Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F5Sn37ooWS2SHePHkC9q9mK3ork.cer
File:                     F5Sn37ooWS2SHePHkC9q9mK3ork.cer (raw, json)
Hash identifier:          2pWxUEPvJni0zsaFHcdGWB4PGeaZy6p4jJFB/FGYEPs=
Subject key identifier:   17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AA6CA01C37E99815ABABC9C034522DE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/F5Sn37ooWS2SHePHkC9q9mK3ork.mft
caRepository:             rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/
Notify URL:               https://chloe.sobornost.net/rpki/news.xml
Certificate not before:   Sun 01 Jan 2023 00:06:33 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.3.55.0/24
                          IP: 2a13:2c00::/29

Validation:               Failed, certificate revoked on Fri 22 Dec 2023 13:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:a6:ca:01:c3:7e:99:81:5a:ba:bc:9c:03:45:22:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:06:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1794a7dfba28592d921de3c7902f6af662b7a2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:89:33:95:b9:bb:ef:3a:46:d3:c5:69:21:
                    9b:9e:38:ed:4b:8c:af:f3:a9:a0:73:aa:b6:c5:e4:
                    03:c3:35:25:09:55:92:29:af:a7:98:d1:77:b0:a5:
                    08:9b:b9:1e:45:fe:8f:51:15:0c:b8:c7:d5:45:ed:
                    66:e2:3c:ff:fd:94:f8:c1:06:b9:7e:78:4b:93:c0:
                    cf:fd:64:a2:bf:32:57:77:3a:28:e4:5e:41:a8:8f:
                    3e:0a:f4:25:12:dd:57:3e:8c:bc:d2:d0:e1:6d:43:
                    40:9c:fe:b3:b6:7e:0d:ad:4e:63:64:94:1a:bc:b4:
                    6f:14:1f:87:19:83:cb:1f:3b:cd:0a:92:3c:69:ab:
                    a3:02:e7:bb:c8:fe:59:f8:29:7b:40:b9:d8:e2:4e:
                    32:f3:ea:c4:14:29:9a:81:11:db:a5:cd:df:d5:e1:
                    d5:45:29:cb:4f:3f:f7:1b:f2:a5:f7:13:d6:14:39:
                    39:a3:3c:be:aa:12:f8:29:fb:8d:fb:13:b6:81:96:
                    6f:87:dc:0b:48:e7:b4:56:5c:03:29:0e:83:f6:ff:
                    05:6b:d1:37:fb:5c:ee:64:53:3b:ba:aa:dc:1d:5e:
                    8d:f5:75:b9:27:29:35:30:78:d6:f1:e4:59:e3:2c:
                    5c:5a:28:24:99:39:7d:a3:fa:9e:da:63:e0:96:ad:
                    ac:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/
                RPKI Manifest - URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/F5Sn37ooWS2SHePHkC9q9mK3ork.mft
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.55.0/24
                IPv6:
                  2a13:2c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:c2:47:62:4e:f7:30:a4:13:2a:9e:10:00:c5:63:71:3d:c5:
         91:fd:6d:a5:88:ee:0b:c9:70:57:1a:0f:61:d5:01:90:be:42:
         6c:7f:fd:c9:04:04:55:99:9e:f0:3f:94:0a:33:a6:af:ca:9e:
         6d:8f:88:0b:a7:03:bb:1f:8c:05:51:fc:15:d0:3c:9a:90:15:
         a5:4b:88:33:4a:8b:05:1f:c4:1e:63:f7:df:f8:af:1e:61:10:
         6f:0b:65:ee:5b:43:ef:c8:13:95:52:33:eb:8b:1d:04:77:75:
         1b:0b:a6:fc:72:51:a1:b9:21:61:f7:be:78:af:63:fa:cf:2d:
         42:17:ef:91:af:ab:02:b1:6b:06:b1:fc:88:2d:8e:32:e0:91:
         76:13:62:8b:e8:a4:11:7c:5c:a6:39:11:19:c6:88:05:20:61:
         bc:ce:e2:9e:b1:75:42:52:f3:59:cb:6b:42:c9:81:0c:2e:24:
         27:0e:c5:40:20:c8:62:dc:df:08:4b:75:03:31:82:b4:d3:33:
         60:35:fb:c0:56:15:3a:6d:2f:a7:b5:ba:1c:f5:35:24:3e:00:
         ae:58:43:a2:dc:35:ef:53:bd:e6:c5:59:dd:16:17:6d:4a:ae:
         a7:cd:a0:48:84:e3:ae:93:c2:90:0b:90:93:b2:eb:6a:b9:ff:
         e2:9a:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:29 2024 by rpki-client on console-ams.rpki-client.org