Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MYr8UsgW7F1zbn5SwzhlKObLvuo.cer
File:                     MYr8UsgW7F1zbn5SwzhlKObLvuo.cer (raw, json)
Hash identifier:          h/q2Rm2S0WNmbLzkYvzJoNYZcOQd/5YKGtBVXa1M0CI=
Subject key identifier:   31:8A:FC:52:C8:16:EC:5D:73:6E:7E:52:C3:38:65:28:E6:CB:BE:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708903F360D032E69DC84C78CFCF6519
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/f109a8-f466-4def-abdd-1fe55061d28f/1/MYr8UsgW7F1zbn5SwzhlKObLvuo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/f109a8-f466-4def-abdd-1fe55061d28f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:31:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 210579
                          IP: 91.227.138.0/23

Validation:               Failed, certificate revoked on Thu 07 Dec 2023 08:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:89:03:f3:60:d0:32:e6:9d:c8:4c:78:cf:cf:65:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:31:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=318afc52c816ec5d736e7e52c3386528e6cbbeea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:87:66:f1:70:50:c6:1b:4c:0d:8b:47:ee:83:
                    ce:0e:c4:58:fb:70:91:25:88:89:d0:62:23:67:18:
                    42:7b:f9:de:43:bf:36:1e:45:06:d7:e1:47:c4:a0:
                    1c:eb:15:7a:2a:fd:e2:d7:7e:31:e5:11:2b:b9:00:
                    a6:1f:07:09:85:c1:fb:4c:b9:69:ea:85:3f:00:72:
                    9f:7e:5e:55:70:b2:ba:7a:8c:42:6d:a4:06:9d:b6:
                    3b:64:a8:12:65:8f:37:41:5e:b4:d8:64:4e:ea:17:
                    9b:a1:d0:44:3f:e2:6d:29:bf:25:61:75:92:71:71:
                    86:54:38:aa:37:f9:32:f2:18:5e:ea:3f:ee:ac:11:
                    9f:75:bb:7d:ec:8d:03:0d:d0:b4:28:84:02:66:aa:
                    42:27:6d:e5:97:7f:e0:c5:32:c7:9e:f8:7c:1b:4e:
                    a8:5d:47:f2:31:26:5d:c8:39:a3:73:2c:2e:7c:6e:
                    dc:85:71:dc:85:97:fb:5c:a2:84:a4:f7:48:ba:56:
                    60:70:5f:87:b4:b0:ad:d7:18:62:1c:5b:45:a7:a3:
                    38:39:a0:45:c2:9f:71:7f:5d:94:17:18:20:d7:ab:
                    28:d9:36:4e:9b:30:aa:d6:10:d2:74:37:88:ec:18:
                    e9:86:25:f9:58:d7:4a:67:7c:69:cf:d4:9a:75:81:
                    3d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8A:FC:52:C8:16:EC:5D:73:6E:7E:52:C3:38:65:28:E6:CB:BE:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f109a8-f466-4def-abdd-1fe55061d28f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f109a8-f466-4def-abdd-1fe55061d28f/1/MYr8UsgW7F1zbn5SwzhlKObLvuo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.138.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210579

    Signature Algorithm: sha256WithRSAEncryption
         21:b4:57:96:ab:05:69:40:26:46:65:23:3f:8e:43:f2:cf:11:
         c3:84:a2:06:1c:17:5d:40:43:f0:99:b7:fa:60:06:da:43:df:
         16:a5:54:34:90:25:52:16:a7:3e:f2:9e:f3:46:d2:21:d8:d6:
         ba:d3:8c:84:6f:8b:da:f1:2f:06:db:50:bc:9f:e6:76:73:8a:
         58:a7:60:d6:25:e8:e3:17:21:8d:a4:53:d6:28:0b:7a:78:96:
         52:ce:5e:c2:e0:06:8b:7e:32:2c:5f:ac:f2:45:f5:47:21:fa:
         d1:4f:08:72:d7:ae:c3:ab:ec:3d:67:c5:dc:bb:40:4b:3c:54:
         6d:5e:36:ce:b4:fa:a1:8d:e7:11:0c:6e:95:be:11:d9:e1:e6:
         4a:e3:80:4e:98:23:86:e4:a5:25:84:3c:fd:f7:11:e8:00:9c:
         8f:6a:1c:d7:1c:c1:6d:42:01:d7:75:04:b0:c5:83:47:3a:15:
         74:29:52:3c:42:de:11:c4:a0:d8:7d:07:48:8e:e8:86:6e:a0:
         96:ba:3b:d9:17:f7:fa:78:36:90:74:0d:13:d8:99:e8:28:3f:
         a1:62:35:3c:4a:32:7e:15:04:42:22:10:52:6e:a3:26:c4:cc:
         b6:21:36:67:08:47:b4:a8:c0:e1:10:f4:aa:a6:dd:cc:26:06:
         85:10:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:17 2024 by rpki-client on console-fra.rpki-client.org