Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
File:                     9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer (raw, json)
Hash identifier:          NZbSHLLKBwgFUU21Jdsndy3qKpg1n04J/13DfZ1l9T0=
Subject key identifier:   F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC727694467F36C50ECA0D32120122517
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 22:31:38 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 201366
                          IP: 185.77.12.0/22
                          IP: 2a05:5f40::/29

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 13:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:69:44:67:f3:6c:50:ec:a0:d3:21:20:12:25:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:31:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f5150a23aac420feecabfc9b5baf9f024056333a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:4b:08:cb:c2:c1:70:cb:1f:58:62:c2:56:
                    9e:a8:da:6f:02:e7:85:b9:bd:81:9e:7e:ee:12:7c:
                    55:ef:8d:05:ff:43:f8:9f:f3:82:c0:e4:69:1b:fc:
                    21:00:65:44:d1:1c:db:e6:47:a6:b2:1c:19:8a:6d:
                    cc:2e:4f:41:35:ec:81:3f:a6:45:a8:52:61:4b:11:
                    aa:7f:e7:37:64:d6:87:90:cc:39:40:b9:91:9e:87:
                    44:d5:55:e2:20:08:26:64:5a:8e:6a:93:a7:a7:1a:
                    18:0e:ef:b6:5e:7f:f4:6c:68:a3:9d:61:52:7f:13:
                    f5:3d:84:3f:16:de:76:97:7b:d6:19:76:27:cd:c2:
                    75:a3:5d:3c:31:6f:60:5d:05:1d:ae:dd:83:37:5e:
                    a4:9a:cd:2e:54:bb:25:94:31:8b:cd:b5:1e:af:fc:
                    4a:f2:4a:fa:d2:ac:4f:4f:4a:d7:2a:f4:dc:24:26:
                    6a:09:91:a4:67:a7:f1:0c:3b:a1:4a:e8:a0:f6:1e:
                    d6:b8:70:0c:1a:63:23:b2:88:e4:4e:d1:a5:4d:4e:
                    1a:61:29:93:9c:a8:1a:6f:18:df:3c:de:b5:75:bb:
                    a2:ce:67:96:71:00:6c:51:84:93:ed:d3:17:f0:7f:
                    79:77:69:e7:df:90:22:00:fb:1f:6c:46:fb:b9:6f:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.12.0/22
                IPv6:
                  2a05:5f40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201366

    Signature Algorithm: sha256WithRSAEncryption
         74:f9:23:33:88:c8:c3:93:50:84:5e:4e:27:40:65:bc:b5:45:
         08:19:11:ef:2a:02:d2:4a:fa:64:09:41:71:d2:f3:07:cb:32:
         dd:ea:c1:25:e8:60:1b:91:94:61:e4:e6:59:d0:cc:95:b0:c6:
         05:0f:e2:8b:70:1d:23:17:c2:4d:c4:70:16:af:65:de:9e:80:
         e9:bc:8c:dc:39:dd:0d:40:66:0b:59:06:61:6e:5a:a7:2a:ed:
         55:df:6e:c9:80:99:ff:04:12:91:cf:25:5f:83:08:83:35:88:
         5c:44:ce:50:bf:da:4c:93:93:bd:52:70:81:af:d9:6a:2b:8e:
         ed:74:d4:40:c0:11:fa:2c:ac:b6:cd:03:df:ef:1f:21:01:67:
         44:de:d5:7e:03:80:e7:e2:87:5b:5b:80:e3:03:27:95:69:4a:
         b2:22:ad:5c:02:50:f7:ce:58:a2:22:d1:ee:54:78:9f:03:39:
         63:93:b7:fc:0e:68:1e:54:47:98:f3:d3:e1:5e:bf:7e:d9:be:
         6f:14:64:75:b9:9d:dd:c3:76:d0:ba:13:86:32:df:00:b8:1b:
         ca:72:58:d0:8b:98:83:4d:0f:22:dc:6d:d2:37:14:b8:b3:0d:
         0a:a6:b9:c7:0e:2a:a8:6f:3d:37:48:b2:c8:ef:8e:1b:0e:76:
         de:8c:e6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 16:07:45 2024 by rpki-client on console-ams.rpki-client.org