Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M4vrdbTf4gkm1pxLxyoq089jLA4.cer
File:                     M4vrdbTf4gkm1pxLxyoq089jLA4.cer (raw, json)
Hash identifier:          pCy+/XUvs3ZEJ7O2b2l2zyQaxVPZNDoU2nrfVUYu4D0=
Subject key identifier:   33:8B:EB:75:B4:DF:E2:09:26:D6:9C:4B:C7:2A:2A:D3:CF:63:2C:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A943E6180273FE8B508DDFFA8B3D70113
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://0.sb/repo/sb/19/338BEB75B4DFE20926D69C4BC72A2AD3CF632C0E.mft
caRepository:             rsync://0.sb/repo/sb/19/
Notify URL:               https://0.sb/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 15:10:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.163.0/24

Validation:               Failed, certificate revoked on Thu 28 Dec 2023 10:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:94:3e:61:80:27:3f:e8:b5:08:dd:ff:a8:b3:d7:01:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 14 15:10:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=338beb75b4dfe20926d69c4bc72a2ad3cf632c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:83:e1:ab:66:67:4d:a8:21:76:27:c1:4a:
                    c5:2d:60:9b:38:91:40:ff:68:0b:f5:56:5c:db:9a:
                    53:49:49:0f:5a:ed:0e:00:bb:75:53:0b:00:04:e2:
                    40:36:63:72:f7:86:d3:1d:97:b4:83:74:92:e5:29:
                    65:bd:22:64:65:0d:b6:ea:37:67:35:a1:7c:37:3c:
                    f5:07:d4:e8:60:d3:f2:70:21:47:aa:0c:7d:13:bb:
                    0b:c0:c2:a9:69:d2:8e:bd:39:ce:7b:7e:94:68:6e:
                    87:98:e5:43:ee:57:ba:f5:a4:10:ed:91:ec:3f:e7:
                    b9:72:48:1c:f6:b7:cb:c4:19:ae:57:c6:29:28:e7:
                    46:13:f7:e7:52:0b:55:ef:64:74:93:82:89:55:17:
                    25:ff:87:16:8d:69:c5:c9:44:8b:f1:e7:e1:29:f8:
                    20:34:46:0a:b6:93:22:2f:fe:1b:57:8a:2a:86:9a:
                    5e:ae:89:f5:86:fe:11:33:f9:2b:5e:5b:8f:49:76:
                    d9:ed:1e:03:79:bb:d4:e1:c8:f1:25:d6:02:de:38:
                    48:05:ee:92:2c:01:66:89:e9:62:6d:9e:23:45:53:
                    04:08:03:5f:a1:dc:bd:9d:e9:42:d2:b9:45:fd:cc:
                    ee:12:e7:1a:72:60:48:a4:fd:e5:bc:67:b3:a5:0f:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8B:EB:75:B4:DF:E2:09:26:D6:9C:4B:C7:2A:2A:D3:CF:63:2C:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://0.sb/repo/sb/19/
                RPKI Manifest - URI:rsync://0.sb/repo/sb/19/338BEB75B4DFE20926D69C4BC72A2AD3CF632C0E.mft
                RPKI Notify - URI:https://0.sb/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:eb:31:89:4f:33:3c:1f:7a:11:36:b0:f7:74:06:a3:a4:42:
         4a:14:a0:25:e0:21:78:2e:bf:db:4a:69:2b:68:09:4a:36:6c:
         bb:f8:d2:a2:53:02:4d:77:a6:96:f6:e6:2d:19:e3:29:67:6a:
         5d:7a:53:72:b0:92:f9:f8:ae:e8:d4:67:1d:31:ab:a3:55:32:
         7f:07:58:ed:96:9e:78:92:d1:fa:7d:6b:9b:ac:f7:2c:7c:49:
         7c:f2:84:11:90:ea:0b:8b:84:cd:a6:82:2e:ae:33:a7:60:b0:
         93:af:33:14:c9:86:db:ef:96:fc:a2:0a:85:15:30:28:a0:fd:
         00:72:e6:3f:59:36:87:a2:31:be:d0:90:ff:93:d0:e2:37:12:
         10:b2:bd:16:7a:4f:e5:f8:6f:89:78:56:35:41:d0:e1:ff:b5:
         2d:dc:4f:bd:de:4c:86:d9:56:7b:05:3d:d5:e0:d0:31:4c:ea:
         c5:d0:5d:68:9a:2b:9c:8d:4e:d9:1e:7a:5c:a2:4e:ad:73:86:
         24:b5:05:ca:af:36:4f:23:09:d7:09:fa:04:9a:d6:9d:de:f3:
         28:e1:54:06:af:c2:ed:41:4e:9b:c9:44:bf:e6:cd:62:b9:0a:
         25:f1:e2:72:2a:65:a9:e0:37:cc:3e:1c:4b:83:20:5a:08:1b:
         4f:dc:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:11 2024 by rpki-client on console-fra.rpki-client.org