Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BiFvIZDL6Op-TjN-MN6-b6dPUeo.cer
File:                     BiFvIZDL6Op-TjN-MN6-b6dPUeo.cer (raw, json)
Hash identifier:          ABYzZq3bnvxvBl+VWmb0cDrmLOzWA7QuQZPyjbVaNoU=
Subject key identifier:   06:21:6F:21:90:CB:E8:EA:7E:4E:33:7E:30:DE:BE:6F:A7:4F:51:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018FE77CA8AE50C921CBD1A1CBD9251E4BAE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/BiFvIZDL6Op-TjN-MN6-b6dPUeo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Jun 2024 08:20:57 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214770
                          IP: 2001:67c:e9c::/48
                          IP: 2001:67c:ea0::/48
                          IP: 2001:67c:ea4::/48
                          IP: 2001:67c:ea8::/48

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 12:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e7:7c:a8:ae:50:c9:21:cb:d1:a1:cb:d9:25:1e:4b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  5 08:20:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=06216f2190cbe8ea7e4e337e30debe6fa74f51ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:50:2b:c1:69:c3:7f:e6:6d:73:71:d9:55:
                    90:f2:1e:c5:1f:64:36:3e:54:10:d0:96:d3:ce:4f:
                    23:29:1a:b6:14:04:eb:8c:9c:84:44:f8:9d:5a:99:
                    9f:41:34:85:84:b3:5c:de:4f:19:4f:db:7b:c7:12:
                    a1:62:41:7f:8a:83:d6:48:2c:5b:8b:43:5f:2d:af:
                    8e:01:a2:e2:3d:5a:05:4c:25:20:39:b9:a4:09:a5:
                    a5:bf:ad:5e:bc:83:7a:8b:e9:57:0c:7e:f7:b6:3b:
                    00:23:4f:58:e5:75:91:c6:f0:ca:ef:5c:8c:32:cc:
                    7e:e1:2f:dd:51:47:70:fe:82:f4:e8:e5:2a:d7:21:
                    5b:03:ba:31:3c:05:d9:64:3a:18:a9:44:e9:c3:9c:
                    8a:7c:85:5b:46:b1:a4:d6:aa:98:e1:71:7b:a5:31:
                    90:d5:c6:2d:c6:2a:a4:da:ac:de:e4:4a:d6:7d:63:
                    58:e8:91:e3:0a:9a:40:e1:ab:44:5a:6c:ab:4a:36:
                    25:28:b2:38:df:15:e0:99:f4:f5:cb:9f:65:e9:9c:
                    d3:2a:5c:eb:b3:21:1f:f2:62:36:93:f1:55:32:6f:
                    c5:62:c2:8b:e9:6e:f9:16:e0:3f:27:bc:0e:3b:dc:
                    cb:a2:d1:7e:45:12:73:c9:69:82:86:56:b0:81:6d:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:21:6F:21:90:CB:E8:EA:7E:4E:33:7E:30:DE:BE:6F:A7:4F:51:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/BiFvIZDL6Op-TjN-MN6-b6dPUeo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:e9c::/48
                  2001:67c:ea0::/48
                  2001:67c:ea4::/48
                  2001:67c:ea8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214770

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:82:26:ab:0a:29:81:86:7b:a9:80:46:38:dc:17:96:bc:
         d9:67:cc:4e:fe:c4:70:60:20:db:d0:d5:14:59:c9:d8:0f:5c:
         d8:1e:d2:93:8a:eb:b9:0d:a7:97:5d:b1:1b:cd:51:5f:2d:06:
         a3:e0:23:89:4e:fd:d2:12:8d:e3:9b:0a:8a:e0:2c:71:ce:7a:
         c8:f5:a8:f2:27:19:c6:e6:9d:54:73:0d:fb:46:f8:70:f5:ce:
         d8:09:ea:d3:21:3c:a5:2e:96:f8:0e:c0:a8:ed:5b:6d:34:7a:
         8a:e9:c1:74:05:84:75:f1:ff:5c:8a:1a:61:66:8e:4e:da:ec:
         08:db:96:15:b8:2c:45:c0:23:95:7a:5e:0c:37:4f:3d:77:13:
         8c:72:5a:69:72:bc:3a:62:1b:fe:36:b4:5d:57:76:58:ea:ec:
         b2:97:4c:dd:a9:15:1b:83:67:63:11:bc:6e:65:05:f0:03:d6:
         60:91:80:e1:1a:da:b5:a3:16:ac:4f:9e:2b:cb:fa:07:6c:c5:
         24:fd:ea:1c:48:aa:b4:63:4b:94:d6:95:b9:87:30:fa:97:fa:
         4f:8b:f1:43:00:ba:70:bc:de:db:f4:54:26:8f:29:a6:8a:58:
         06:34:8f:bb:5c:c7:38:6a:cc:e8:37:d2:52:22:c7:09:5c:e7:
         77:02:65:fd
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAY/nfKiuUMkhy9Ghy9klHkuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjA1MDgyMDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjIxNmYyMTkwY2JlOGVhN2U0ZTMzN2UzMGRlYmU2ZmE3NGY1MWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGhQK8Fpw3/mbXNx2VWQ8h7FH2Q2
PlQQ0JbTzk8jKRq2FATrjJyERPidWpmfQTSFhLNc3k8ZT9t7xxKhYkF/ioPWSCxb
i0NfLa+OAaLiPVoFTCUgObmkCaWlv61evIN6i+lXDH73tjsAI09Y5XWRxvDK71yM
Msx+4S/dUUdw/oL06OUq1yFbA7oxPAXZZDoYqUTpw5yKfIVbRrGk1qqY4XF7pTGQ
1cYtxiqk2qze5ErWfWNY6JHjCppA4atEWmyrSjYlKLI43xXgmfT1y59l6ZzTKlzr
syEf8mI2k/FVMm/FYsKL6W75FuA/J7wOO9zLotF+RRJzyWmChlawgW3F8QIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFAYhbyGQy+jqfk4zfjDevm+nT1HqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2Y3NTNm
OS1lOGY2LTRlOGQtOWJjMC1jYjVkODZmOTI3ZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvZjc1M2Y5
LWU4ZjYtNGU4ZC05YmMwLWNiNWQ4NmY5MjdmZS8xL0JpRnZJWkRMNk9wLVRqTi1N
TjYtYjZkUFVlby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF
BwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGfA6cAwcAIAEGfA6gAwcAIAEGfA6kAwcA
IAEGfA6oMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNG8jANBgkqhkiG9w0BAQsF
AAOCAQEAPaGCJqsKKYGGe6mARjjcF5a82WfMTv7EcGAg29DVFFnJ2A9c2B7Sk4rr
uQ2nl12xG81RXy0Go+AjiU790hKN45sKiuAscc56yPWo8icZxuadVHMN+0b4cPXO
2Anq0yE8pS6W+A7AqO1bbTR6iunBdAWEdfH/XIoaYWaOTtrsCNuWFbgsRcAjlXpe
DDdPPXcTjHJaaXK8OmIb/ja0XVd2WOrsspdM3akVG4NnYxG8bmUF8APWYJGA4Rra
taMWrE+eK8v6B2zFJP3qHEiqtGNLlNaVuYcw+pf6T4vxQwC6cLze2/RUJo8ppopY
BjSPu1zHOGrM6DfSUiLHCVzndwJl/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 30 14:42:36 2024 by rpki-client on console-ams.rpki-client.org