Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7jslD113vKUhB7PWlBvjzWV__h8.cer
File:                     7jslD113vKUhB7PWlBvjzWV__h8.cer (raw, json)
Hash identifier:          WzJekg8rLiWQ0KunezpIqpzUv155mZItXE97NnzJc4o=
Subject key identifier:   EE:3B:25:0F:5D:77:BC:A5:21:07:B3:D6:94:1B:E3:CD:65:7F:FE:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC94D434BB68205A7951FF54E4A59B37A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/d2cfc0-566d-425e-8c2f-dcffcd3e94d5/1/7jslD113vKUhB7PWlBvjzWV__h8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/d2cfc0-566d-425e-8c2f-dcffcd3e94d5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 08:32:13 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 25158

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 11:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:43:4b:b6:82:05:a7:95:1f:f5:4e:4a:59:b3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:32:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ee3b250f5d77bca52107b3d6941be3cd657ffe1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5c:62:60:5c:b3:61:d5:d3:c5:aa:27:fd:8a:
                    ec:82:30:10:26:88:d9:fc:37:56:cc:bd:01:71:cd:
                    87:27:f8:19:31:6a:38:ef:d0:cb:8d:06:d2:57:87:
                    f2:f3:53:ee:42:8e:b7:fe:ff:3b:fb:59:89:4f:d3:
                    9e:40:5a:08:57:c8:54:90:87:09:d5:74:20:87:fd:
                    b5:79:78:84:78:a9:cc:55:07:33:16:9b:ce:dc:c6:
                    3c:b6:6d:5f:0a:6f:af:01:9b:db:e9:d1:a6:f7:8f:
                    9f:4f:ab:10:d6:0a:11:aa:05:82:ec:fa:53:1c:70:
                    b4:6a:ea:e3:ec:82:05:32:a4:77:35:b6:cd:be:3a:
                    46:51:c6:7e:c9:e2:40:7c:34:08:9e:00:2b:cc:df:
                    2d:88:e5:7a:13:16:5f:82:74:ff:45:ea:ee:8b:4a:
                    5e:86:c0:cb:0b:65:24:41:47:85:ab:c5:a5:f9:33:
                    8b:c0:80:08:7d:d7:d0:d5:d5:60:d1:e0:b5:6d:c6:
                    91:ac:aa:e1:bc:af:21:6f:64:a7:02:dc:9e:7c:74:
                    ab:b1:3a:2b:76:84:1d:46:88:67:c1:e6:91:f9:ad:
                    20:d5:12:d9:35:37:24:46:74:15:35:d5:7d:be:e6:
                    6d:36:fb:0f:23:02:80:d5:4d:27:d3:30:54:46:08:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3B:25:0F:5D:77:BC:A5:21:07:B3:D6:94:1B:E3:CD:65:7F:FE:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2cfc0-566d-425e-8c2f-dcffcd3e94d5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2cfc0-566d-425e-8c2f-dcffcd3e94d5/1/7jslD113vKUhB7PWlBvjzWV__h8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25158

    Signature Algorithm: sha256WithRSAEncryption
         30:b3:05:81:4b:79:ef:e5:f7:51:79:64:f7:db:44:cc:b7:95:
         3a:6a:0a:53:3a:7d:68:54:00:0d:bd:46:6e:a7:85:88:86:d0:
         4b:c2:47:be:3c:ff:06:72:72:e5:f6:36:78:6e:e3:c0:f2:99:
         09:72:55:41:a9:e8:69:62:af:43:91:b9:63:b9:ad:c3:0e:49:
         0a:3d:e0:fb:5c:72:76:28:98:d7:b2:df:af:24:6f:49:48:1c:
         32:78:b0:da:b2:83:09:23:41:6a:6f:a4:28:d0:56:b5:6f:cc:
         1d:ea:22:3e:f3:6a:1e:0d:fb:c4:a1:4b:3e:78:23:a1:6d:97:
         17:29:91:bd:07:ff:34:9b:1d:37:92:e0:22:51:43:e2:c7:ce:
         fb:fb:79:84:25:aa:39:3e:06:29:cd:25:c3:03:50:16:18:27:
         b5:6f:df:f4:93:19:03:4d:bb:80:42:b2:d0:91:ab:ad:dd:ee:
         be:46:0d:1f:39:ef:3e:c8:31:cb:59:58:c5:3d:f0:a4:c3:c5:
         58:1a:f3:bb:66:a1:b7:43:65:97:db:30:8b:f8:b4:db:bd:8d:
         48:60:13:8f:a7:2d:7d:25:aa:56:7a:ec:bc:3e:52:a0:85:0d:
         e4:c4:20:85:67:45:4c:f6:a8:25:e6:8e:c3:17:07:51:19:aa:
         5d:4d:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-fra.rpki-client.org