Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J3fERaBuBDDAoIMeBPYuIV0VWaw.cer
File:                     J3fERaBuBDDAoIMeBPYuIV0VWaw.cer (raw, json)
Hash identifier:          nf2AEi4vyBRPotkqV0yuQAbpW+eX8+ffD+3B2vqAERE=
Subject key identifier:   27:77:C4:45:A0:6E:04:30:C0:A0:83:1E:04:F6:2E:21:5D:15:59:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBC010EAB483F369FB12BF724F61BF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/6a6e34-6bb7-4cf1-b709-d050c323c34b/1/J3fERaBuBDDAoIMeBPYuIV0VWaw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/6a6e34-6bb7-4cf1-b709-d050c323c34b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:50 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 5.183.12.0/22
                          IP: 2a0e:3c00::/29

Validation:               Failed, certificate revoked on Thu 05 Oct 2023 10:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:c0:10:ea:b4:83:f3:69:fb:12:bf:72:4f:61:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2777c445a06e0430c0a0831e04f62e215d1559ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:5f:06:c8:1c:e7:e5:74:8f:a4:3c:ba:60:
                    38:c7:97:77:7d:c3:97:ff:65:d8:3f:65:c1:ab:a3:
                    d7:11:9f:46:a9:5d:0f:bd:76:30:82:4e:6b:62:4a:
                    f4:1d:22:30:b3:f5:bb:bf:35:60:56:e3:ab:7c:ae:
                    c2:8f:f8:7a:49:be:c9:c8:86:b6:8b:d1:9a:f0:81:
                    3e:b6:19:3c:2f:b9:1d:5c:36:36:a9:36:b5:67:2a:
                    b9:d8:7f:67:f4:37:eb:a7:d9:33:a6:36:32:46:7e:
                    a6:53:fc:5e:bc:a1:ab:ff:26:0a:5e:58:ca:42:9f:
                    cf:d6:10:85:ca:8c:0a:06:8a:44:e3:bc:a2:b3:a2:
                    cb:08:4b:98:5a:4b:52:e7:e3:b2:5b:28:eb:84:be:
                    a0:f4:0f:cf:bb:39:30:e2:91:13:20:b3:0a:7e:7e:
                    f2:98:2d:32:a7:42:75:06:6f:cf:b2:88:e3:8d:bb:
                    9f:05:4a:40:b5:6c:ee:7d:0a:b3:17:a5:18:5c:cd:
                    8b:c6:23:25:09:29:95:f3:18:a2:42:cf:b0:e2:ad:
                    33:3b:a9:7d:cb:ba:40:9a:e1:2d:c9:6f:52:7c:60:
                    85:e2:ab:03:bd:2e:5a:79:bf:1c:ec:45:0a:8d:6c:
                    2b:77:1b:03:2a:75:57:6c:c1:ae:4a:84:54:d8:80:
                    eb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:77:C4:45:A0:6E:04:30:C0:A0:83:1E:04:F6:2E:21:5D:15:59:AC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6a6e34-6bb7-4cf1-b709-d050c323c34b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6a6e34-6bb7-4cf1-b709-d050c323c34b/1/J3fERaBuBDDAoIMeBPYuIV0VWaw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.12.0/22
                IPv6:
                  2a0e:3c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         93:ec:10:ad:06:14:ef:66:05:18:16:4e:01:20:b4:f0:22:04:
         29:c1:fb:82:56:a7:61:8c:bf:01:6b:3c:30:40:3e:75:f2:5e:
         c0:d6:88:d5:66:73:45:df:9f:d9:b8:35:cb:22:ad:ab:26:b9:
         64:4f:2a:f6:d9:5e:84:33:28:8b:02:f3:6d:c3:3b:1a:b9:da:
         e0:07:32:f3:a6:e2:66:eb:b0:48:cc:ac:fc:39:fd:bc:49:c8:
         b2:8d:f2:69:04:a0:e8:9b:61:ab:80:1c:82:3e:1b:0d:35:29:
         23:ea:f2:80:15:ca:7d:34:ba:1e:16:f0:4c:e8:ed:a6:5c:ca:
         8b:a3:7f:49:40:b2:e7:e2:2a:c0:25:68:02:c1:c3:82:ae:ac:
         ed:9d:b5:62:27:41:fa:dc:d2:e3:67:cf:aa:1a:59:6f:7a:8e:
         df:36:ac:63:dc:ab:66:7f:cc:18:c4:0e:26:7c:8c:a1:b0:a9:
         f8:05:67:74:57:52:2b:90:2f:43:6b:3d:f4:93:da:8a:4a:83:
         75:f7:15:20:4c:e8:5a:3f:0f:35:9f:e1:f9:7e:f5:0a:aa:e1:
         04:0f:58:4f:5a:96:6f:7c:16:02:57:8e:4b:cb:8a:f2:1a:64:
         24:23:81:bc:8a:5a:08:9d:38:53:7e:3c:ff:a3:06:da:8c:4e:
         7c:3d:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:51 2024 by rpki-client on console-ams.rpki-client.org