Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B0R6UQmqlfW1WAOlUs6eybt67eE.cer
File:                     B0R6UQmqlfW1WAOlUs6eybt67eE.cer (raw, json)
Hash identifier:          oiE0vIdJGg6PvDSVEBgPXFvMzvnE70bTEVRojVMjNZg=
Subject key identifier:   07:44:7A:51:09:AA:95:F5:B5:58:03:A5:52:CE:9E:C9:BB:7A:ED:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA2A49C0A5932AF4F09E3C3B9B3E01FF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5a/ee1d76-59bb-40b9-bc31-b06e20997889/1/B0R6UQmqlfW1WAOlUs6eybt67eE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5a/ee1d76-59bb-40b9-bc31-b06e20997889/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:33:38 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211939
                          IP: 2001:678:ab0::/48

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 14:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:49:c0:a5:93:2a:f4:f0:9e:3c:3b:9b:3e:01:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:33:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=07447a5109aa95f5b55803a552ce9ec9bb7aede1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:da:b3:8b:db:44:b8:d4:1c:92:f9:85:6c:
                    8c:5b:d0:d2:2c:6e:35:05:34:7f:a8:f1:0c:18:fd:
                    a0:95:81:55:93:66:0d:c5:72:e3:bf:34:9f:7a:8e:
                    f4:1f:bb:4f:f2:68:6c:76:ef:8d:ca:3f:e3:c5:76:
                    e4:18:ed:d0:25:00:5a:c6:71:06:9a:15:a3:e3:56:
                    e4:24:3c:01:6b:99:1b:86:07:c2:b6:91:c5:4c:91:
                    68:c0:d0:43:67:8b:8e:64:5f:f5:50:e3:a8:3a:e5:
                    85:60:47:48:2d:10:e3:09:5e:3e:4e:4e:ca:53:30:
                    78:78:03:00:73:f5:df:67:76:2d:f8:5f:2d:71:76:
                    fc:cb:27:39:d0:e6:68:db:77:92:a5:d9:6a:f6:59:
                    fb:a2:93:52:05:b1:e7:b6:c5:dd:94:41:80:f0:2b:
                    d2:a9:90:75:20:3f:73:de:73:af:ad:25:3f:17:b0:
                    fc:7d:7b:9a:88:f5:b2:0f:e9:5f:0c:9c:6a:d6:b9:
                    90:00:13:be:63:72:2b:aa:56:6e:cb:b0:54:d0:15:
                    37:a6:aa:38:4d:d3:35:53:8c:36:69:9b:98:5c:d8:
                    a5:9c:9b:56:58:8c:1c:81:2a:41:28:e4:ba:4b:6c:
                    0d:79:a5:f5:7b:33:96:9a:b1:e5:f4:2d:6f:2f:0e:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:44:7A:51:09:AA:95:F5:B5:58:03:A5:52:CE:9E:C9:BB:7A:ED:E1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee1d76-59bb-40b9-bc31-b06e20997889/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee1d76-59bb-40b9-bc31-b06e20997889/1/B0R6UQmqlfW1WAOlUs6eybt67eE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:ab0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211939

    Signature Algorithm: sha256WithRSAEncryption
         3c:59:55:69:54:e6:b0:ad:a5:c3:4d:94:0f:f7:d5:1c:bb:7d:
         41:87:7b:f4:3d:a8:1d:66:4a:c4:06:d3:2a:e3:90:54:eb:fd:
         c9:51:1a:07:b5:7d:08:34:07:90:9d:67:f8:21:e8:81:b4:3c:
         5a:0b:22:00:21:ad:f3:93:92:0d:d2:51:9e:02:55:cd:a0:46:
         96:71:a0:08:c6:70:51:a8:64:40:9d:f9:f6:e0:9b:3c:dd:eb:
         89:cf:b1:bd:93:8c:48:a6:47:b1:e0:bf:b0:b3:68:fb:17:b8:
         34:c5:38:ba:16:2b:b0:e8:7b:f8:f5:f7:9d:44:af:3a:da:e8:
         e5:b0:61:ed:f1:f7:67:81:a4:43:92:45:56:79:c5:5e:ef:f2:
         59:11:14:d5:5d:ff:68:ce:93:dd:6b:53:e8:a7:06:7b:99:8b:
         8e:b6:ef:49:68:e8:55:3c:87:9c:8a:20:c9:e6:47:a0:45:ae:
         02:08:a0:2b:35:86:2f:8a:a4:cb:87:0b:d7:c0:77:66:82:a1:
         4b:60:3c:b4:7e:c4:86:d2:e4:e8:c6:de:65:5d:9f:26:cc:40:
         26:7a:b8:3d:b8:e5:c5:78:2f:37:3b:76:8f:a3:bb:9e:fe:dc:
         94:fa:e2:2a:92:c4:3d:61:4a:da:73:ef:c4:35:25:39:01:de:
         0b:f8:52:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----