Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C0EaBh1RBSCrr14Rxw60-lQVHmk.cer
File:                     C0EaBh1RBSCrr14Rxw60-lQVHmk.cer (raw, json)
Hash identifier:          eJmsLvvEoJ2vHI0ZxrNT7mcsGo5mtYw1by0OZx84RwE=
Subject key identifier:   0B:41:1A:06:1D:51:05:20:AB:AF:5E:11:C7:0E:B4:FA:54:15:1E:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAC98060027BB74957EB3DF87BF8D68
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/57/16d395-0c25-47df-9817-f3ff55ccfcf8/1/C0EaBh1RBSCrr14Rxw60-lQVHmk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/57/16d395-0c25-47df-9817-f3ff55ccfcf8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:08 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 205150

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ac:98:06:00:27:bb:74:95:7e:b3:df:87:bf:8d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0b411a061d510520abaf5e11c70eb4fa54151e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:b3:87:1b:13:66:c3:33:9b:ea:b6:75:c0:
                    56:9e:1e:aa:b3:e1:82:3d:29:d0:6f:10:5b:d2:e4:
                    48:e8:88:51:76:19:34:38:cd:49:d3:30:2a:8a:af:
                    7d:95:e9:8b:9f:16:ab:5a:d0:39:3d:80:94:50:93:
                    c4:97:ac:17:22:0d:a2:1d:18:07:88:c9:25:99:3d:
                    a2:4e:57:fc:ce:af:23:82:b3:a3:86:de:3d:73:5d:
                    5a:cf:15:67:84:ce:0a:73:f3:18:ff:86:3e:21:9e:
                    7f:51:17:1b:e4:38:b9:c8:78:93:51:9e:9b:8a:b2:
                    94:3e:ca:33:4e:44:17:e8:2c:6a:dc:a0:45:a6:1a:
                    f4:aa:07:db:7f:df:a9:f9:d1:f7:d7:6a:50:ab:20:
                    88:ce:b5:9e:02:f5:1f:0b:c0:0a:b9:ba:6f:f7:0a:
                    49:ce:a0:86:51:44:fb:bc:d9:74:e8:3c:d7:34:de:
                    73:d4:86:49:1c:6e:6b:b2:61:46:ce:0d:9b:88:2c:
                    a7:1f:74:cc:4d:03:fa:f7:08:eb:51:92:3f:a8:bf:
                    60:51:ed:54:19:3e:46:c1:f8:d6:2b:53:18:b9:f7:
                    96:c5:f4:30:50:9b:04:8e:cf:7c:f8:96:b3:48:ec:
                    b0:89:1b:84:b6:38:38:bc:4e:83:a2:07:34:9a:06:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:41:1A:06:1D:51:05:20:AB:AF:5E:11:C7:0E:B4:FA:54:15:1E:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/16d395-0c25-47df-9817-f3ff55ccfcf8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/16d395-0c25-47df-9817-f3ff55ccfcf8/1/C0EaBh1RBSCrr14Rxw60-lQVHmk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205150

    Signature Algorithm: sha256WithRSAEncryption
         6d:dc:62:bd:93:7f:bf:76:4e:f1:3e:31:93:b7:24:b4:bc:f8:
         a3:9c:d9:99:48:6c:90:17:a5:8b:ea:b9:a7:9c:95:95:20:37:
         87:fc:a9:1a:8b:e5:81:dc:81:f8:15:df:3e:65:29:17:e5:05:
         3c:9e:4c:db:22:3d:a3:57:53:5f:ca:f8:17:f3:29:33:47:30:
         38:23:e0:63:d8:3f:b1:d0:d0:24:1f:08:a4:4f:76:e0:0c:8f:
         34:2a:2e:86:2d:a0:c5:2e:07:54:6a:0b:1c:0a:92:df:a8:00:
         77:d2:c2:0f:e1:67:a3:3c:31:91:3d:8e:aa:38:fe:ff:59:0e:
         38:b6:fd:0d:3b:56:dd:51:f6:52:7c:2e:ee:10:fc:90:45:0e:
         a2:7a:56:81:05:fe:45:e3:93:25:87:37:8a:3a:fc:d2:db:f2:
         43:86:ea:12:21:33:ed:cb:65:d2:2b:74:91:22:9e:58:92:70:
         0b:02:4f:40:3c:f5:a3:c0:11:68:55:88:4d:7b:b8:ac:0a:53:
         c2:ab:2e:54:01:f7:14:f0:dc:fb:79:fc:bc:53:f0:b1:ca:e8:
         da:b6:5b:c8:06:04:88:d4:f6:c9:1b:b1:e8:cf:f6:bd:6e:4f:
         a3:ee:a5:c7:7f:d3:e8:df:86:3b:9f:f7:8e:0e:5e:e5:92:c5:
         c6:a9:80:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 08:07:59 2023 by rpki-client on console-fra.rpki-client.org