Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PMglg2ItdM5btblOTO12P_7RAas.cer
File:                     PMglg2ItdM5btblOTO12P_7RAas.cer (raw, json)
Hash identifier:          up/akZhuD0+CXjIS6WGpWgmZ6lbJuN6qc9wdeR6/XMk=
Subject key identifier:   3C:C8:25:83:62:2D:74:CE:5B:B5:B9:4E:4C:ED:76:3F:FE:D1:01:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAF44345F32AB5F94F923809476D077
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/48b571-67e7-4497-96a3-ecec780e7ffd/1/PMglg2ItdM5btblOTO12P_7RAas.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/48b571-67e7-4497-96a3-ecec780e7ffd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:33:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 62177
                          IP: 87.236.151.0/24
                          IP: 2a11:4180::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:af:44:34:5f:32:ab:5f:94:f9:23:80:94:76:d0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:33:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3cc82583622d74ce5bb5b94e4ced763ffed101ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4d:f9:cb:db:d5:7e:cb:91:06:59:eb:35:66:
                    56:f7:52:40:5b:d3:db:5e:7d:0e:18:c9:65:b8:bd:
                    70:38:ff:a8:09:4f:6d:c6:9c:60:92:67:b0:74:ad:
                    88:96:08:9b:df:23:c8:e1:a7:ff:43:2f:f1:09:96:
                    f3:53:6b:cd:8c:24:ba:49:d6:ba:63:c3:c5:f9:25:
                    39:4a:7e:9f:6f:16:84:33:ad:d0:1a:5f:db:7e:f4:
                    08:5d:7a:d6:a3:07:2d:fa:f9:6c:91:27:e4:05:bf:
                    1a:73:b2:b4:75:a0:55:bf:f8:8e:e9:18:80:ce:e2:
                    9d:21:17:34:c9:24:67:75:f4:65:18:ee:cc:c4:01:
                    55:fc:26:cc:4e:52:64:39:89:9b:9e:d5:b6:f4:2f:
                    2c:b7:d0:eb:8b:8a:95:cb:3f:8f:d7:fc:62:dc:7f:
                    7c:be:04:c0:01:67:ff:14:b5:d0:ea:9c:c3:26:d8:
                    84:65:75:58:69:a9:12:e8:7e:a7:0f:18:30:aa:d9:
                    f3:f3:bc:fb:d7:12:a6:93:c6:46:af:4a:57:e1:d4:
                    24:f6:71:97:f8:a3:21:ba:6a:31:75:69:06:4d:f7:
                    4e:04:66:bb:23:4a:8f:96:2c:ab:11:bc:5d:e7:ac:
                    ae:34:5d:df:2e:b2:d7:cc:e5:4b:43:36:4b:4b:05:
                    16:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C8:25:83:62:2D:74:CE:5B:B5:B9:4E:4C:ED:76:3F:FE:D1:01:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/48b571-67e7-4497-96a3-ecec780e7ffd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/48b571-67e7-4497-96a3-ecec780e7ffd/1/PMglg2ItdM5btblOTO12P_7RAas.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.151.0/24
                IPv6:
                  2a11:4180::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62177

    Signature Algorithm: sha256WithRSAEncryption
         4f:53:c0:44:88:0d:41:b4:99:b0:c0:0d:3f:24:10:e1:3f:57:
         e9:cb:1a:01:2d:d8:ef:70:2b:6f:61:47:75:35:cc:e9:38:b9:
         95:46:ef:31:a0:e5:71:e4:af:7f:12:12:9c:d8:55:35:9f:23:
         db:46:ad:b5:c4:3d:74:88:1a:d2:81:dc:5f:ce:d6:9b:45:f9:
         e1:07:a8:9d:a6:cc:3b:9f:ae:3e:54:0e:3e:f7:d3:c9:b6:ca:
         df:6c:15:fa:00:18:06:cb:e2:1f:a0:fd:ee:ff:c7:18:4a:96:
         fe:bd:9b:67:cf:2f:50:76:f5:c7:bc:20:ff:2f:75:a4:83:ed:
         ac:77:70:47:24:bd:b8:ff:d3:15:2c:96:9f:0b:fb:7c:32:ca:
         40:02:f1:d0:75:ae:fc:e8:d8:28:7e:f1:61:b4:9f:45:87:78:
         22:f1:ec:61:18:ae:22:3a:27:e0:ac:db:84:a2:15:71:a6:63:
         e0:a2:be:d9:c3:80:4e:0f:96:f0:0c:5c:fa:bf:c2:49:51:b9:
         6f:63:88:bf:2d:67:32:54:ce:de:7d:73:e1:6c:6f:5d:56:b7:
         e1:81:b9:aa:72:ea:ad:73:8a:8a:e5:b5:82:3e:84:bd:20:63:
         da:89:8b:e5:4f:a5:76:22:62:83:a7:1d:9c:a4:fa:9e:fc:46:
         54:77:99:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 07:31:25 2023 by rpki-client on console-fra.rpki-client.org