:9c:b8:a9:
                    2e:c8:44:a7:1f:73:ef:6a:32:3c:c5:35:3a:a4:14:
                    7b:e2:c7:f8:eb:0f:43:d2:40:25:ba:80:9e:af:ea:
                    8d:a3:37:b3:0d:64:4a:50:7a:fe:88:1e:be:62:ac:
                    bd:62:30:d1:f1:75:7a:eb:db:16:57:ca:4a:b8:e7:
                    18:5c:1d:f8:a7:e3:cf:e6:cd:c8:ac:c2:b4:76:f7:
                    86:39:3b:6c:96:58:56:29:9d:bc:3d:e2:88:fd:15:
                    c6:18:ce:dc:04:fa:17:c3:24:34:a2:86:16:ae:f7:
                    6d:c4:cf:a8:a5:12:79:e0:2d:eb:4e:6c:8d:18:f4:
                    64:a4:4a:9f:31:5b:fe:45:47:fd:f6:4a:57:44:db:
                    4e:94:69:38:ff:62:3d:c8:30:63:b3:db:e6:01:fc:
                    09:39:30:3c:25:47:f9:28:07:80:b9:4c:f3:7d:01:
                    3a:13:58:28:e2:82:93:84:f5:36:e6:55:ab:78:25:
                    bb:bd:ec:d0:d7:e8:a5:a6:fd:c1:54:7f:99:2b:8c:
                    ba:70:71:54:28:67:f5:9f:4a:57:9c:73:b9:4f:79:
                    2b:b7:3e:3d:1f:30:e1:e2:28:e9:42:69:d0:22:25:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6E:BE:A6:4C:46:4D:FF:30:17:7B:57:D6:02:8B:67:D1:EE:86:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ae:9e:b1:a5:21:47:cc:80:b7:7f:6d:00:58:38:ff:5f:1c:
         c1:9f:4e:05:23:66:a6:9a:b5:38:a8:b8:27:79:38:e2:c7:6a:
         d4:e9:1c:97:52:f4:4b:93:d8:87:76:ea:ab:d4:e8:a0:35:16:
         e2:73:02:bb:06:18:a2:e1:a9:08:3b:0c:f1:32:3a:88:24:4f:
         8c:c6:64:69:8e:de:62:37:f2:30:02:70:4d:88:60:1a:ef:a2:
         50:f1:75:da:17:4f:f9:45:8e:97:0a:37:65:bb:c9:2b:f5:26:
         61:4c:0a:ba:91:4e:9e:65:73:20:a0:7e:b9:bc:94:71:6b:84:
         6d:db:76:58:da:5e:6b:9a:15:a1:f8:63:c0:0c:d3:a1:24:91:
         05:89:ff:39:76:11:91:af:cd:23:80:46:59:71:31:46:39:2d:
         46:2b:10:ee:2f:59:6b:f1:de:7a:72:15:ae:48:de:78:31:41:
         f7:95:bc:11:95:37:24:ad:8c:96:b3:b3:22:1e:b2:80:76:0b:
         35:f6:b6:8f:3b:57:4b:c0:c3:7f:f6:e9:1c:63:a0:28:60:96:
         1d:b5:9f:8a:30:d8:e5:0b:8b:10:50:5c:18:4a:82:03:32:86:
         c0:98:0e:61:5b:b4:a9:9d:99:63:d6:09:98:fb:8f:bf:d4:9a:
         3d:91:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 13:11:03 2023 by rpki-client on console-fra.rpki-client.org