Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6WUTyUzja7iSgervNEseUaEHeMo.cer
File:                     6WUTyUzja7iSgervNEseUaEHeMo.cer (raw, json)
Hash identifier:          Pk9qo0boBEaN3N8sal4PnhYjuYcyMmyGbX81nLtEZTA=
Subject key identifier:   E9:65:13:C9:4C:E3:6B:B8:92:81:EA:EF:34:4B:1E:51:A1:07:78:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC726A97238085846EA24BA77F454EBFA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/0a8963-8919-4a88-a37c-db1935697889/1/6WUTyUzja7iSgervNEseUaEHeMo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/0a8963-8919-4a88-a37c-db1935697889/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 22:30:48 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 48855
                          IP: 91.212.59.0/24

Validation:               Failed, certificate revoked on Tue 19 Mar 2024 12:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:26:a9:72:38:08:58:46:ea:24:ba:77:f4:54:eb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:30:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e96513c94ce36bb89281eaef344b1e51a10778ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:6e:4d:b9:f0:e2:cd:f3:c4:9e:64:55:73:
                    30:7e:e2:79:91:b6:cc:dc:cf:5f:96:8d:7d:e0:c9:
                    92:f0:47:e9:2e:c4:ac:53:9d:47:c3:f9:b4:d7:57:
                    35:b1:65:cf:c8:e7:5f:cd:be:b7:ca:b1:fd:a7:bf:
                    bf:c6:cf:57:7b:93:c4:72:75:b0:98:59:68:53:ce:
                    d6:43:34:67:c7:e6:9a:01:e3:8b:f2:4f:a3:c0:38:
                    68:ac:5e:17:25:d4:05:54:d4:c7:23:f1:5c:31:5e:
                    eb:ac:02:9b:20:ae:0f:15:f0:0d:2d:9f:b4:b8:2a:
                    a6:5f:ac:7e:07:32:38:02:96:c4:63:c2:fc:a7:c9:
                    bd:c0:a8:9a:b3:01:66:03:2d:99:43:18:c2:ff:24:
                    44:f8:ee:1c:ec:6e:eb:58:c3:c6:39:f4:9b:0c:c1:
                    9e:40:9c:a5:e3:af:da:36:e3:d5:12:72:b3:44:f3:
                    ac:d8:c7:ab:81:5d:23:e5:cc:dc:49:d0:ed:e7:3e:
                    81:23:1b:f2:d8:ab:36:19:e8:84:2f:aa:06:79:d1:
                    25:60:26:1b:ea:34:c1:e5:c6:b1:2f:6f:c9:a9:08:
                    99:a2:b0:58:c8:97:cf:9b:d8:7f:88:ad:ef:9e:80:
                    e4:77:9a:02:82:a8:a4:49:02:a5:0c:3d:9d:a3:bf:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:65:13:C9:4C:E3:6B:B8:92:81:EA:EF:34:4B:1E:51:A1:07:78:CA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0a8963-8919-4a88-a37c-db1935697889/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0a8963-8919-4a88-a37c-db1935697889/1/6WUTyUzja7iSgervNEseUaEHeMo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.59.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48855

    Signature Algorithm: sha256WithRSAEncryption
         83:44:0b:b6:d0:4a:09:3f:d0:fb:7d:dc:0c:66:cb:06:ed:b9:
         22:18:ef:df:39:c2:03:64:e9:8b:b0:c1:49:ad:12:ab:84:33:
         08:6e:e5:a9:a9:5e:2b:c3:6b:c4:05:a9:75:84:1c:82:3f:53:
         3e:82:a8:4a:1e:6b:2e:c0:51:45:ba:9a:05:7a:ba:cc:a6:b4:
         ae:45:d4:b8:6d:4e:06:7c:6a:d8:7e:ab:27:47:46:ae:6d:81:
         55:90:24:9b:00:e8:1b:14:f5:c6:d3:c0:2b:bb:cf:a1:81:66:
         e8:e2:b6:1e:ae:f8:b5:d1:11:25:7a:5a:2d:2c:e6:07:5e:11:
         ad:71:66:ee:e5:7a:72:66:8f:82:be:2d:64:c8:5d:d1:25:80:
         93:bb:73:1c:7d:02:4e:fe:a8:df:a7:bf:cb:82:a4:25:28:90:
         b5:66:5c:c8:ed:11:cf:da:f6:61:c0:5e:cc:2d:a1:2c:62:5d:
         15:44:ef:91:31:51:16:9e:be:36:a4:0b:90:3f:83:42:95:72:
         43:2d:cd:dd:d3:80:3d:33:7a:20:c1:9a:b5:40:dd:7e:d2:fb:
         6f:70:f3:07:ab:64:84:73:41:27:e6:8e:1d:db:d6:d8:9e:da:
         3e:0c:b1:1a:67:65:55:c6:e3:9c:2c:5a:ad:3a:93:da:8e:a0:
         2c:5c:ec:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 15:17:43 2024 by rpki-client on console-ams.rpki-client.org