Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JWS-gey8FNh0AnvyO53sP38ggOs.cer
File:                     JWS-gey8FNh0AnvyO53sP38ggOs.cer (raw, json)
Hash identifier:          qGY0RE9rzBUFIdzR5yOuvCnsAq2OnXm5W91MtcHZS8M=
Subject key identifier:   25:64:BE:81:EC:BC:14:D8:74:02:7B:F2:3B:9D:EC:3F:7F:20:80:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018828BE9EEA7AC35255E9A9DE1E9679E4B7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/JWS-gey8FNh0AnvyO53sP38ggOs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 17 May 2023 08:06:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 205134
                          IP: 91.216.171.0/24
                          IP: 2a12:d9c0::/29

Validation:               Failed, certificate revoked on Thu 18 May 2023 07:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:28:be:9e:ea:7a:c3:52:55:e9:a9:de:1e:96:79:e4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 17 08:06:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2564be81ecbc14d874027bf23b9dec3f7f2080eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:03:28:9f:6c:77:0d:ae:1b:c7:0d:e6:5d:50:
                    01:b0:59:9b:c0:e2:1f:b4:bb:68:9c:04:63:f5:b9:
                    30:b5:ce:d8:a0:64:00:c0:3f:b9:eb:4f:d4:a2:44:
                    0d:c7:72:3f:aa:70:d4:c3:03:c6:b6:35:60:c8:a3:
                    a2:bb:ea:f6:69:6c:c6:ab:a1:98:2b:01:01:f3:6e:
                    c4:01:fb:48:b6:5d:47:75:69:2a:51:f1:7f:77:e6:
                    fc:ea:56:30:39:79:64:3f:27:e3:f0:fb:cb:97:c6:
                    05:5d:88:ed:8b:12:bb:15:52:01:9b:d9:59:46:0c:
                    32:6b:b2:7a:72:6a:bc:f2:ab:c3:ed:dd:23:81:e7:
                    17:13:23:22:d5:99:0b:fb:da:ff:cf:93:56:d1:4d:
                    ee:4e:7a:7f:2e:14:eb:d8:50:78:7f:8f:fc:8a:3b:
                    d4:58:c8:00:74:30:ec:01:c5:4d:af:ab:7d:cf:c2:
                    ca:c4:6d:c6:22:1d:e2:7d:94:c2:52:2d:60:e0:48:
                    b2:14:04:d2:51:c8:ba:9e:55:93:d3:9f:2d:56:67:
                    23:ad:f9:4a:8d:70:89:65:ad:e6:d7:dd:ea:f7:ae:
                    69:10:51:0e:7a:b5:0f:84:c5:a2:6f:3a:df:41:4e:
                    ed:b1:07:65:81:f1:55:7e:fb:81:8b:cb:aa:b8:40:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:64:BE:81:EC:BC:14:D8:74:02:7B:F2:3B:9D:EC:3F:7F:20:80:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/JWS-gey8FNh0AnvyO53sP38ggOs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.171.0/24
                IPv6:
                  2a12:d9c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205134

    Signature Algorithm: sha256WithRSAEncryption
         4b:15:26:1b:92:a0:71:1e:59:e5:42:ff:f6:89:53:a0:af:5a:
         53:e0:20:36:df:fe:b4:b6:b7:85:e9:c1:a6:ac:bb:e7:4a:a4:
         0c:7c:24:99:b6:fc:a8:03:8b:84:7a:e4:3d:59:d8:d3:ba:22:
         bd:1a:27:69:7a:b7:c6:9b:d7:2a:56:e3:0d:92:52:28:ee:15:
         49:8a:89:4d:ee:16:57:90:97:1d:ab:1d:c9:4a:de:19:c4:9e:
         fa:3d:b4:e6:df:48:f9:23:dc:f7:f5:e5:cd:aa:3a:1e:0c:94:
         73:16:25:ef:5e:95:fe:01:13:53:89:83:4d:0c:f4:55:73:79:
         e9:c1:ba:8b:1f:af:d9:8e:9d:06:69:c8:93:80:c7:60:01:a3:
         f6:40:c4:82:cc:3f:aa:ac:c1:6a:cd:3b:11:cd:ab:8c:81:7d:
         ff:8f:af:f0:4a:91:96:2e:df:0b:85:44:e6:34:a8:ad:eb:68:
         24:e6:f6:39:43:17:8c:37:21:3b:b2:72:71:5a:d2:53:86:91:
         33:57:dd:00:ea:9a:07:e6:37:8f:df:a3:aa:0c:c5:22:92:ae:
         ef:9e:25:a9:6a:5b:a3:c5:3f:41:1c:51:fe:5b:c2:48:41:13:
         f1:64:4a:98:06:e7:e8:64:71:3a:05:b1:b9:65:0c:5e:64:c6:
         e7:b9:fb:4c
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYgovp7qesNSVemp3h6WeeS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNTE3MDgwNjAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTY0YmU4MWVjYmMxNGQ4NzQwMjdiZjIzYjlkZWMzZjdmMjA4MGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wMon2x3Da4bxw3mXVABsFmbwOIf
tLtonARj9bkwtc7YoGQAwD+560/UokQNx3I/qnDUwwPGtjVgyKOiu+r2aWzGq6GY
KwEB827EAftItl1HdWkqUfF/d+b86lYwOXlkPyfj8PvLl8YFXYjtixK7FVIBm9lZ
Rgwya7J6cmq88qvD7d0jgecXEyMi1ZkL+9r/z5NW0U3uTnp/LhTr2FB4f4/8ijvU
WMgAdDDsAcVNr6t9z8LKxG3GIh3ifZTCUi1g4EiyFATSUci6nlWT058tVmcjrflK
jXCJZa3m193q965pEFEOerUPhMWibzrfQU7tsQdlgfFVfvuBi8uquEDouQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCVkvoHsvBTYdAJ78jud7D9/IIDrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzhiZTFm
MS0xMDMzLTQ3NzItYjJmMS0yODQ5MTAzNjIzMWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvOGJlMWYx
LTEwMzMtNDc3Mi1iMmYxLTI4NDkxMDM2MjMxYi8xL0pXUy1nZXk4Rk5oMEFudnlP
NTNzUDM4Z2dPcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW9irMA0EAgACMAcDBQMqEtnAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMhTjANBgkqhkiG9w0BAQsFAAOCAQEASxUmG5KgcR5Z
5UL/9olToK9aU+AgNt/+tLa3henBpqy750qkDHwkmbb8qAOLhHrkPVnY07oivRon
aXq3xpvXKlbjDZJSKO4VSYqJTe4WV5CXHasdyUreGcSe+j205t9I+SPc9/Xlzao6
HgyUcxYl716V/gETU4mDTQz0VXN56cG6ix+v2Y6dBmnIk4DHYAGj9kDEgsw/qqzB
as07Ec2rjIF9/4+v8EqRli7fC4VE5jSoretoJOb2OUMXjDchO7JycVrSU4aRM1fd
AOqaB+Y3j9+jqgzFIpKu754lqWpbo8U/QRxR/lvCSEET8WRKmAbn6GRxOgWxuWUM
XmTG57n7TA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:59 2024 by rpki-client on console-ams.rpki-client.org