Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FSvTg-X4dBNnRQPgsSoRSoyWGc4.cer
File:                     FSvTg-X4dBNnRQPgsSoRSoyWGc4.cer (raw, json)
Hash identifier:          /lJ5ZJE4zev+yGWVDeviH9XjC2VN3BBxwxEUtiEeAIw=
Subject key identifier:   15:2B:D3:83:E5:F8:74:13:67:45:03:E0:B1:2A:11:4A:8C:96:19:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2673B5736745F2A1933884A6B008081
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/8/152BD383E5F87413674503E0B12A114A8C9619CE.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/8
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:23:14 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211120
                          IP: 193.3.44.0/24

Validation:               Failed, certificate revoked on Fri 26 Jan 2024 15:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:67:3b:57:36:74:5f:2a:19:33:88:4a:6b:00:80:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:23:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=152bd383e5f87413674503e0b12a114a8c9619ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:aa:2c:f3:39:4c:c8:1a:6c:d3:21:92:c5:
                    8c:db:86:7b:8c:dd:e1:0c:f6:5b:bb:71:03:d6:6b:
                    cf:ad:b2:db:e2:69:9f:89:e8:6f:39:89:f8:67:93:
                    5c:66:f6:9f:32:fb:45:02:1e:1b:4a:db:31:67:01:
                    60:4f:71:35:68:39:a0:19:45:7f:9a:fa:88:b6:31:
                    9d:49:ab:fe:e0:bd:67:5a:63:06:be:50:c8:fd:f9:
                    08:95:cd:66:5b:57:ed:d9:3a:e5:55:9c:96:92:95:
                    a4:6c:95:44:d3:f8:c8:4c:ce:82:83:88:33:89:94:
                    b8:1c:2a:4f:d6:86:c7:61:aa:bd:49:a3:6f:64:7d:
                    23:90:a0:48:8b:6f:c7:4d:e1:20:d6:70:70:f6:e3:
                    0b:f2:a0:bb:2e:cf:5e:8c:3a:a2:9c:26:0f:70:dd:
                    14:0a:dd:29:17:61:b7:ee:b7:4e:db:ab:3a:30:13:
                    bd:c1:84:ee:7a:7c:8e:d4:ad:e1:aa:22:2f:a7:ff:
                    4e:f4:ec:b2:63:0d:d4:45:c9:e0:65:6b:6e:a5:4c:
                    f0:ba:ed:29:19:8b:05:b1:d3:72:21:89:b0:a2:96:
                    86:c0:c5:fd:62:2f:49:e5:01:27:f1:20:32:c3:27:
                    85:43:2d:83:be:43:44:47:be:a6:7d:98:19:5e:a0:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2B:D3:83:E5:F8:74:13:67:45:03:E0:B1:2A:11:4A:8C:96:19:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/8
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/8/152BD383E5F87413674503E0B12A114A8C9619CE.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.44.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211120

    Signature Algorithm: sha256WithRSAEncryption
         a9:3e:41:82:c2:cb:7d:18:20:2e:86:c4:c5:fa:94:b3:10:0a:
         d4:fd:d3:41:94:53:c5:1e:d8:f1:a1:39:d6:ce:71:c7:3f:85:
         78:e2:c5:30:eb:26:d0:0a:ca:f4:27:23:b8:24:90:e3:31:24:
         3b:bd:11:6a:5b:2a:52:56:4c:7c:b7:6d:45:7e:2b:57:9d:e8:
         25:44:d1:d5:65:39:0b:b0:67:69:ad:36:80:03:08:12:9f:c9:
         f7:5d:fd:8a:03:4f:8b:0d:04:07:df:5a:63:61:cd:c1:39:4b:
         3e:cf:39:e5:ad:78:88:24:0e:1d:61:d7:fc:37:dc:cd:f0:5d:
         23:65:bc:fb:6a:2c:05:be:ca:8c:00:1b:c8:7e:b4:7c:7f:be:
         5c:c9:46:e3:4b:86:87:ab:bd:3f:96:ea:2c:17:bc:bc:e6:1c:
         d6:79:24:c5:8f:6e:b9:91:ef:5f:1a:3a:5a:cd:f6:fa:90:5a:
         e0:51:71:0e:0a:26:3d:b1:1f:10:b9:72:5f:bf:01:4a:d5:d9:
         fa:ec:f8:20:39:5e:a6:13:e5:07:2e:0b:39:5a:6e:e2:1b:f5:
         08:24:96:53:dd:b0:87:fd:ef:cc:9c:32:7e:94:8c:39:be:12:
         99:b1:4b:53:ed:b5:2c:dc:5e:cc:fc:9f:5b:e3:ca:1f:f1:66:
         d1:56:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:37 2024 by rpki-client on console-fra.rpki-client.org