Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F1Ef6PBUxjlmNSmTiuvtpNPvgGg.cer
File:                     F1Ef6PBUxjlmNSmTiuvtpNPvgGg.cer (raw, json)
Hash identifier:          KdB7cMxOGzL4xFPVbP8ElzKdchbfc4/X9Fd40LtZX3s=
Subject key identifier:   17:51:1F:E8:F0:54:C6:39:66:35:29:93:8A:EB:ED:A4:D3:EF:80:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E0EC30BDAB492B32878CDFC5B9E29EA16
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b8/de2896-ef1b-4a3c-82c4-889ab1a0a47f/1/F1Ef6PBUxjlmNSmTiuvtpNPvgGg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b8/de2896-ef1b-4a3c-82c4-889ab1a0a47f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 05 Mar 2024 13:17:27 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 210984
                          IP: 2a0d:b700::/29

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 12:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:0e:c3:0b:da:b4:92:b3:28:78:cd:fc:5b:9e:29:ea:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  5 13:17:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=17511fe8f054c639663529938aebeda4d3ef8068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:35:82:6c:b2:60:c4:f6:58:da:31:07:22:
                    1d:2c:78:27:7c:d4:84:9e:7e:eb:f3:26:a1:2a:7e:
                    cd:4f:7d:78:06:91:5b:88:a3:9d:ea:90:53:fc:96:
                    cc:b1:b8:49:23:7d:77:9b:0a:b1:51:cd:a3:db:1c:
                    bf:04:f3:9f:1d:47:cf:3d:9b:aa:60:f1:7e:52:89:
                    5f:78:46:39:bc:c2:a3:76:60:0b:74:2d:3b:1e:70:
                    3e:09:3a:57:95:be:aa:a9:21:f4:bd:bf:fd:ca:e7:
                    45:cf:03:2d:63:b3:e3:35:32:6e:12:27:22:13:ca:
                    2e:26:16:4a:9a:7d:6a:23:8c:1a:f5:69:c4:31:aa:
                    91:6b:66:50:60:b9:e0:cd:9f:56:3d:1b:04:b7:c1:
                    36:c3:e8:c1:90:76:84:6d:bd:5e:cd:e0:0b:30:54:
                    dd:81:0e:2c:d2:25:b4:66:b5:36:b5:11:47:39:df:
                    7e:ba:95:28:94:4f:b8:40:d1:3e:42:f1:a0:1d:1d:
                    6c:f2:76:cd:01:58:8c:2e:31:3d:be:9b:84:9e:37:
                    b4:d6:af:44:f7:76:a1:ee:b5:f4:d0:8d:d2:3e:58:
                    6d:c0:65:4b:e3:b9:09:77:bb:0f:c3:7a:1e:3c:8c:
                    ea:0a:bf:b4:11:66:1b:83:57:34:3e:f1:22:58:34:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:51:1F:E8:F0:54:C6:39:66:35:29:93:8A:EB:ED:A4:D3:EF:80:68
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/de2896-ef1b-4a3c-82c4-889ab1a0a47f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/de2896-ef1b-4a3c-82c4-889ab1a0a47f/1/F1Ef6PBUxjlmNSmTiuvtpNPvgGg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:b700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210984

    Signature Algorithm: sha256WithRSAEncryption
         4f:05:62:2a:70:53:ef:bb:f2:61:19:40:f5:9d:59:96:b3:44:
         70:4c:b5:74:df:43:08:64:d9:37:08:6e:31:17:ec:a1:71:d9:
         1d:75:57:26:92:25:de:5f:a6:4d:b3:36:08:26:5c:94:55:df:
         b2:cd:d4:75:70:92:70:c6:2e:0c:f1:9a:7d:b8:64:a9:41:70:
         24:81:b5:ca:96:c1:d9:4b:b5:ff:5e:7e:4a:c1:90:c6:07:6e:
         46:07:26:5b:ff:12:2b:4f:d5:7f:ec:57:38:96:da:c1:46:a9:
         2a:b7:f4:9f:d9:bc:ea:af:89:7a:91:7d:32:c9:2d:4c:83:4d:
         9d:77:a8:d9:1f:de:38:7e:f4:cf:b3:fb:22:b0:57:78:32:f1:
         ef:56:2d:00:82:ed:27:32:7b:be:b4:98:4c:8d:17:eb:24:00:
         42:41:8a:82:74:89:ae:86:0b:bc:3e:9f:54:21:cd:9b:55:bf:
         3f:6d:be:fa:34:9d:9d:0c:c1:71:4f:6d:cd:d5:11:64:f7:53:
         e8:be:f8:35:3f:16:78:3b:00:1e:2f:2b:25:95:f0:02:5c:a3:
         49:d1:d7:02:ae:a1:4c:2b:11:f3:12:c3:d7:73:0c:77:13:7d:
         4f:36:af:ec:6d:92:07:27:10:ce:1e:fa:87:bb:e9:d3:c5:f8:
         2a:2d:9d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:27 2024 by rpki-client on console-ams.rpki-client.org