Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AsVfCW8UvQPRc_ZdFBWjNVtu1X8.cer
File:                     AsVfCW8UvQPRc_ZdFBWjNVtu1X8.cer (raw, json)
Hash identifier:          snPoP7pGMF2m5zm/kZ1ZQYjCNi6uTEVZ5T9KivXfpgU=
Subject key identifier:   02:C5:5F:09:6F:14:BD:03:D1:73:F6:5D:14:15:A3:35:5B:6E:D5:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A946E2459B527DC0C151A951FA9462EB0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://0.sb/repo/sb/18/02C55F096F14BD03D173F65D1415A3355B6ED57F.mft
caRepository:             rsync://0.sb/repo/sb/18/
Notify URL:               https://0.sb/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 16:02:40 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.145.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:94:6e:24:59:b5:27:dc:0c:15:1a:95:1f:a9:46:2e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 14 16:02:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=02c55f096f14bd03d173f65d1415a3355b6ed57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:33:d0:25:62:f8:bf:5d:8f:1c:d1:51:2c:
                    1d:6b:bb:aa:68:3d:5c:79:94:af:44:19:0b:34:58:
                    5a:ad:aa:33:2b:9c:de:e3:92:32:ad:5d:ba:06:4a:
                    6a:f1:66:0e:3c:89:2f:04:ec:91:66:b0:ad:21:87:
                    fe:a0:ae:6f:8d:78:12:13:8f:0d:eb:5e:18:06:87:
                    16:4f:65:b9:2c:79:28:47:7d:c5:ee:fa:12:e9:9d:
                    a7:cf:01:0b:51:e9:21:f8:02:78:ce:20:e9:da:4a:
                    b0:52:48:52:1b:a3:95:aa:64:8c:97:63:fa:4f:5c:
                    d8:e1:c6:15:78:3a:7e:f5:d8:eb:65:53:e3:9e:d8:
                    33:e1:00:ee:51:3b:0e:bc:3f:ff:7b:db:9d:23:00:
                    9c:8e:6c:be:98:f9:3f:cf:b1:45:b0:83:72:82:af:
                    9e:18:91:f1:bb:f6:7d:4f:51:b4:40:9f:f1:77:92:
                    52:6b:5f:b8:18:61:ab:6c:0b:3b:64:84:7b:a9:f4:
                    a3:ba:66:8d:c2:47:ac:23:5e:51:43:0c:c4:3b:be:
                    c4:e8:29:da:a8:40:c4:86:2e:1a:4b:c8:3c:8b:90:
                    9b:27:52:48:32:5f:a7:41:09:98:1d:3d:54:cb:24:
                    2f:c5:95:5c:2e:a9:e2:d2:ed:80:71:83:69:17:c5:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C5:5F:09:6F:14:BD:03:D1:73:F6:5D:14:15:A3:35:5B:6E:D5:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://0.sb/repo/sb/18/
                RPKI Manifest - URI:rsync://0.sb/repo/sb/18/02C55F096F14BD03D173F65D1415A3355B6ED57F.mft
                RPKI Notify - URI:https://0.sb/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:83:6e:f1:25:75:46:46:2d:bc:7d:a1:39:59:cb:3c:61:13:
         0d:68:7f:5e:75:28:6e:bf:bd:d4:73:92:2b:fa:d6:18:7e:14:
         93:f5:34:2a:60:07:3e:d4:e1:d2:52:63:ac:f5:0d:8e:4a:81:
         b3:40:3b:03:4a:e4:86:1b:36:7b:8a:93:d5:7e:ac:27:4a:30:
         cd:b5:54:23:e4:b8:57:85:3d:be:e9:50:9a:db:0b:2e:d0:17:
         bd:88:b3:e2:2e:17:07:4f:e9:b9:08:33:74:dd:dd:c2:aa:d5:
         f2:d1:52:29:ee:bb:5d:97:1e:13:c1:53:07:53:de:7f:bb:78:
         1c:91:f0:ab:ba:e5:16:d2:4d:c4:7f:50:7c:c1:6e:5d:d9:1b:
         01:37:70:80:2b:bf:3e:b9:c1:c4:bd:fd:e6:47:7b:d0:8a:9b:
         3a:0d:26:80:65:39:7e:16:da:0b:10:7f:3d:31:10:1b:82:bd:
         aa:f6:a8:b9:fa:9d:f2:89:98:07:94:48:5f:71:18:b5:f3:ce:
         00:67:ac:c8:41:d7:da:3f:8d:b6:9f:33:d8:ec:14:d7:2c:16:
         07:d5:c6:ec:48:c3:9a:13:3f:41:72:0d:03:12:b5:79:24:78:
         27:b4:89:50:39:10:50:6f:15:4e:76:bb:f8:47:74:61:e4:da:
         73:7a:74:3e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYqUbiRZtSfcDBUalR+pRi6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwOTE0MTYwMjQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmM1NWYwOTZmMTRiZDAzZDE3M2Y2NWQxNDE1YTMzNTViNmVkNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAposz0CVi+L9djxzRUSwda7uqaD1c
eZSvRBkLNFharaozK5ze45IyrV26Bkpq8WYOPIkvBOyRZrCtIYf+oK5vjXgSE48N
614YBocWT2W5LHkoR33F7voS6Z2nzwELUekh+AJ4ziDp2kqwUkhSG6OVqmSMl2P6
T1zY4cYVeDp+9djrZVPjntgz4QDuUTsOvD//e9udIwCcjmy+mPk/z7FFsINygq+e
GJHxu/Z9T1G0QJ/xd5JSa1+4GGGrbAs7ZIR7qfSjumaNwkesI15RQwzEO77E6Cna
qEDEhi4aS8g8i5CbJ1JIMl+nQQmYHT1UyyQvxZVcLqni0u2AcYNpF8UtSQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFALFXwlvFL0D0XP2XRQVozVbbtV/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgbgGCCsGAQUFBwELBIGrMIGoMCQGCCsGAQUFBzAFhhhyc3lu
YzovLzAuc2IvcmVwby9zYi8xOC8wUAYIKwYBBQUHMAqGRHJzeW5jOi8vMC5zYi9y
ZXBvL3NiLzE4LzAyQzU1RjA5NkYxNEJEMDNEMTczRjY1RDE0MTVBMzM1NUI2RUQ1
N0YubWZ0MC4GCCsGAQUFBzANhiJodHRwczovLzAuc2IvcnJkcC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAkhORMA0GCSqGSIb3DQEBCwUAA4IBAQBQg27xJXVGRi28faE5Wcs8
YRMNaH9edShuv73Uc5Ir+tYYfhST9TQqYAc+1OHSUmOs9Q2OSoGzQDsDSuSGGzZ7
ipPVfqwnSjDNtVQj5LhXhT2+6VCa2wsu0Be9iLPiLhcHT+m5CDN03d3CqtXy0VIp
7rtdlx4TwVMHU95/u3gckfCruuUW0k3Ef1B8wW5d2RsBN3CAK78+ucHEvf3mR3vQ
ips6DSaAZTl+FtoLEH89MRAbgr2q9qi5+p3yiZgHlEhfcRi1884AZ6zIQdfaP422
nzPY7BTXLBYH1cbsSMOaEz9Bcg0DErV5JHgntIlQORBQbxVOdrv4R3Rh5NpzenQ+
-----END CERTIFICATE-----
Generated at Fri Nov 17 16:04:37 2023 by rpki-client on console-ams.rpki-client.org