Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ISJop9UQajQiGaq4axPZK-ltTLw.cer
File:                     ISJop9UQajQiGaq4axPZK-ltTLw.cer (raw, json)
Hash identifier:          Afr2+GjgILuZCq4fL31/EyhFxx+v321ZeKndar5XJJ8=
Subject key identifier:   21:22:68:A7:D5:10:6A:34:22:19:AA:B8:6B:13:D9:2B:E9:6D:4C:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018572462236894571CEE201DA593516A58F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/ISJop9UQajQiGaq4axPZK-ltTLw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:57 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 49234
                          IP: 77.87.224.0/21

Validation:               Failed, certificate revoked on Thu 25 May 2023 12:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:22:36:89:45:71:ce:e2:01:da:59:35:16:a5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=212268a7d5106a342219aab86b13d92be96d4cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:1e:52:7d:11:7e:f5:c6:81:fc:74:29:b0:
                    03:c2:aa:97:50:e8:95:fd:fa:7e:53:d9:38:ff:93:
                    46:68:40:f6:38:3a:f6:5c:a9:a0:3a:2e:5a:6d:b2:
                    f3:d6:e9:e1:88:a0:b6:0c:52:3f:4c:d2:0a:8b:3a:
                    ce:57:26:af:3a:61:87:bd:39:b5:59:6f:22:89:fd:
                    ff:b1:4a:a6:aa:68:1a:3c:52:4b:e3:2d:e7:2d:24:
                    e0:75:66:45:8c:14:d2:64:1e:c8:94:91:dc:ce:cc:
                    7d:9a:a7:d5:ed:70:ec:cd:c4:ac:2c:19:03:ee:fb:
                    33:f5:0b:a6:ca:80:38:48:fb:86:d8:0d:7c:10:77:
                    48:34:04:0a:ab:27:79:b8:b5:10:ef:e4:93:23:3b:
                    76:5f:8b:fa:83:5e:65:bd:c1:47:43:ab:10:1e:09:
                    88:e1:b7:6f:59:22:63:1a:ac:3d:76:d5:c9:02:9f:
                    b0:d1:ba:5c:f0:ae:90:86:a8:7d:dd:b9:79:9e:23:
                    23:ec:19:3b:fb:bc:f2:c0:aa:9e:3b:d9:38:71:c1:
                    06:99:c9:b6:e0:28:b2:0f:92:a4:e7:d9:22:05:8b:
                    d4:b5:d5:80:f3:16:8d:09:1d:82:1e:74:7b:86:c8:
                    07:4e:ee:dc:64:4c:69:a9:c0:62:56:db:30:bf:af:
                    1f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:22:68:A7:D5:10:6A:34:22:19:AA:B8:6B:13:D9:2B:E9:6D:4C:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/ISJop9UQajQiGaq4axPZK-ltTLw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.87.224.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49234

    Signature Algorithm: sha256WithRSAEncryption
         3a:f4:04:0c:6d:dd:57:03:9c:89:82:b9:45:1d:95:8d:79:03:
         d1:8f:82:75:39:3b:7c:b6:65:dd:51:da:97:77:57:3d:aa:3a:
         c7:4e:09:38:4b:eb:e7:82:b4:75:04:69:02:06:07:35:77:52:
         61:b2:da:96:3c:1f:b3:f1:31:e4:d8:e3:28:93:c9:0c:e8:04:
         a6:24:3b:86:84:ce:61:52:f2:75:eb:b6:6c:2c:10:43:a4:cd:
         63:61:07:47:5f:e8:4c:56:2e:60:db:42:a5:32:b7:8d:b2:06:
         ab:77:71:b1:ea:a8:e4:9b:1d:3c:b0:c4:fb:a5:8f:32:32:3e:
         6c:92:2f:b4:78:5f:07:05:c3:26:6f:0f:e9:d5:0c:78:88:4c:
         31:ce:70:0a:41:41:5e:5b:eb:a1:01:c9:48:1d:6b:22:34:09:
         7b:1e:92:31:15:7c:c0:54:e5:23:7e:1f:a7:d0:7d:dc:ca:e0:
         ae:45:c6:e8:b6:4a:ea:d5:11:b4:ac:5b:94:27:07:e2:77:04:
         f3:76:3f:03:31:20:6c:67:63:d7:ff:27:6a:25:e0:28:a1:92:
         d9:3c:a8:78:e1:f4:85:6c:23:94:a7:57:9c:35:f4:ea:2e:92:
         68:88:b2:3a:69:18:41:01:e1:16:cd:b1:47:99:31:bc:51:66:
         5b:14:1e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:20 2024 by rpki-client on console-fra.rpki-client.org