Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L7eiuFwoq8yaAsZytDRUoViGZIU.cer
File:                     L7eiuFwoq8yaAsZytDRUoViGZIU.cer (raw, json)
Hash identifier:          0D6FMIr5SFTWbLQrNiTFtLx3QW1soHQ0MO/vjlRQqKY=
Subject key identifier:   2F:B7:A2:B8:5C:28:AB:CC:9A:02:C6:72:B4:34:54:A1:58:86:64:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA2BDED008D012A4BD6AEE1975A363B3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/L7eiuFwoq8yaAsZytDRUoViGZIU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:35:21 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 201933
                          IP: 91.193.116.0/22
                          IP: 2a06:40c0::/29

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 09:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:de:d0:08:d0:12:a4:bd:6a:ee:19:75:a3:63:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:35:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2fb7a2b85c28abcc9a02c672b43454a158866485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:ac:b4:47:46:f9:64:0f:d6:93:14:c6:50:
                    f9:3f:b4:19:2f:07:c1:3d:8c:ec:37:70:64:a2:63:
                    27:56:6f:98:2c:52:f6:95:73:3b:02:f9:12:3c:cd:
                    ff:9f:50:62:88:91:4f:c5:72:24:1f:ba:13:b8:24:
                    d9:67:67:f0:8e:98:d9:fd:92:c5:e6:dc:e6:08:66:
                    78:89:96:19:6a:a2:c3:18:a3:00:c6:88:4a:1e:96:
                    3b:5e:7c:2e:6e:b0:e3:e4:cd:f7:b5:c5:aa:b8:28:
                    3d:4c:89:ba:2d:f1:ff:b0:c3:c4:36:34:ef:3c:34:
                    4a:2b:f6:ed:28:f4:67:2d:21:fe:e8:9c:12:b4:eb:
                    71:50:d7:df:ce:70:3c:e8:11:4e:1a:3a:c3:a8:0a:
                    fa:01:f3:f4:b2:46:e9:22:a4:3f:be:d9:05:f9:5d:
                    98:47:2b:76:da:84:70:3f:ba:b2:7d:e4:7c:75:43:
                    0b:a7:5b:fc:41:da:ca:c6:eb:2a:29:5f:c4:05:ac:
                    e0:12:d4:de:ab:b0:4c:5f:76:39:6b:f0:b5:f8:17:
                    63:b2:f3:46:23:ec:1f:ef:f0:5f:be:25:7c:87:6c:
                    f1:68:0c:bd:b8:8f:85:a0:4f:e5:b6:57:af:a6:07:
                    c0:35:4b:6f:ee:c5:82:3b:d9:13:85:a3:6f:55:1e:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B7:A2:B8:5C:28:AB:CC:9A:02:C6:72:B4:34:54:A1:58:86:64:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/L7eiuFwoq8yaAsZytDRUoViGZIU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.193.116.0/22
                IPv6:
                  2a06:40c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201933

    Signature Algorithm: sha256WithRSAEncryption
         3b:b4:97:c0:05:80:41:1f:a3:4c:37:38:62:3d:b4:40:37:ce:
         70:35:af:40:65:27:99:5b:84:49:c0:cd:34:c5:38:cc:5a:0a:
         83:a2:3e:81:a7:ab:bb:85:66:80:a8:89:84:62:0d:4c:ff:d0:
         09:45:16:e6:10:7c:59:f3:89:c2:2e:98:f6:21:74:30:e2:36:
         30:29:04:b8:24:ae:35:b3:ea:51:24:88:9b:c9:ad:26:c0:c2:
         94:46:b3:0e:0e:08:cc:ba:61:a2:f6:6e:42:57:de:df:f7:a4:
         7a:38:1a:d5:ea:69:b9:d8:32:18:25:25:71:74:48:c3:c1:e5:
         6f:cb:99:db:73:89:95:87:92:e6:50:3b:ce:40:2b:7a:d3:d6:
         01:80:1d:91:08:c4:9c:96:b0:c4:76:c0:61:86:a3:ca:2b:2b:
         e6:9b:d7:db:ff:a6:a6:10:59:44:0d:e1:4c:c5:ce:be:72:dd:
         61:50:2e:97:c9:ec:d9:5d:66:e5:cd:3c:c3:41:5e:41:94:59:
         16:16:6d:97:af:6d:2f:98:4c:d0:9c:39:d7:33:dd:1f:ec:89:
         30:16:86:93:85:69:8c:d6:54:ee:00:c8:c7:5b:10:15:49:05:
         84:5a:a6:59:51:c2:63:d3:cc:7d:aa:a3:22:da:d0:8e:a8:ef:
         63:16:a5:48
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzKK97QCNASpL1q7hl1o2OzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzNTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmI3YTJiODVjMjhhYmNjOWEwMmM2NzJiNDM0NTRhMTU4ODY2NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv6stEdG+WQP1pMUxlD5P7QZLwfB
PYzsN3BkomMnVm+YLFL2lXM7AvkSPM3/n1BiiJFPxXIkH7oTuCTZZ2fwjpjZ/ZLF
5tzmCGZ4iZYZaqLDGKMAxohKHpY7XnwubrDj5M33tcWquCg9TIm6LfH/sMPENjTv
PDRKK/btKPRnLSH+6JwStOtxUNffznA86BFOGjrDqAr6AfP0skbpIqQ/vtkF+V2Y
Ryt22oRwP7qyfeR8dUMLp1v8QdrKxusqKV/EBazgEtTeq7BMX3Y5a/C1+BdjsvNG
I+wf7/BfviV8h2zxaAy9uI+FoE/ltlevpgfANUtv7sWCO9kThaNvVR4EgwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFC+3orhcKKvMmgLGcrQ0VKFYhmSFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzdlOGI3
OC01MTJhLTQzOWQtOGVmNS1jMTI1NWE5MWViMDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvN2U4Yjc4
LTUxMmEtNDM5ZC04ZWY1LWMxMjU1YTkxZWIwNi8xL0w3ZWl1RndvcTh5YUFzWnl0
RFJVb1ZpR1pJVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCW8F0MA0EAgACMAcDBQMqBkDAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMUzTANBgkqhkiG9w0BAQsFAAOCAQEAO7SXwAWAQR+j
TDc4Yj20QDfOcDWvQGUnmVuEScDNNMU4zFoKg6I+gaeru4VmgKiJhGINTP/QCUUW
5hB8WfOJwi6Y9iF0MOI2MCkEuCSuNbPqUSSIm8mtJsDClEazDg4IzLphovZuQlfe
3/ekejga1eppudgyGCUlcXRIw8Hlb8uZ23OJlYeS5lA7zkAretPWAYAdkQjEnJaw
xHbAYYajyisr5pvX2/+mphBZRA3hTMXOvnLdYVAul8ns2V1m5c08w0FeQZRZFhZt
l69tL5hM0Jw51zPdH+yJMBaGk4VpjNZU7gDIx1sQFUkFhFqmWVHCY9PMfaqjItrQ
jqjvYxalSA==
-----END CERTIFICATE-----
Generated at Tue Jun 25 13:08:03 2024 by rpki-client on console-ams.rpki-client.org