Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer
File:                     7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer (raw, json)
Hash identifier:          gzirs8DxiUX5vH/Uzd7KmLOtLn2RheYGoAYhsvcOpZc=
Subject key identifier:   EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01887D972C1BAA3599EFB1FFC11FCF0B667F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 19:30:39 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.23.219.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7d:97:2c:1b:aa:35:99:ef:b1:ff:c1:1f:cf:0b:66:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  2 19:30:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee86e2ddfd96bef0c172ca751a5d98d8245e612e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:69:c6:31:f8:08:53:6f:0b:41:df:37:18:
                    8b:99:e0:71:12:f1:7a:23:74:f3:12:15:0e:3f:63:
                    bd:b0:1e:28:53:95:82:70:d8:ed:2d:92:ea:2f:90:
                    de:c2:f8:70:92:75:22:7b:db:6d:a9:eb:6c:31:58:
                    1a:36:36:34:76:14:2b:fd:1f:ea:77:37:59:d1:c3:
                    eb:28:13:75:ad:a7:a3:7a:ce:8c:37:8f:f7:4f:ac:
                    e6:5a:93:47:d2:0f:7a:d4:ba:13:eb:4c:62:eb:ab:
                    a4:1c:68:09:6e:f5:7c:ef:b9:ca:09:2f:bd:f6:2b:
                    c9:17:d1:72:e3:c9:9c:45:e0:b9:96:5b:37:65:c5:
                    ba:8e:85:a7:9b:7c:27:14:19:28:c2:75:0e:b6:38:
                    55:ac:68:a9:d9:ee:fb:d3:34:9c:ef:c9:53:c6:bb:
                    60:9a:cd:b6:ba:ec:22:af:ff:57:b7:32:63:95:63:
                    62:32:0a:13:80:39:52:4c:26:34:4c:6f:fa:6e:f7:
                    3e:95:1f:c6:a0:8d:54:f2:31:9b:d4:21:95:c9:16:
                    d5:fc:f4:18:a4:cf:6a:13:95:78:8b:b0:c4:4b:a5:
                    92:31:b2:46:cc:97:1e:94:40:f7:be:60:49:4e:62:
                    a7:74:11:71:77:a6:45:96:d0:3c:6e:f2:06:85:9c:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6c:4c:63:f6:20:7c:77:7b:42:5b:93:10:91:52:c9:fa:5d:
         2a:ff:9f:d4:6b:03:be:50:57:93:ee:ab:5f:04:c1:77:e5:ad:
         57:98:6d:2f:af:be:4a:77:18:07:0a:f5:9a:b8:fc:2c:8d:a8:
         d5:69:a8:87:f2:83:9c:b0:b4:8c:75:1e:c7:57:ef:64:e6:32:
         9b:a4:7c:cd:2e:36:59:7c:6e:80:96:27:39:89:5d:63:17:f3:
         0e:34:2a:4e:ca:ba:ef:1f:b7:40:ec:2c:a5:b1:5b:32:f6:dd:
         72:5d:96:a5:34:19:5c:06:d1:4e:9c:99:02:ea:7e:5e:37:6a:
         ca:fa:b7:9d:21:77:49:2b:5f:23:57:c2:7e:04:1f:31:01:17:
         65:03:02:68:b2:bc:08:6f:c4:3d:03:d7:32:25:a5:3b:d8:c5:
         c9:67:6a:d2:48:f0:a9:cd:7d:c9:57:67:43:78:a3:c7:41:09:
         8c:36:bf:d0:cb:56:54:4d:b7:7a:b6:f3:1c:3d:2f:ee:78:8a:
         d2:34:59:0d:20:a4:54:b7:56:20:93:13:81:80:8d:81:ad:6a:
         38:d1:1a:9b:22:6f:d6:53:bd:b7:0a:3c:45:74:14:a4:29:48:
         4b:3d:13:1d:eb:02:dd:a1:f8:fa:f5:8d:fd:65:89:16:2b:24:
         da:55:35:28
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYh9lywbqjWZ77H/wR/PC2Z/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNjAyMTkzMDM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTg2ZTJkZGZkOTZiZWYwYzE3MmNhNzUxYTVkOThkODI0NWU2MTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwBpxjH4CFNvC0HfNxiLmeBxEvF6
I3TzEhUOP2O9sB4oU5WCcNjtLZLqL5DewvhwknUie9ttqetsMVgaNjY0dhQr/R/q
dzdZ0cPrKBN1raejes6MN4/3T6zmWpNH0g961LoT60xi66ukHGgJbvV877nKCS+9
9ivJF9Fy48mcReC5lls3ZcW6joWnm3wnFBkownUOtjhVrGip2e770zSc78lTxrtg
ms22uuwir/9XtzJjlWNiMgoTgDlSTCY0TG/6bvc+lR/GoI1U8jGb1CGVyRbV/PQY
pM9qE5V4i7DES6WSMbJGzJcelED3vmBJTmKndBFxd6ZFltA8bvIGhZzl5wIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFO6G4t39lr7wwXLKdRpdmNgkXmEuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViYWEz
OWE0LWIwZTItNDEwNy1hZmI5LTJiZTA5Y2Q2ZWMwZS8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNWJh
YTM5YTQtYjBlMi00MTA3LWFmYjktMmJlMDljZDZlYzBlLzAvRUU4NkUyRERGRDk2
QkVGMEMxNzJDQTc1MUE1RDk4RDgyNDVFNjEyRS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANQX2zANBgkqhkiG9w0BAQsFAAOCAQEAqGxMY/YgfHd7QluTEJFSyfpdKv+f1GsD
vlBXk+6rXwTBd+WtV5htL6++SncYBwr1mrj8LI2o1Wmoh/KDnLC0jHUex1fvZOYy
m6R8zS42WXxugJYnOYldYxfzDjQqTsq67x+3QOwspbFbMvbdcl2WpTQZXAbRTpyZ
Aup+Xjdqyvq3nSF3SStfI1fCfgQfMQEXZQMCaLK8CG/EPQPXMiWlO9jFyWdq0kjw
qc19yVdnQ3ijx0EJjDa/0MtWVE23erbzHD0v7niK0jRZDSCkVLdWIJMTgYCNga1q
ONEamyJv1lO9two8RXQUpClISz0THesC3aH4+vWN/WWJFisk2lU1KA==
-----END CERTIFICATE-----
Generated at Wed Nov 29 10:55:27 2023 by rpki-client on console-fra.rpki-client.org