Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
File:                     F76CelgN5hU43e-igjlGjE6QG0A.cer (raw, json)
Hash identifier:          QJCD+aFSuGfHt59kWmfwBWSHmHf7f66RnQeNaITfa/w=
Subject key identifier:   17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3492105DEEC1E1BEDE371073830D96D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:58 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 58332
                          IP: 176.120.96.0/20

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 07:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:21:05:de:ec:1e:1b:ed:e3:71:07:38:30:d9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=17be827a580de61538ddefa28239468c4e901b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:5c:47:88:02:aa:1c:9d:03:1d:f5:8d:7a:
                    d4:53:09:3b:83:ef:ac:8e:f8:28:54:7a:30:a1:ce:
                    81:06:2c:1c:b2:0c:63:0c:b6:b3:2d:a7:37:b0:40:
                    42:bd:57:bf:f0:96:32:55:4e:6b:25:8d:14:9c:be:
                    79:3a:0a:8a:5f:bb:30:1e:5f:80:99:bc:c8:2e:fa:
                    9e:ba:4b:12:9e:56:55:a1:ab:d5:fb:49:04:b1:ac:
                    bd:69:c3:d9:56:33:11:8f:fb:55:8b:bd:d0:89:94:
                    cb:58:c6:fb:74:25:19:6d:af:e1:cf:41:17:78:08:
                    72:3f:84:28:d3:04:02:b1:fe:6b:b3:f0:0f:19:79:
                    e5:2d:df:35:a9:83:54:a8:cd:de:6e:c7:94:2d:2e:
                    d9:c0:a9:1c:3e:90:39:b1:61:3e:22:91:ac:99:6a:
                    b4:8f:87:48:cf:e9:42:b3:36:63:20:2e:51:b7:ba:
                    b4:1d:c2:b8:ca:81:43:f1:d1:b3:e6:c9:6d:14:85:
                    8d:a0:b9:fd:7a:d8:7d:03:70:1a:ea:da:75:f5:3f:
                    5a:ec:fa:a0:78:4b:70:eb:be:2a:a3:d0:b8:39:2b:
                    07:0d:10:6c:6b:94:68:d0:25:57:25:a3:89:ea:6d:
                    77:96:3b:59:b8:bd:4a:bc:70:95:c2:bb:20:26:ce:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.120.96.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58332

    Signature Algorithm: sha256WithRSAEncryption
         3f:31:4c:c3:94:98:b5:92:91:95:fa:a9:d4:4f:ed:4c:dd:0b:
         67:2e:22:39:e7:50:c1:66:db:34:fa:24:96:da:7f:d0:71:5e:
         cf:e4:70:be:ea:3b:98:d5:08:13:4e:e7:fc:a4:35:f3:84:78:
         86:bd:5f:d4:af:1d:fa:bf:44:c6:c2:e2:28:4a:75:10:f8:4a:
         30:7e:41:79:6a:30:49:70:be:1f:36:9d:e9:f9:50:bd:cd:be:
         5e:06:48:00:c0:e7:1f:c1:d7:ad:e5:c9:50:36:7a:b8:a2:e4:
         9e:d5:93:c1:21:27:48:bd:c2:f4:0f:31:91:4d:e1:10:37:33:
         e3:dd:82:c2:24:b9:69:03:05:b3:98:5d:66:c3:c9:ab:d4:e3:
         ab:84:11:72:bc:20:99:82:86:fa:6c:2a:49:0e:eb:87:6f:29:
         47:28:7d:81:ef:d7:5a:d1:9f:f2:74:ff:a1:91:98:a5:95:0b:
         f7:ae:d9:42:d7:bc:f6:fb:98:43:03:7d:d8:74:8b:b6:cb:f2:
         a8:10:79:51:3d:c1:7f:6a:aa:f9:72:1a:94:63:58:bc:b0:bf:
         d6:89:9a:f4:bd:77:39:b2:80:76:69:21:78:9d:66:ab:6c:a3:
         31:a8:69:25:e4:27:c7:03:8e:20:a9:4b:ec:d7:97:67:7c:d7:
         69:64:9b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:33 2024 by rpki-client on console-fra.rpki-client.org