Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
File:                     GdzFYNrz4qyFtguGYTh_BsH6ExU.cer (raw, json)
Hash identifier:          qoiMZgEupuyRTDZggBg3ujDRAHr6dui91R08HmolEiA=
Subject key identifier:   19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D63E6CA02430E2791B24C9BE5B191C2EB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/GdzFYNrz4qyFtguGYTh_BsH6ExU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Feb 2024 09:01:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 60135
                          AS: 203914
                          IP: 31.216.63.0/24
                          IP: 37.16.88.0/24
                          IP: 62.68.83.0/24
                          IP: 62.204.38.0/24
                          IP: 93.157.109.0/24
                          IP: 109.107.141.0/24
                          IP: 109.205.188.0/24
                          IP: 146.19.25.0/24
                          IP: 176.126.115.0/24
                          IP: 178.212.136.0/24
                          IP: 185.187.18.0/24
                          IP: 194.26.135.0/24
                          IP: 195.64.112.0/24
                          IP: 195.96.146.0/24
                          IP: 217.114.41.0/24
                          IP: 2a11:4b80::/29
                          IP: 2a11:5640::/29
                          IP: 2a11:7580::/29
                          IP: 2a11:7740::/29
                          IP: 2a11:92c0::/29
                          IP: 2a11:afc0::/29
                          IP: 2a11:d1c0::/29
                          IP: 2a11:ee40::/29
                          IP: 2a12:c00::/29
                          IP: 2a12:2280::/29
                          IP: 2a12:2b00::/29
                          IP: 2a12:7480::/29
                          IP: 2a12:7e00::/29
                          IP: 2a12:a980::/29
                          IP: 2a12:c700::/29
                          IP: 2a12:df80::/29
                          IP: 2a12:fb80::/29

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 07:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:63:e6:ca:02:43:0e:27:91:b2:4c:9b:e5:b1:91:c2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  1 09:01:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:ab:a7:5e:9e:ab:1a:59:5b:86:52:ab:7c:
                    19:7a:02:a7:ff:74:b5:c6:3c:9b:50:c3:4f:1e:b4:
                    2f:82:57:17:6f:8f:72:96:3c:55:d8:f5:0c:27:a7:
                    21:bb:42:03:b2:11:99:1e:88:89:7d:e8:34:c9:32:
                    e0:10:41:ee:db:2d:13:14:f8:24:f2:1f:c0:35:41:
                    a1:4d:c9:e0:5e:66:5d:fe:98:32:61:18:5e:e7:1b:
                    b6:3a:22:fd:ec:57:b1:cc:16:1b:ef:cd:33:dc:a8:
                    f7:40:77:51:02:26:83:da:76:19:95:9a:da:73:f7:
                    28:ea:1e:e0:a6:b3:fc:23:e6:68:b7:48:17:37:89:
                    1b:63:05:e9:ff:f9:f8:f0:72:d0:dd:62:37:ee:bd:
                    a2:14:cc:77:2f:1c:26:cd:fd:90:64:02:61:78:bc:
                    42:f6:da:18:1e:ae:ff:1a:ec:0a:92:f7:09:5c:3b:
                    e9:6e:e8:27:9a:c4:dd:e6:21:34:0e:06:54:38:d2:
                    e9:56:59:b0:06:ed:2b:ae:94:02:17:77:ab:d7:ca:
                    12:a7:d4:bd:d5:f0:60:a1:27:9c:83:5f:8f:ad:ff:
                    f7:09:87:57:c4:9b:9f:e1:3c:9f:35:fb:ad:2e:77:
                    fa:65:4a:2d:43:cf:5f:f8:03:9d:9a:aa:e8:90:aa:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/GdzFYNrz4qyFtguGYTh_BsH6ExU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.216.63.0/24
                  37.16.88.0/24
                  62.68.83.0/24
                  62.204.38.0/24
                  93.157.109.0/24
                  109.107.141.0/24
                  109.205.188.0/24
                  146.19.25.0/24
                  176.126.115.0/24
                  178.212.136.0/24
                  185.187.18.0/24
                  194.26.135.0/24
                  195.64.112.0/24
                  195.96.146.0/24
                  217.114.41.0/24
                IPv6:
                  2a11:4b80::/29
                  2a11:5640::/29
                  2a11:7580::/29
                  2a11:7740::/29
                  2a11:92c0::/29
                  2a11:afc0::/29
                  2a11:d1c0::/29
                  2a11:ee40::/29
                  2a12:c00::/29
                  2a12:2280::/29
                  2a12:2b00::/29
                  2a12:7480::/29
                  2a12:7e00::/29
                  2a12:a980::/29
                  2a12:c700::/29
                  2a12:df80::/29
                  2a12:fb80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60135
                  203914

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:24:74:74:41:ee:6a:34:1f:e9:a5:04:75:3f:b8:1a:1d:
         26:96:94:72:ba:09:ac:15:4c:fc:e5:4e:03:05:25:e5:a7:9c:
         7d:87:46:38:6d:e0:20:26:37:2a:41:f1:1e:06:3f:fb:fb:cc:
         45:c0:fe:fc:2e:b4:de:9d:56:83:c7:60:c6:65:cb:ae:6d:7b:
         d2:28:7e:c0:16:88:c8:66:80:e3:2b:c8:c3:47:52:61:96:b5:
         e9:63:c6:24:34:f0:ec:57:11:2c:fd:17:ab:24:5c:f3:58:64:
         f1:c9:4e:d0:c7:04:ae:3d:6f:db:96:d3:d2:1e:f3:cc:71:2c:
         3d:bd:52:41:ed:86:84:78:f5:01:51:a0:3a:d8:c8:7d:84:8c:
         7a:7e:bb:6c:a9:74:c1:79:59:44:38:d0:12:a7:0c:2c:ce:d5:
         a6:e0:b4:5c:88:44:7d:47:95:4a:b3:c9:9e:33:ad:85:77:85:
         48:2e:ea:49:48:2b:20:52:93:f7:61:bc:77:7e:6f:f1:80:42:
         f5:68:6f:d8:c4:a7:c1:93:4b:38:9d:a2:a6:fc:65:a1:68:e4:
         99:44:50:91:fe:2f:0f:33:39:95:9d:f1:5d:e8:75:cd:a7:7d:
         f1:23:cc:34:b9:b0:ba:17:0d:2c:4b:b8:da:e5:a2:5d:6d:2d:
         fb:0f:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 14:06:41 2024 by rpki-client on console-fra.rpki-client.org