Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G58hTIgC-VqEump_ytBGEsxbV4U.cer
File:                     G58hTIgC-VqEump_ytBGEsxbV4U.cer (raw, json)
Hash identifier:          zXo46hiUIa/Ecg1vWxy8DJHnk3BdTLu+o3jX+jqv4dM=
Subject key identifier:   1B:9F:21:4C:88:02:F9:5A:84:BA:6A:7F:CA:D0:46:12:CC:5B:57:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0781B77F65F416D451C1041269CEA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/G58hTIgC-VqEump_ytBGEsxbV4U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:31:42 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 40987
                          IP: 185.223.44.0/22

Validation:               Failed, certificate revoked on Fri 10 Feb 2023 13:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:78:1b:77:f6:5f:41:6d:45:1c:10:41:26:9c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:31:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b9f214c8802f95a84ba6a7fcad04612cc5b5785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:d2:63:88:3d:0e:d6:40:0e:19:a8:e8:35:
                    8b:d2:84:40:61:dc:19:fa:11:af:da:3f:8c:65:d5:
                    13:ff:61:8b:96:04:71:ee:e4:3a:5e:80:db:c3:52:
                    5d:40:6d:a7:09:45:35:79:4e:53:43:74:75:f4:95:
                    52:d1:dd:db:64:de:49:98:f4:1e:9e:cd:64:b6:46:
                    e4:d8:08:1b:4b:e6:29:cd:ce:87:3b:c9:50:b6:01:
                    f9:0a:24:45:3c:c2:3e:fa:dc:63:a0:ae:9d:4c:da:
                    0a:33:7f:19:27:75:b9:ab:9b:2a:04:80:2f:33:ac:
                    40:a1:95:1b:75:4a:aa:9b:46:39:a5:65:b6:5f:ca:
                    83:15:ee:fe:cd:0b:4c:32:91:25:11:13:5e:ca:47:
                    d3:fd:82:87:66:6d:b4:7e:57:40:c9:35:07:37:66:
                    d5:2d:fd:15:b4:c6:81:c5:7f:22:36:e1:26:e5:07:
                    1e:2c:79:25:9a:cc:c0:89:74:83:da:c3:53:1d:6e:
                    4e:31:a6:eb:71:51:33:21:2f:69:9f:a2:8b:53:74:
                    62:9c:bd:ed:99:01:07:5c:ea:44:b1:d8:85:a7:93:
                    5d:56:34:7a:51:34:94:b3:21:18:57:f4:7b:af:1f:
                    45:61:19:dd:f4:10:5a:13:05:ef:7b:87:c5:40:ab:
                    3d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:21:4C:88:02:F9:5A:84:BA:6A:7F:CA:D0:46:12:CC:5B:57:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/G58hTIgC-VqEump_ytBGEsxbV4U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.44.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40987

    Signature Algorithm: sha256WithRSAEncryption
         11:b0:37:9f:b2:01:bb:ab:14:26:15:41:99:b8:0a:9a:77:d0:
         d3:1d:a8:36:34:1a:60:bc:0c:ef:04:1c:44:c3:3e:c5:76:59:
         95:77:61:d7:e8:01:b0:c6:db:97:f1:6c:aa:2a:3a:11:70:c9:
         11:36:d5:3e:48:c1:f1:13:7f:1c:bb:46:c4:eb:42:ce:a4:79:
         da:2f:42:e3:c0:59:b7:0a:d8:91:1d:80:77:30:c3:60:cd:e0:
         05:1a:36:8b:4c:f9:84:9e:f3:51:0a:c6:96:72:10:4a:12:54:
         cb:2e:c0:5d:a5:bf:bf:3b:50:a1:9b:76:99:3e:85:ed:b5:f5:
         4c:17:71:34:9b:0e:1f:3e:4e:a7:ba:ba:a0:a1:f3:39:27:7a:
         18:32:b9:95:94:cd:5e:43:00:8b:23:4b:5f:99:1c:a1:1f:d4:
         81:0e:58:ad:36:ca:03:95:cc:d4:bb:32:69:47:86:77:ca:d7:
         03:50:d1:1f:31:75:c2:22:df:13:4f:18:9b:cc:42:8e:88:d1:
         3f:21:ac:55:8b:ba:5f:79:87:c0:f8:f2:7a:81:d7:12:b5:3e:
         c2:37:ef:6d:c6:e8:a9:db:29:e1:43:a0:54:c2:bd:0a:82:32:
         57:f7:9b:c6:c1:c6:80:04:49:3f:70:d3:49:ee:9f:6c:76:fa:
         5a:e3:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:48 2024 by rpki-client on console-ams.rpki-client.org