Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HymGjoSH3LS8cgUWP1a5QAmDZE8.cer
File:                     HymGjoSH3LS8cgUWP1a5QAmDZE8.cer (raw, json)
Hash identifier:          tb6evTB8MTiz0+zSjM+0j867Kho4Sh6xE3YH3bJhq6A=
Subject key identifier:   1F:29:86:8E:84:87:DC:B4:BC:72:05:16:3F:56:B9:40:09:83:64:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56E2A8578CEE461B77B01C599FEEC93
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/HymGjoSH3LS8cgUWP1a5QAmDZE8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:29:40 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 42876
                          IP: 77.221.224.0/19
                          IP: 2a0b:a480::/29

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 06:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:2a:85:78:ce:e4:61:b7:7b:01:c5:99:fe:ec:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:29:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1f29868e8487dcb4bc7205163f56b9400983644f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:6f:ba:d3:12:22:5f:ff:92:31:15:b9:22:
                    31:13:ac:8c:af:3d:df:b8:9d:c3:d3:b7:4a:ef:d3:
                    54:4c:eb:c1:b3:de:ce:38:97:99:69:25:11:7d:fe:
                    7f:6d:4d:d7:8b:f1:06:67:aa:68:90:38:7f:39:bb:
                    f4:74:08:a6:96:5b:f7:b0:57:3a:a3:8f:89:59:69:
                    31:19:58:e0:b1:03:5b:28:a0:51:27:85:2d:0c:1f:
                    43:29:de:90:4e:c2:a7:17:39:e9:60:e3:b9:4d:8e:
                    63:b6:3e:c9:81:e7:aa:a7:fc:9a:0b:43:bf:8e:81:
                    40:aa:b7:96:2e:76:d9:92:40:89:e6:49:f6:0f:d0:
                    e7:99:18:d5:1d:12:aa:cd:2d:c0:80:5c:7d:51:80:
                    d4:46:e3:90:6b:4a:b9:a1:fe:48:09:ea:17:fd:76:
                    df:26:30:b0:3a:2b:91:c5:c2:c9:13:f5:72:e5:08:
                    72:b4:a2:47:1c:49:ff:a9:4f:4e:ff:63:2a:f7:c8:
                    a2:a8:f6:0e:31:b7:04:c8:d3:50:4b:08:ad:04:df:
                    f4:65:a7:3f:72:d2:3a:97:85:be:7d:68:46:3b:43:
                    2b:d1:c8:a4:c5:a6:97:bd:9a:fd:bd:9e:d6:e8:d3:
                    24:f4:6b:22:cf:88:b5:f4:be:74:eb:e6:88:b2:19:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:29:86:8E:84:87:DC:B4:BC:72:05:16:3F:56:B9:40:09:83:64:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/HymGjoSH3LS8cgUWP1a5QAmDZE8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.221.224.0/19
                IPv6:
                  2a0b:a480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42876

    Signature Algorithm: sha256WithRSAEncryption
         8e:e5:83:86:03:26:20:17:76:8b:6d:d7:bf:1a:13:23:88:b2:
         27:ab:ce:b9:c3:dc:76:c7:4a:bf:14:58:94:a8:72:5a:01:25:
         96:9f:47:43:86:db:e7:07:84:56:7f:27:59:0f:ed:75:a0:e4:
         ee:a6:3a:28:3b:7e:3e:7d:54:43:5e:04:35:99:0f:4f:db:62:
         b8:da:67:fb:63:99:63:68:b9:34:99:4c:49:da:ac:d1:43:da:
         ba:43:b9:a5:e2:98:6a:8b:81:15:5d:b1:77:a5:f3:bb:38:3a:
         69:5f:2e:1c:86:c0:49:af:d4:3c:ef:cf:8b:35:1a:6c:86:73:
         e2:a4:f5:f1:89:d4:ce:7c:29:de:88:ce:e0:15:0c:54:b6:8b:
         af:1f:1a:9b:8a:23:c1:93:b7:12:6e:58:91:32:13:28:a5:23:
         b6:06:65:51:5a:eb:21:65:4f:97:ce:78:60:9c:23:6a:94:c6:
         82:33:95:7f:c1:36:0e:ae:59:0f:aa:54:c3:4b:0d:1f:a9:2e:
         1a:38:59:09:45:19:2b:d2:00:77:11:03:0a:77:29:b8:41:d1:
         8e:07:23:fe:bc:8f:aa:14:25:d5:67:49:63:54:b1:c2:9c:e9:
         bd:1a:a7:b1:8c:2f:e6:ea:6c:f5:2f:ba:14:77:2e:f0:8a:3a:
         ab:6a:08:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 11:27:00 2024 by rpki-client on console-fra.rpki-client.org