Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M_sbWbHibwJOiR7o6FkfosIXKDo.cer
File:                     M_sbWbHibwJOiR7o6FkfosIXKDo.cer (raw, json)
Hash identifier:          LXCelmvOHAAtNiCk8fMnU8Xi3Lp7A5ETX/6Ph39Yhk0=
Subject key identifier:   33:FB:1B:59:B1:E2:6F:02:4E:89:1E:E8:E8:59:1F:A2:C2:17:28:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAED828C78FD7CC9A26B9DCFFBDAC92
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3f/cd5097-96ca-4d37-9314-838389840c19/1/M_sbWbHibwJOiR7o6FkfosIXKDo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3f/cd5097-96ca-4d37-9314-838389840c19/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:33:27 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 60935
                          IP: 77.87.120.0/24
                          IP: 2a11:e700::/29

Validation:               Failed, certificate revoked on Thu 24 Aug 2023 08:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:ae:d8:28:c7:8f:d7:cc:9a:26:b9:dc:ff:bd:ac:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:33:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=33fb1b59b1e26f024e891ee8e8591fa2c217283a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4a:a4:45:3b:fd:55:f4:41:a8:ec:ca:23:d8:
                    70:c0:c0:29:fd:33:c1:c1:c7:de:cf:2a:22:dc:ec:
                    63:e4:57:70:43:20:8b:72:5c:4d:12:80:16:07:e5:
                    38:d0:37:30:da:86:54:fa:27:d6:24:b9:a4:7c:92:
                    60:d9:4b:99:5a:9e:91:7c:34:f2:3b:43:10:1e:49:
                    0c:12:f0:34:01:00:61:0c:b4:b5:39:f1:72:14:11:
                    49:fb:c0:86:df:44:27:5e:8f:31:0b:ad:50:2a:46:
                    21:85:0b:3e:d8:5f:a4:4c:a0:3a:67:0d:8d:13:17:
                    12:89:9d:23:8f:e9:90:f5:a8:47:8c:44:ed:b7:2a:
                    5c:fd:30:63:59:56:5a:6b:83:ec:45:6d:c2:46:b1:
                    dd:41:06:9b:b1:1c:64:c1:8b:25:7e:7b:61:78:61:
                    71:65:3b:93:5a:c0:04:34:e1:34:c9:0d:54:fe:b8:
                    78:29:8f:14:e1:96:02:54:fa:9a:52:8c:06:cf:05:
                    f4:05:65:e7:39:da:1c:ac:e5:00:28:cd:62:87:34:
                    c2:11:6a:98:64:70:45:1f:7f:d1:b7:37:76:9c:6b:
                    bc:8f:30:6d:09:22:92:ca:bf:2c:04:33:b8:98:16:
                    ff:dd:f2:4e:06:b2:f2:0d:86:7c:62:b0:7f:68:b9:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FB:1B:59:B1:E2:6F:02:4E:89:1E:E8:E8:59:1F:A2:C2:17:28:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cd5097-96ca-4d37-9314-838389840c19/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cd5097-96ca-4d37-9314-838389840c19/1/M_sbWbHibwJOiR7o6FkfosIXKDo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.87.120.0/24
                IPv6:
                  2a11:e700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60935

    Signature Algorithm: sha256WithRSAEncryption
         05:b2:05:e2:e6:be:97:ad:15:01:1f:99:7a:79:99:b8:4e:a5:
         e5:7b:26:92:cd:2b:71:91:59:cf:69:6d:81:e3:3b:c3:16:8a:
         47:ba:84:dd:4f:0f:e7:d7:44:3f:07:0e:51:21:ac:1a:b5:bc:
         95:a9:a1:61:ee:88:4a:70:45:d3:f0:7f:5a:2b:99:6f:44:43:
         8e:c5:7c:72:54:48:96:3c:c4:bc:8d:37:8b:0e:51:49:9f:d1:
         04:c5:82:7e:5c:31:f8:14:bd:33:41:2e:7b:db:df:86:3d:7d:
         48:43:55:5d:de:7d:ec:82:aa:4c:7f:db:0e:63:86:89:3d:44:
         da:f1:06:a9:b0:80:1f:e7:31:67:b0:da:23:4b:52:b1:df:40:
         bd:35:01:88:c4:dd:cb:8a:66:0a:45:38:7d:a2:1d:c5:be:54:
         b1:2a:f7:de:bd:86:f5:3c:9e:7c:6e:93:0e:20:cf:ba:5c:52:
         5a:2b:d8:21:de:16:ee:23:d1:b7:69:3d:24:65:c4:86:94:de:
         81:6c:2f:04:6a:95:5a:d8:73:79:c0:9a:05:4a:3f:0f:12:f7:
         e7:13:1d:88:e7:43:67:1e:07:f8:34:e9:74:c2:62:b4:71:2c:
         c7:67:22:a9:7b:c1:b7:9c:05:7b:00:dd:18:bd:b6:53:33:d6:
         dc:df:7a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-fra.rpki-client.org