Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B-Ao92x5plHfcKmT896wUtWQT3s.cer
File:                     B-Ao92x5plHfcKmT896wUtWQT3s.cer (raw, json)
Hash identifier:          PYFKa4Vml/7iH6oplNh3Aa8gN5i3htOHgtoa/1KJKMs=
Subject key identifier:   07:E0:28:F7:6C:79:A6:51:DF:70:A9:93:F3:DE:B0:52:D5:90:4F:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185B9DB12AE845A48049C6430F5C6A89313
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/B-Ao92x5plHfcKmT896wUtWQT3s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 16 Jan 2023 09:13:40 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 210315
                          IP: 91.231.200.0/22
                          IP: 195.88.254.0/23
                          IP: 2a09:f840::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:b9:db:12:ae:84:5a:48:04:9c:64:30:f5:c6:a8:93:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 16 09:13:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07e028f76c79a651df70a993f3deb052d5904f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:bb:78:72:76:e6:75:0d:96:ae:a7:97:25:
                    40:5c:15:90:58:ff:dc:7b:d1:2e:68:e8:1d:39:58:
                    34:67:0e:a2:f0:17:5b:9b:e5:8c:76:93:6b:62:ee:
                    25:4e:c8:29:33:d1:e4:56:fb:24:58:e8:53:ff:bc:
                    ea:d2:b8:51:fd:cc:05:26:71:0b:72:d2:8a:bf:5b:
                    b0:fb:e7:e6:9a:e2:7e:38:a6:89:2b:65:de:e8:3c:
                    7e:83:17:e2:a9:33:ee:95:8c:8a:08:5e:c8:8b:9b:
                    c0:76:d0:46:cc:5e:d5:07:7d:b3:6b:a3:eb:38:ce:
                    10:22:75:f9:5d:71:58:df:66:4e:32:ff:fa:13:91:
                    4e:0d:48:f7:66:f6:eb:e5:56:d1:ed:e1:29:58:dd:
                    d6:9f:34:5a:b0:87:0b:79:94:c8:37:38:23:35:7d:
                    e2:b4:4e:7d:f8:f5:31:d8:5b:26:99:d6:9c:a3:9c:
                    43:07:bf:97:04:3a:73:42:11:eb:e9:75:72:c0:7a:
                    08:d0:a1:71:ad:67:5b:80:b4:20:22:02:1d:16:e6:
                    0f:d4:82:da:19:7d:a4:5b:c8:ff:a4:d5:00:f0:7b:
                    20:41:45:6b:1b:8d:7c:f4:e1:1a:a6:e3:5e:fc:0c:
                    9e:f6:1e:19:7e:3b:b3:0e:66:aa:da:d1:5c:14:5c:
                    1f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E0:28:F7:6C:79:A6:51:DF:70:A9:93:F3:DE:B0:52:D5:90:4F:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/B-Ao92x5plHfcKmT896wUtWQT3s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.200.0/22
                  195.88.254.0/23
                IPv6:
                  2a09:f840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210315

    Signature Algorithm: sha256WithRSAEncryption
         6c:42:70:f7:25:67:07:fd:ee:41:12:f3:bf:e6:d2:eb:95:a3:
         c7:cf:f4:82:92:36:1d:f0:56:be:7c:18:2e:f0:e6:d6:0b:74:
         5d:fc:85:70:f3:2b:42:d4:93:25:0c:ed:86:5b:31:05:5d:d7:
         3a:eb:c9:b5:20:18:16:7a:ce:27:24:7c:8c:09:61:20:bd:e2:
         7e:e2:5e:91:38:22:ff:60:ce:f4:63:d7:ca:21:ba:31:4e:e0:
         51:65:1d:0d:bd:de:b0:4b:1b:3e:48:fc:b8:66:42:9f:ac:b9:
         af:9c:1c:8d:e6:27:7e:af:37:7c:1b:eb:68:a9:6f:73:65:48:
         fa:c6:0d:74:0c:d7:51:67:f9:4f:66:3f:29:f7:b0:8d:85:39:
         13:af:64:a0:08:dc:81:d3:97:8f:77:31:5c:a9:98:48:6b:74:
         da:d9:6a:26:c6:81:ca:a5:f2:aa:d3:c3:f2:0b:db:02:71:e3:
         25:16:1b:41:28:fc:d8:98:a1:7c:7f:d8:70:a2:f3:83:08:7e:
         c1:c4:3b:39:a0:74:b7:ef:35:24:01:8b:f5:6b:43:13:9f:d4:
         fe:fb:71:94:48:32:35:07:f9:dd:ee:88:fd:13:1c:5a:34:01:
         74:1a:45:2b:37:49:5c:61:25:26:2f:d6:7d:72:9f:a3:f1:26:
         e5:97:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 11:30:37 2023 by rpki-client on console-fra.rpki-client.org