Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E6_4hR0v0vXp8gEzlpEAIbDINHw.cer
File:                     E6_4hR0v0vXp8gEzlpEAIbDINHw.cer (raw, json)
Hash identifier:          FBKIwsb7yIT0OjoU26lrVUW+HrniqFOfuzqupnN4ch4=
Subject key identifier:   13:AF:F8:85:1D:2F:D2:F5:E9:F2:01:33:96:91:00:21:B0:C8:34:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC80117F5EFA0275D2A828BBE6C24FBF0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/3fb19e-44d2-4289-a91c-5f2499ac0d16/1/E6_4hR0v0vXp8gEzlpEAIbDINHw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/3fb19e-44d2-4289-a91c-5f2499ac0d16/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 02:29:24 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 203031
                          IP: 2001:678:14c::/48

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 10:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:17:f5:ef:a0:27:5d:2a:82:8b:be:6c:24:fb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:29:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=13aff8851d2fd2f5e9f2013396910021b0c8347c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:29:b6:80:7b:f4:e1:8a:23:d4:5b:2e:bb:
                    13:c4:92:7a:a9:e7:c0:0d:23:b0:50:ea:94:e2:98:
                    12:6a:a0:a5:86:f4:84:b6:5f:19:aa:a4:e0:42:37:
                    3f:b2:e1:0a:7e:08:d0:16:30:b5:2d:4b:97:52:2b:
                    9a:23:f9:e2:a6:18:2b:e8:d9:12:96:c3:05:5b:0e:
                    74:92:1a:d3:46:de:96:5a:41:5a:9a:68:98:13:fa:
                    e1:5e:1f:ac:38:32:79:e1:14:0e:89:ae:65:ee:53:
                    86:fe:c0:49:75:78:6f:77:9f:ed:ab:de:aa:96:a4:
                    e1:88:ab:ed:b2:88:0d:28:a7:2f:01:fd:82:0b:7c:
                    f4:2c:95:a2:1b:65:a1:9b:5b:4d:a7:4a:67:d5:72:
                    4b:52:38:d2:14:6f:f7:4a:91:2c:9b:95:1a:d4:fb:
                    ce:8b:2e:cd:a3:8f:0c:be:3d:21:41:56:34:b2:48:
                    cc:fc:e9:9a:d2:43:08:2d:0d:b9:32:92:62:ee:3b:
                    11:cb:fc:a4:70:0c:10:20:c3:dd:b6:1f:0c:e4:ed:
                    07:ee:ca:00:34:a9:87:65:a2:82:1f:3e:f8:49:d8:
                    63:d5:be:56:e5:cf:3f:e3:21:70:c0:46:19:c5:87:
                    2b:2a:1c:f7:93:be:19:4f:4f:ae:61:16:55:fb:fe:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AF:F8:85:1D:2F:D2:F5:E9:F2:01:33:96:91:00:21:B0:C8:34:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3fb19e-44d2-4289-a91c-5f2499ac0d16/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3fb19e-44d2-4289-a91c-5f2499ac0d16/1/E6_4hR0v0vXp8gEzlpEAIbDINHw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:14c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203031

    Signature Algorithm: sha256WithRSAEncryption
         a5:20:e9:3a:89:26:a2:76:2d:a6:36:c0:f9:f6:3d:d0:2d:6d:
         97:17:6b:4a:ff:7d:3d:d1:25:96:10:43:97:6d:a3:88:31:61:
         ea:11:c8:2e:6f:76:c3:a9:09:aa:9c:b7:fb:38:c6:70:50:55:
         72:af:4a:88:94:57:a4:c5:08:f2:23:52:81:a7:42:41:04:44:
         e0:32:9d:c9:6f:08:8a:8d:da:d2:1b:08:26:06:a1:82:85:0b:
         1b:74:ac:60:b3:7d:a1:95:7f:65:7c:f3:68:d5:56:34:3e:db:
         cd:4f:10:47:95:63:4c:6a:7a:a7:a0:c0:72:4f:ab:eb:b5:00:
         db:95:69:22:f8:10:68:17:9e:58:99:49:c1:7d:4f:96:64:fb:
         2b:7d:9e:4b:bd:49:bc:51:0c:13:26:a8:3a:15:13:30:62:ad:
         d4:07:8f:fe:84:48:3a:88:af:88:32:16:9b:ab:76:b0:c9:5c:
         ea:06:4a:bd:fc:63:5b:e9:3b:4f:67:da:be:a3:9b:f3:e4:07:
         3a:52:ca:9d:99:6d:e7:a0:b1:30:e9:98:7c:96:2c:39:42:66:
         57:79:6b:d2:82:f4:f6:24:b8:af:87:13:ff:3b:fd:67:80:20:
         26:7c:fb:40:ed:1f:5d:4b:1b:7e:b0:f4:c9:6c:0e:b5:3b:16:
         66:4f:27:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:55:34 2024 by rpki-client on console-ams.rpki-client.org