Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BXxvR7wwmaTshr7ClgUmkUCtcxk.cer
File:                     BXxvR7wwmaTshr7ClgUmkUCtcxk.cer (raw, json)
Hash identifier:          idG0xeOVGF2aY/SD7+rYu8sxRXKxk9N2DC9Zc87E54I=
Subject key identifier:   05:7C:6F:47:BC:30:99:A4:EC:86:BE:C2:96:05:26:91:40:AD:73:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571691BA9A4D35626D02C9C5332A1096B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/BXxvR7wwmaTshr7ClgUmkUCtcxk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:36:31 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 48538
                          IP: 194.99.158.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:1b:a9:a4:d3:56:26:d0:2c:9c:53:32:a1:09:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:36:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=057c6f47bc3099a4ec86bec29605269140ad7319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e6:a0:5c:cc:47:7d:c9:4c:94:e6:97:cf:a5:
                    9d:3e:42:0c:30:3e:7e:19:e1:6e:cd:b1:60:95:3f:
                    5b:93:28:00:9b:3e:e0:d0:f8:d3:03:b4:5e:30:7a:
                    59:be:b1:a1:c3:e2:4d:d7:ad:54:5f:37:c5:f7:d2:
                    2b:29:aa:2a:81:d1:fe:ee:4a:07:4b:f0:29:e8:90:
                    05:df:e4:6d:54:d6:97:3b:fa:c2:e4:4b:b4:12:8c:
                    2d:bb:fa:a0:a6:f7:46:e3:54:78:ae:a5:ec:59:6a:
                    37:5d:64:4c:f2:3b:48:6e:0c:93:9b:56:ba:c5:66:
                    84:3b:93:6a:15:fb:f2:1f:9d:1a:95:30:08:2b:19:
                    46:9a:23:5c:99:4f:9a:d9:66:40:4f:da:47:6b:ea:
                    39:40:84:06:8c:8d:1c:d9:e7:96:ae:80:80:4e:62:
                    25:2b:0f:b2:59:54:4b:4d:81:3d:b7:56:81:68:24:
                    36:fe:73:89:bf:be:27:82:89:0d:3f:33:01:81:eb:
                    a8:ba:4d:ab:85:85:58:6b:ba:dc:ce:33:de:e4:78:
                    a8:f6:e6:3e:00:32:fd:d9:96:b6:ff:3a:f8:c8:c0:
                    c7:1a:0b:99:9e:02:bb:08:fd:a1:38:6d:27:3f:5a:
                    22:92:79:18:eb:5f:e9:63:3c:10:e7:52:0a:4e:ed:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7C:6F:47:BC:30:99:A4:EC:86:BE:C2:96:05:26:91:40:AD:73:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/BXxvR7wwmaTshr7ClgUmkUCtcxk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.99.158.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48538

    Signature Algorithm: sha256WithRSAEncryption
         9a:a4:71:5d:ac:ad:b2:83:b6:71:81:3b:82:47:a0:c0:b4:d2:
         7e:32:ce:7c:39:e0:50:48:f5:26:30:4b:25:98:f6:df:fa:20:
         ce:33:7d:e0:1e:d0:cf:85:73:a5:f7:20:46:f8:f5:21:3e:8a:
         38:55:7d:97:fa:41:89:bf:bf:59:b1:81:85:2d:ee:10:a2:ce:
         05:b7:17:8e:2b:d4:ff:97:76:7c:15:ab:da:3c:9e:94:3a:0a:
         b3:fb:fc:69:9e:b6:72:0b:dd:11:15:08:09:ac:a2:b7:01:f4:
         b9:08:e1:0f:e8:3e:dc:3e:46:23:f4:fe:d0:f4:68:7a:8e:c2:
         49:3c:e8:7f:4e:29:9a:a2:9a:f6:aa:f5:0d:f7:bb:a3:ec:63:
         df:15:f5:fd:49:04:bb:fa:68:aa:50:17:51:e9:56:de:fc:25:
         5d:0c:68:d9:2d:62:dd:8f:f5:ab:d7:1d:89:77:a8:77:9d:bb:
         b8:dd:74:c6:be:be:59:14:8d:aa:66:70:a2:a4:14:a9:66:b7:
         22:2b:76:ac:61:40:05:6b:85:69:45:2e:23:20:3e:f4:ad:54:
         08:f8:60:8a:d7:10:c9:08:2c:c6:ba:a2:f5:4d:b2:0f:7e:7d:
         8a:55:72:ce:c2:01:e4:10:74:ad:23:f7:76:ea:33:dc:3e:1c:
         9b:fa:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 15:53:46 2023 by rpki-client on console-fra.rpki-client.org