Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Wz3LG-rgqKmHnJybsErO5zmMQk.cer
File:                     4Wz3LG-rgqKmHnJybsErO5zmMQk.cer (raw, json)
Hash identifier:          sC1btCx81rPJuSPJMQuI5W2GM73A6Pp+IRpaDRe4HWk=
Subject key identifier:   E1:6C:F7:2C:6F:AB:82:A2:A6:1E:72:72:6E:C1:2B:3B:9C:E6:31:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0191B2022617D9C15BE00986B8DD052AE927
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c4/4645ec-30bc-47c4-9746-05b25e433f11/1/4Wz3LG-rgqKmHnJybsErO5zmMQk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c4/4645ec-30bc-47c4-9746-05b25e433f11/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Sep 2024 09:12:50 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2a0c:a900::/32
Validation:               Failed, certificate revoked on Mon 18 Nov 2024 08:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b2:02:26:17:d9:c1:5b:e0:09:86:b8:dd:05:2a:e9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep  2 09:12:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e16cf72c6fab82a2a61e72726ec12b3b9ce63109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3d:33:97:7a:58:4c:b8:a0:3c:42:8f:e7:82:
                    65:18:b6:f5:a6:71:d9:ed:be:3b:c2:79:39:15:d6:
                    09:c7:14:50:dc:1b:65:ed:8a:2f:0f:bd:87:e8:c8:
                    21:eb:35:d4:03:04:9e:e0:fe:83:fc:8f:ff:6d:a4:
                    19:79:b9:71:8a:15:49:75:78:9c:94:f0:55:91:88:
                    ec:bc:48:c7:a4:34:1f:7a:5b:43:8c:ac:7f:ab:20:
                    66:b1:41:3b:80:34:d5:4d:a6:50:c3:17:39:70:41:
                    a5:38:68:0b:c5:3f:fd:5b:f1:ac:38:d8:c3:0f:a9:
                    35:85:cc:bb:48:35:1e:19:75:a9:66:87:11:16:68:
                    cf:c0:e7:52:c8:e9:b0:4f:5c:eb:51:bd:bb:da:6f:
                    f1:fa:f5:71:20:ad:0e:c4:b0:80:b4:2a:b5:13:f9:
                    4c:d4:e7:56:e6:11:ca:48:1d:b5:8e:f1:c8:17:d3:
                    44:e3:0c:25:bc:31:aa:8a:e3:c6:c0:1b:d5:9e:bd:
                    19:19:b5:f8:d9:16:35:be:c2:c0:dd:0b:58:ea:55:
                    9c:5e:56:37:45:32:af:cc:48:00:17:2e:d0:c9:3b:
                    a7:58:36:16:0e:7b:80:92:03:24:1a:aa:14:a4:08:
                    fe:06:57:7e:c0:d2:a9:16:be:59:5e:d7:f7:af:9e:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6C:F7:2C:6F:AB:82:A2:A6:1E:72:72:6E:C1:2B:3B:9C:E6:31:09
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4645ec-30bc-47c4-9746-05b25e433f11/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4645ec-30bc-47c4-9746-05b25e433f11/1/4Wz3LG-rgqKmHnJybsErO5zmMQk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:a900::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:83:dc:ef:6e:4a:91:65:25:2f:5d:d1:78:ac:b1:c9:0e:7a:
         d0:8f:76:f2:74:e5:f7:b3:47:1f:fa:74:04:ec:31:5d:f3:08:
         02:7a:78:e9:d7:d2:18:97:2c:7f:45:cb:d6:00:ac:da:e7:df:
         8b:29:1b:01:ec:d8:51:f8:63:a0:26:0c:fe:bb:4e:fb:c0:b4:
         6a:08:a1:6c:de:cf:b0:e9:10:0d:5b:11:3e:6a:e0:64:7f:1a:
         76:4a:1a:0d:da:b6:0d:1f:f7:c5:c7:3c:2c:a6:63:34:41:88:
         b2:6d:8a:3c:22:41:b7:0f:8a:85:1c:bb:a0:d2:59:63:67:c7:
         20:8b:d8:2e:f7:57:08:e4:56:86:18:82:90:b6:52:bf:5c:64:
         fd:a7:19:d5:c7:b4:02:90:ad:f0:2e:c8:2e:0e:56:69:57:96:
         aa:c0:5f:79:b2:93:54:12:fc:7d:d6:ea:90:5a:79:53:9a:db:
         87:97:be:9e:29:17:6a:61:f0:9a:a8:92:7f:9f:e9:29:da:dc:
         92:bc:c2:8f:54:65:76:da:4b:30:72:9a:49:98:41:71:a1:6d:
         2d:84:14:bd:1d:a6:7e:cd:06:a8:31:c6:8e:95:6d:93:81:eb:
         95:ee:43:b9:50:3f:66:b5:e7:6b:eb:57:c5:6a:c7:55:7e:e2:
         a0:ca:5f:cc
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZGyAiYX2cFb4AmGuN0FKuknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTAyMDkxMjUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTZjZjcyYzZmYWI4MmEyYTYxZTcyNzI2ZWMxMmIzYjljZTYzMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D0zl3pYTLigPEKP54JlGLb1pnHZ
7b47wnk5FdYJxxRQ3Btl7YovD72H6Mgh6zXUAwSe4P6D/I//baQZeblxihVJdXic
lPBVkYjsvEjHpDQfeltDjKx/qyBmsUE7gDTVTaZQwxc5cEGlOGgLxT/9W/GsONjD
D6k1hcy7SDUeGXWpZocRFmjPwOdSyOmwT1zrUb272m/x+vVxIK0OxLCAtCq1E/lM
1OdW5hHKSB21jvHIF9NE4wwlvDGqiuPGwBvVnr0ZGbX42RY1vsLA3QtY6lWcXlY3
RTKvzEgAFy7QyTunWDYWDnuAkgMkGqoUpAj+Bld+wNKpFr5ZXtf3r57E8wIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFOFs9yxvq4Kiph5ycm7BKzuc5jEJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzQ2NDVl
Yy0zMGJjLTQ3YzQtOTc0Ni0wNWIyNWU0MzNmMTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNDY0NWVj
LTMwYmMtNDdjNC05NzQ2LTA1YjI1ZTQzM2YxMS8xLzRXejNMRy1yZ3FLbUhuSnli
c0VyTzV6bU1Ray5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAKgypADANBgkqhkiG9w0BAQsFAAOCAQEAeYPc
725KkWUlL13ReKyxyQ560I928nTl97NHH/p0BOwxXfMIAnp46dfSGJcsf0XL1gCs
2uffiykbAezYUfhjoCYM/rtO+8C0agihbN7PsOkQDVsRPmrgZH8adkoaDdq2DR/3
xcc8LKZjNEGIsm2KPCJBtw+KhRy7oNJZY2fHIIvYLvdXCORWhhiCkLZSv1xk/acZ
1ce0ApCt8C7ILg5WaVeWqsBfebKTVBL8fdbqkFp5U5rbh5e+nikXamHwmqiSf5/p
KdrckrzCj1RldtpLMHKaSZhBcaFtLYQUvR2mfs0GqDHGjpVtk4Hrle5DuVA/ZrXn
a+tXxWrHVX7ioMpfzA==
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:36:20 2025 by rpki-client