Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K5_wDSvDLf4zI-k0ODMCKwvWZws.cer
File:                     K5_wDSvDLf4zI-k0ODMCKwvWZws.cer (raw, json)
Hash identifier:          6J7sntTReWkU9nM3my2YuZ1dK81hfPUACA7J+1p1G4o=
Subject key identifier:   2B:9F:F0:0D:2B:C3:2D:FE:33:23:E9:34:38:33:02:2B:0B:D6:67:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018845720952D3D97F7528C6FC52344B8345
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/Mlgt/0/2B9FF00D2BC32DFE3323E9343833022B0BD6670B.mft
caRepository:             rsync://rpki.co/repo/Mlgt/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:51:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 203323
                          AS: 204508

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:45:72:09:52:d3:d9:7f:75:28:c6:fc:52:34:4b:83:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 22 21:51:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2b9ff00d2bc32dfe3323e9343833022b0bd6670b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:3b:cd:e3:14:ce:63:26:8c:a8:65:9a:e0:
                    e7:4e:46:a0:cc:8f:6a:79:d7:c4:11:c7:fb:56:4c:
                    f7:f9:3a:30:f9:bd:22:26:38:95:e5:6e:83:ea:de:
                    56:f6:a5:9f:b6:7c:81:46:5d:7e:53:44:dc:f1:c9:
                    6a:56:2d:21:0d:c2:87:34:8e:a8:3e:86:1f:02:51:
                    ab:1c:bf:87:22:8d:00:9f:c3:27:82:1e:5b:82:6c:
                    02:e2:90:26:e9:1b:19:9f:4d:9d:eb:a9:8b:2f:05:
                    1c:ef:cd:38:89:07:cc:82:3e:e3:80:5a:ad:35:f3:
                    19:40:77:84:2c:a2:5a:1f:7d:2c:b1:94:93:c9:bd:
                    27:84:d7:dc:c1:48:11:bf:94:f9:cd:a8:52:72:7a:
                    85:95:6b:3d:28:d0:e2:c8:62:63:32:b3:a6:84:c9:
                    0f:5f:aa:93:98:1e:58:0d:45:72:56:9f:9b:4f:ed:
                    b3:c3:d5:73:6d:28:0c:d4:71:03:7c:d8:61:d3:72:
                    39:f4:9a:86:1f:43:39:c9:ce:0c:b0:0c:ea:55:40:
                    12:5c:04:a2:e4:6f:94:59:c0:46:bb:06:cd:06:e3:
                    71:9d:2b:43:9a:74:08:8a:70:7e:3f:4b:08:19:f4:
                    ec:dd:ef:8e:36:89:37:21:05:19:ec:a5:9d:09:0e:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9F:F0:0D:2B:C3:2D:FE:33:23:E9:34:38:33:02:2B:0B:D6:67:0B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Mlgt/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/Mlgt/0/2B9FF00D2BC32DFE3323E9343833022B0BD6670B.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203323
                  204508

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:c8:50:28:02:c0:ba:ec:d9:95:c6:01:dc:01:a2:34:40:
         cd:41:b7:f1:18:d6:fb:76:b9:27:1f:92:c0:38:46:24:c0:0b:
         83:0d:fc:15:3b:7f:ff:c1:b1:e6:24:b8:1e:ab:3f:b8:7b:c4:
         76:39:5c:55:8d:78:96:52:ea:db:55:ed:af:2f:16:bc:66:1d:
         9f:6c:c0:3c:f0:8a:79:01:31:73:d3:02:e5:9f:0e:5e:f5:f3:
         51:62:7f:0f:e0:0b:97:d6:c6:84:c5:80:29:04:60:42:c7:f1:
         ec:ce:fa:12:68:07:a6:c4:27:60:04:1f:07:42:c7:5c:ac:98:
         70:d1:46:f6:e2:19:80:59:21:e2:2f:f3:bb:4a:98:a1:9f:6e:
         1f:1e:1e:97:19:a3:36:a7:ca:f7:fc:31:d6:c2:ba:e7:18:8e:
         3b:ed:b5:56:f6:98:91:c8:f8:06:be:0f:49:af:69:63:24:0c:
         a9:09:24:d3:be:4f:a1:a3:27:be:21:ac:bf:81:ce:89:11:92:
         e5:5b:d9:dd:13:2b:1e:93:7d:85:5a:90:c1:13:91:90:be:10:
         fb:0c:40:15:54:c9:76:2b:3b:8c:d1:07:05:82:1a:ac:ea:94:
         6b:68:7c:0e:e8:84:28:ab:ca:9f:16:30:99:62:5d:31:86:a5:
         1d:66:69:62
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAYhFcglS09l/dSjG/FI0S4NFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNTIyMjE1MTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjlmZjAwZDJiYzMyZGZlMzMyM2U5MzQzODMzMDIyYjBiZDY2NzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeo7zeMUzmMmjKhlmuDnTkagzI9q
edfEEcf7Vkz3+Tow+b0iJjiV5W6D6t5W9qWftnyBRl1+U0Tc8clqVi0hDcKHNI6o
PoYfAlGrHL+HIo0An8Mngh5bgmwC4pAm6RsZn02d66mLLwUc7804iQfMgj7jgFqt
NfMZQHeELKJaH30ssZSTyb0nhNfcwUgRv5T5zahScnqFlWs9KNDiyGJjMrOmhMkP
X6qTmB5YDUVyVp+bT+2zw9VzbSgM1HEDfNhh03I59JqGH0M5yc4MsAzqVUASXASi
5G+UWcBGuwbNBuNxnStDmnQIinB+P0sIGfTs3e+ONok3IQUZ7KWdCQ7uwQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFCuf8A0rwy3+MyPpNDgzAisL1mcLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgcgGCCsGAQUFBwELBIG7MIG4MCgGCCsGAQUFBzAFhhxyc3lu
YzovL3Jwa2kuY28vcmVwby9NbGd0LzAvMFQGCCsGAQUFBzAKhkhyc3luYzovL3Jw
a2kuY28vcmVwby9NbGd0LzAvMkI5RkYwMEQyQkMzMkRGRTMzMjNFOTM0MzgzMzAy
MkIwQkQ2NjcwQi5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnJkcC5ycGtpLmNv
L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElK
bkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBCAEB/wQQMA6gDDAKAgMDGjsCAwMe3DANBgkqhkiG9w0BAQsFAAOCAQEA
X2zIUCgCwLrs2ZXGAdwBojRAzUG38RjW+3a5Jx+SwDhGJMALgw38FTt//8Gx5iS4
Hqs/uHvEdjlcVY14llLq21Xtry8WvGYdn2zAPPCKeQExc9MC5Z8OXvXzUWJ/D+AL
l9bGhMWAKQRgQsfx7M76EmgHpsQnYAQfB0LHXKyYcNFG9uIZgFkh4i/zu0qYoZ9u
Hx4elxmjNqfK9/wx1sK65xiOO+21VvaYkcj4Br4PSa9pYyQMqQkk075PoaMnviGs
v4HOiRGS5VvZ3RMrHpN9hVqQwRORkL4Q+wxAFVTJdis7jNEHBYIarOqUa2h8DuiE
KKvKnxYwmWJdMYalHWZpYg==
-----END CERTIFICATE-----
Generated at Tue Oct 31 15:21:32 2023 by rpki-client on console-fra.rpki-client.org