Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ByF8BjTBAscbo-RE8GiKvdGvTOg.cer
File:                     ByF8BjTBAscbo-RE8GiKvdGvTOg.cer (raw, json)
Hash identifier:          7mNpbhOM9SY26AbxZlCOuJnBHVYqu4M+aFd79WUHRs8=
Subject key identifier:   07:21:7C:06:34:C1:02:C7:1B:A3:E4:44:F0:68:8A:BD:D1:AF:4C:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC64B4FDA8DD31AE2C71FC4E5324E6622
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:31:13 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 50319
                          IP: 185.84.196.0/22
                          IP: 2a03:71e0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:4f:da:8d:d3:1a:e2:c7:1f:c4:e5:32:4e:66:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:31:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=07217c0634c102c71ba3e444f0688abdd1af4ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:76:2c:d1:3a:b9:7b:9d:45:be:d1:37:71:e9:
                    17:5e:ee:38:d1:05:79:0a:7b:01:cd:ba:cc:07:04:
                    85:8d:e4:ac:87:71:d6:b0:56:23:28:bf:ce:1b:45:
                    21:9e:38:24:9e:3a:ba:9a:e8:fa:09:fd:88:f9:cc:
                    78:23:98:d6:ec:34:f0:b1:82:44:08:65:8f:e1:ce:
                    f9:de:08:4c:c3:d2:98:b3:a4:fc:c3:c9:d9:60:e5:
                    3d:c3:2b:4d:db:27:2c:57:6f:80:bf:a5:c6:0f:ae:
                    12:f0:10:d9:f6:a4:2f:4c:8c:74:84:e3:cc:b0:16:
                    9d:de:cb:15:cd:0a:25:4f:39:7d:20:14:de:51:a9:
                    d7:d4:6e:55:ef:00:58:4c:f4:2d:80:5a:da:cc:29:
                    64:a1:e9:b1:d4:3e:b8:83:1f:f0:09:c5:aa:d4:75:
                    82:9f:70:89:b3:f8:9a:a5:ec:38:8c:45:0b:4c:ba:
                    2c:6e:3d:5b:8c:39:1d:72:af:c4:8e:35:17:89:fb:
                    dd:50:1a:56:09:83:8f:03:e3:69:0f:8e:96:c3:3f:
                    96:58:e3:af:13:fc:f5:76:8b:3d:10:1f:73:81:62:
                    13:7e:3f:69:7c:da:a8:56:d5:44:9c:ae:67:fa:dd:
                    d2:81:e1:71:c7:0e:b1:5f:04:b6:61:a2:99:14:30:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:21:7C:06:34:C1:02:C7:1B:A3:E4:44:F0:68:8A:BD:D1:AF:4C:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.196.0/22
                IPv6:
                  2a03:71e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50319

    Signature Algorithm: sha256WithRSAEncryption
         77:5d:a1:ea:2e:e4:52:d6:2e:25:24:2f:42:cd:8c:96:b3:ff:
         05:e6:10:19:8b:81:e2:b0:1a:7b:47:cc:5f:cc:9e:14:91:2c:
         d8:ef:4e:6c:cc:76:9d:bb:98:76:53:d0:a7:64:8c:64:49:71:
         3e:c4:fa:a6:dc:5f:5b:5e:af:7b:21:2a:62:51:21:48:54:e8:
         5e:8a:52:d1:00:fd:b7:a9:4e:25:a8:4e:9b:51:df:ca:18:e1:
         31:ae:a9:be:3e:0f:74:9a:50:a0:a1:98:5e:6d:db:15:49:be:
         ed:e3:70:87:03:39:76:e5:35:80:98:f3:41:d8:14:db:66:b0:
         f1:15:e1:84:33:ed:6f:c3:6b:28:49:cf:db:b4:fc:45:2f:1d:
         b2:ff:37:d4:35:20:5a:11:16:73:e8:9f:4e:1e:db:04:c0:7c:
         5f:c1:83:fe:f4:4d:26:e0:5a:df:33:89:ad:2d:65:52:3e:07:
         d3:d0:34:0f:eb:eb:b1:16:aa:1e:9e:60:32:95:b0:41:c7:45:
         64:3e:00:d3:d8:09:f1:5c:6d:98:8a:4a:97:1d:11:63:d1:d5:
         12:f9:65:35:fd:86:25:5c:23:80:41:61:86:0d:1d:84:d9:87:
         92:7b:ec:39:f4:b6:e9:35:90:7e:d3:8e:ad:6c:82:93:6a:87:
         b3:13:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:21 2024 by rpki-client on console-fra.rpki-client.org