Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JlyncJA3miGYXV_hM_FDuVaOwxE.cer
File:                     JlyncJA3miGYXV_hM_FDuVaOwxE.cer (raw, json)
Hash identifier:          rkETZ4wSekFPZOL9l1bUj6q0wMkPkidV3FMwTRzNXRk=
Subject key identifier:   26:5C:A7:70:90:37:9A:21:98:5D:5F:E1:33:F1:43:B9:56:8E:C3:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED1D19C44F440159DC08C10AC76AE71
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/JlyncJA3miGYXV_hM_FDuVaOwxE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:32:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 205296
                          IP: 185.222.4.0/22
                          IP: 2a0c:8440::/29

Validation:               Failed, certificate revoked on Fri 19 May 2023 13:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d1:d1:9c:44:f4:40:15:9d:c0:8c:10:ac:76:ae:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:32:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=265ca77090379a21985d5fe133f143b9568ec311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:be:be:30:d7:5e:3b:90:df:dc:c6:0d:ab:3b:
                    3e:2b:8d:6b:52:70:16:64:92:4f:59:53:95:b8:dc:
                    ea:cd:00:ad:7d:a7:d9:cf:3e:39:25:50:c8:59:f4:
                    89:5d:aa:00:22:fa:57:d3:66:50:7d:93:c4:79:a2:
                    e0:b0:cb:08:67:82:5c:27:2e:f5:8f:80:c2:24:e8:
                    0a:6b:bb:a0:5f:d2:b4:e8:91:0a:84:7c:ba:50:f1:
                    e1:11:9f:ec:c2:33:d2:3e:fe:08:8c:37:4a:ae:45:
                    46:56:81:1e:18:46:09:a7:29:f2:d1:d2:e3:0b:e5:
                    d0:23:97:ae:27:4f:c3:b7:51:f9:9c:a1:e6:aa:42:
                    05:83:01:74:e8:a0:92:1b:a7:3a:2f:fc:4b:92:f6:
                    dc:32:95:2c:33:e6:29:37:e0:40:05:b8:32:92:eb:
                    d3:a7:6a:30:a5:35:d0:d9:32:5c:08:bf:40:2b:68:
                    a6:cb:09:fa:32:60:27:c3:4c:f2:f5:4f:dd:28:2f:
                    07:35:b4:d4:62:c1:c4:bb:a1:4d:69:c9:44:8f:96:
                    e6:9f:f8:e1:27:ad:f5:c4:03:d7:a8:50:e9:28:d2:
                    3d:aa:d7:44:af:4c:c7:97:64:b0:00:da:30:48:43:
                    5f:1e:12:49:48:9b:67:64:46:91:e5:94:3f:26:22:
                    15:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5C:A7:70:90:37:9A:21:98:5D:5F:E1:33:F1:43:B9:56:8E:C3:11
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/JlyncJA3miGYXV_hM_FDuVaOwxE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.4.0/22
                IPv6:
                  2a0c:8440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205296

    Signature Algorithm: sha256WithRSAEncryption
         ae:52:4e:b3:a9:9e:d4:7f:13:7d:3b:a3:dd:2a:61:cc:28:8a:
         84:7e:85:5e:30:66:eb:d9:7a:54:3e:eb:c3:89:ce:72:b2:bd:
         8c:0a:96:d6:d8:c4:c7:95:ab:72:24:ee:6d:9b:96:16:f8:9d:
         86:95:6d:63:f5:19:26:9b:3b:d2:27:0a:81:ae:bf:2c:5c:bf:
         c7:9e:7d:96:7f:20:06:1a:1e:29:4d:e3:4a:eb:ab:79:36:2b:
         be:36:5e:36:ef:ac:48:e4:72:60:b8:75:08:9e:ee:77:67:53:
         72:60:95:14:59:87:8d:a5:71:44:b5:5b:2a:be:30:a9:7f:54:
         b1:d5:07:83:4a:b4:66:40:f7:7a:b9:6a:f6:91:54:0e:69:22:
         7d:a2:c4:02:cc:40:af:93:a3:c7:57:da:fa:24:aa:43:97:d7:
         df:c8:72:4b:4c:07:de:d2:5c:eb:d6:e0:f3:05:c5:02:0a:48:
         16:6d:b8:2d:a8:25:7c:86:56:cc:c9:8f:c6:b3:a3:62:04:a9:
         51:ac:e1:35:8b:37:5e:99:67:a0:3a:a3:f5:ec:4a:20:3b:4d:
         86:0c:cb:71:75:97:94:61:54:d3:85:6b:87:0b:ea:28:82:03:
         3a:9a:12:90:b9:b9:79:4f:a4:9e:ae:73:4e:9a:5b:ad:86:67:
         7c:25:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:06 2024 by rpki-client on console-ams.rpki-client.org