Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FrONMAlX-hWzqALTj_BZyrJ5bFo.cer
File:                     FrONMAlX-hWzqALTj_BZyrJ5bFo.cer (raw, json)
Hash identifier:          u78mQzXMZOMQlPnc5g4UqrgDBRWrjmdu2aLpZ6gDQf4=
Subject key identifier:   16:B3:8D:30:09:57:FA:15:B3:A8:02:D3:8F:F0:59:CA:B2:79:6C:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26CFD193FB95437BE53D32E1980B0C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 45.92.78.0/24
                          IP: 2a12:5180::/29

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 09:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6c:fd:19:3f:b9:54:37:be:53:d3:2e:19:80:b0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=16b38d300957fa15b3a802d38ff059cab2796c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:bc:67:5e:3a:c3:59:14:93:53:5d:54:31:
                    ee:54:b6:a0:4b:6c:3a:5e:74:fd:6f:6d:42:80:9e:
                    01:bf:df:06:10:c6:0c:81:1e:cb:d9:32:f0:d8:fe:
                    b3:9c:18:0f:13:7f:57:2a:c6:91:bd:80:f0:fb:e6:
                    fe:26:fc:5d:91:2f:8b:eb:c9:6d:3b:29:15:68:f9:
                    f5:9d:b6:b3:33:58:a3:ca:c8:94:02:57:db:a8:7a:
                    dd:7f:12:28:b5:2b:10:1f:e9:a7:4d:dd:7f:3b:25:
                    dc:3b:d3:33:6e:d0:01:d4:5f:ae:b0:74:a4:79:53:
                    4b:54:cb:10:02:29:9f:d9:0a:1b:ab:f4:28:ee:35:
                    48:c0:08:a9:96:98:a9:b6:2e:a7:22:4c:d8:c5:dd:
                    4d:7c:f3:b1:fe:13:5a:b6:31:79:4d:ab:5d:11:07:
                    2e:59:5b:b3:ee:a9:28:eb:ff:b9:b4:fa:a4:8b:48:
                    ef:2b:74:6f:c2:7a:79:6e:72:a9:0a:9e:ee:8a:85:
                    57:aa:84:2c:9d:94:ee:e0:23:99:8e:ea:5f:2d:4f:
                    36:c5:84:5e:29:8d:51:d8:3e:0a:3b:df:de:09:92:
                    47:c9:02:e6:a1:34:ef:c2:34:2c:f4:f0:22:bf:04:
                    92:03:91:7a:09:23:7d:fb:4d:84:e5:98:fe:ff:2c:
                    67:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B3:8D:30:09:57:FA:15:B3:A8:02:D3:8F:F0:59:CA:B2:79:6C:5A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.78.0/24
                IPv6:
                  2a12:5180::/29

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:9b:e8:6d:e6:d3:49:72:9b:e7:8d:ab:c0:43:be:83:fd:
         1c:19:f9:07:e2:f9:6c:6f:18:c2:d2:08:b3:c0:c8:98:71:b1:
         eb:a6:e2:25:16:d5:2a:07:89:85:28:08:5a:7f:f3:58:cc:a2:
         b7:61:71:31:df:1c:e8:31:db:28:56:35:54:22:c2:f4:6c:12:
         1b:ca:41:80:c2:b8:29:14:c5:ac:74:98:cb:db:6b:d5:35:af:
         53:20:21:fb:64:44:7d:a6:2a:d1:4a:59:0b:a6:85:3a:13:68:
         91:69:b1:6e:f5:d7:0d:79:87:55:7c:ba:d0:a7:dc:fb:2e:a8:
         2a:cd:b1:5b:cd:c1:96:13:d8:ff:df:0a:c2:07:fe:ad:fd:dc:
         6f:56:3a:bb:fc:6c:f2:4d:40:28:40:d7:10:d9:e5:98:0b:0e:
         29:2d:bf:8f:be:9f:0b:69:37:4e:49:ff:23:e3:9b:4b:94:22:
         31:f8:c8:52:83:9d:6a:56:5d:af:47:66:46:2a:1b:87:b6:4b:
         b9:75:b5:11:07:63:b0:65:78:0b:b5:97:d9:88:0f:1e:64:2f:
         7b:73:0e:e3:24:30:52:43:44:4c:19:a6:cc:c7:14:7a:f1:00:
         ed:bb:b9:95:52:50:ab:a7:80:f9:3b:9c:3f:72:0b:79:76:f8:
         f1:a5:1b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:55:35 2024 by rpki-client on console-ams.rpki-client.org