Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B3UT_nwVr5vnRjVe0LMO_RAN_5M.cer
File:                     B3UT_nwVr5vnRjVe0LMO_RAN_5M.cer (raw, json)
Hash identifier:          2wtYbpR8nlaBAbrxwUn8GnDa+suiN/uR1nKVxpSxI8Q=
Subject key identifier:   07:75:13:FE:7C:15:AF:9B:E7:46:35:5E:D0:B3:0E:FD:10:0D:FF:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1B4FAE3C8A4620965CE2BE16583AF2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3f/972541-f881-4207-870f-9699f209267b/1/B3UT_nwVr5vnRjVe0LMO_RAN_5M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3f/972541-f881-4207-870f-9699f209267b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:33:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 77.75.228.0/24

Validation:               Failed, certificate revoked on Wed 20 Sep 2023 06:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1b:4f:ae:3c:8a:46:20:96:5c:e2:be:16:58:3a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:33:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=077513fe7c15af9be746355ed0b30efd100dff93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:31:a1:26:2a:67:ac:4a:68:0c:a7:50:7d:
                    f4:25:30:4d:97:86:56:43:a3:23:08:88:a8:c2:35:
                    f6:4c:2a:40:90:5a:8a:45:ea:cf:7b:df:d1:52:89:
                    f6:21:ac:ed:aa:5b:cc:7e:0e:cc:c6:d7:52:1b:97:
                    9f:db:90:66:0e:c3:c5:18:b1:cd:87:db:dc:57:6b:
                    5c:1a:06:84:fc:9c:92:2c:84:4b:d4:09:8b:cc:81:
                    f4:f0:ea:0f:fe:91:ae:55:6c:77:90:8b:90:6b:10:
                    36:fc:8c:b9:ea:f2:d2:df:d0:a0:75:f6:7b:ac:59:
                    06:94:28:53:20:94:2e:ee:93:bb:69:0f:c0:2d:3a:
                    3d:b5:b5:a1:7c:53:02:cd:36:8a:3b:da:b7:72:9a:
                    bb:3a:7e:0a:ab:3d:c6:60:61:b0:6b:81:12:fd:81:
                    ec:c1:97:e0:4f:ee:14:a9:f0:ca:52:7c:3c:5d:2c:
                    c2:11:97:68:42:5b:3a:45:dc:f0:7b:47:49:41:0e:
                    f4:4d:be:64:40:ec:e3:5d:fc:31:e9:9d:f1:12:53:
                    c2:9c:02:a8:26:89:4c:56:e3:fb:41:22:28:98:d1:
                    5c:51:fc:2a:6c:1e:bf:1a:bf:8b:13:12:c7:9c:8a:
                    fb:5f:52:03:2b:68:49:e0:85:42:18:e7:e5:98:3e:
                    47:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:75:13:FE:7C:15:AF:9B:E7:46:35:5E:D0:B3:0E:FD:10:0D:FF:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/972541-f881-4207-870f-9699f209267b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/972541-f881-4207-870f-9699f209267b/1/B3UT_nwVr5vnRjVe0LMO_RAN_5M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:76:0a:1e:56:2b:78:aa:99:be:b6:66:29:0f:9c:7a:d3:10:
         3f:f3:64:aa:d1:85:04:27:d2:7d:55:5a:d2:b9:8b:06:91:87:
         e2:15:a4:71:b1:b1:92:35:9d:f9:52:7c:5b:2d:8b:24:fa:f0:
         dd:57:78:63:68:4d:1c:d6:8d:4e:9e:62:fb:93:87:72:30:37:
         ca:e3:38:f0:1a:a0:ac:f4:70:f4:25:e8:7e:df:4c:68:b6:12:
         60:29:b9:68:c1:6d:de:db:83:cf:f6:d4:1a:5d:2c:48:11:bf:
         29:bd:b7:b4:47:f3:e9:ea:09:b5:71:86:69:47:2c:44:0a:76:
         d6:26:87:3f:06:a3:29:32:35:6b:ba:06:6d:f4:97:73:87:a5:
         77:06:65:07:c5:25:7f:e8:82:b6:b2:3f:47:36:08:c2:f7:36:
         ff:33:e5:79:4d:e9:5d:de:31:a1:17:05:40:35:be:69:58:fe:
         91:ef:cc:91:08:19:01:57:46:50:d7:d8:a3:1c:16:3d:b7:94:
         8e:9d:fc:8a:a3:db:be:ae:67:33:89:f3:c4:dd:66:88:c5:32:
         af:65:7b:1a:bf:f1:c7:ac:6b:52:21:18:d4:5a:ae:b5:c8:5d:
         c1:a7:51:35:60:df:76:55:a7:c6:1f:d1:07:65:94:9f:fc:63:
         0d:36:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:10 2024 by rpki-client on console-ams.rpki-client.org