Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9VQfij3dxY1c_0K2D459Kc12G6U.cer
File:                     9VQfij3dxY1c_0K2D459Kc12G6U.cer (raw, json)
Hash identifier:          nLmj6ochPnTIqqsu/Y0kbwZDy2etnIajp8JNbqW/1io=
Subject key identifier:   F5:54:1F:8A:3D:DD:C5:8D:5C:FF:42:B6:0F:8E:7D:29:CD:76:1B:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC500836E1C69FE0F2642DEB23A640E4F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/9VQfij3dxY1c_0K2D459Kc12G6U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:29:54 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 8775
                          IP: 195.69.156.0/22

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 11:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:83:6e:1c:69:fe:0f:26:42:de:b2:3a:64:0e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:29:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f5541f8a3dddc58d5cff42b60f8e7d29cd761ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:3d:1d:8d:46:eb:6b:8a:7c:e0:96:31:df:
                    67:c1:9a:e3:f9:78:7d:25:21:4b:44:5c:28:d9:c8:
                    2a:49:75:ec:45:8b:de:56:48:7a:f7:68:88:8b:ba:
                    77:75:bf:34:4c:39:9d:3c:6d:59:bb:08:19:b9:34:
                    4e:94:fe:9f:ac:55:45:9e:b0:45:18:9d:10:f8:61:
                    67:7f:92:7b:60:09:94:a0:e8:24:e3:67:16:dd:cf:
                    8f:0e:d7:58:e6:60:7d:a0:82:39:f2:65:26:85:29:
                    f5:cf:71:a4:fb:0f:92:ea:49:c8:7f:7d:3f:be:28:
                    8b:65:3e:44:aa:e8:ee:19:41:06:97:52:b7:d1:4d:
                    2d:4d:a3:30:f3:c8:97:b9:e3:29:bd:0a:f3:be:21:
                    aa:86:0f:07:b1:1f:bb:85:3f:29:c6:50:10:93:04:
                    0a:be:8c:34:10:32:19:5a:68:95:e1:b6:eb:96:83:
                    6d:67:ee:e7:80:61:f9:4c:e6:3c:7d:59:ab:46:11:
                    2c:dc:84:c9:e4:ea:84:47:27:7e:52:76:ec:51:70:
                    43:b7:4a:d9:3c:8f:d9:06:b0:8e:9c:67:1d:e4:c2:
                    30:af:0c:77:9d:12:22:cf:92:72:84:21:e4:5d:74:
                    38:3b:3c:55:f6:06:91:3c:a7:cc:c1:b7:27:07:00:
                    b9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:54:1F:8A:3D:DD:C5:8D:5C:FF:42:B6:0F:8E:7D:29:CD:76:1B:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/9VQfij3dxY1c_0K2D459Kc12G6U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.69.156.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8775

    Signature Algorithm: sha256WithRSAEncryption
         54:f4:fb:74:db:9c:31:e7:9c:50:23:ca:30:54:f1:7c:2b:a5:
         16:1d:82:a8:b3:8d:9c:e0:78:a8:de:fa:b6:3d:d1:19:2e:8f:
         7e:20:34:3e:9b:96:e6:30:bc:45:69:62:cc:61:8a:7e:66:7d:
         87:13:e9:4c:29:a6:95:4f:ef:a6:f5:f4:39:de:e0:46:41:c4:
         49:e4:87:1a:18:a7:eb:c1:ba:30:df:a5:45:b3:db:05:85:28:
         e0:c2:fc:de:b4:e4:70:53:b7:9c:fb:19:6a:b8:e2:3b:f4:ab:
         a8:9f:2f:fe:94:e1:86:00:f1:d7:92:a9:3a:e2:94:9a:c3:c2:
         88:d5:38:ea:1e:b8:ce:c2:42:7c:b3:1c:f4:d5:0f:42:b5:91:
         7c:47:d9:3d:74:47:56:a4:b9:60:1f:cb:1b:12:bf:07:68:fb:
         29:20:71:fb:12:8b:72:59:02:91:d9:7a:6b:70:2e:02:94:71:
         b0:6d:e0:5f:85:58:20:6f:79:f7:75:2b:0c:e2:53:82:85:79:
         b7:cf:3b:24:7e:58:4e:05:91:de:5e:51:83:51:f2:14:23:23:
         65:a9:db:25:51:e1:4e:23:e4:bc:45:28:72:fb:60:93:39:59:
         46:79:b2:28:94:30:5a:2b:e3:cd:9b:5d:9c:54:ed:ee:ab:b6:
         73:59:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 14:29:40 2024 by rpki-client on console-fra.rpki-client.org