Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PlaTc37xsCIYWzbGj30zdyPXzfs.cer
File:                     PlaTc37xsCIYWzbGj30zdyPXzfs.cer (raw, json)
Hash identifier:          tfFw1cH9GSBji57FsKEm9DwBYCMDE5GaolyEyr50vJM=
Subject key identifier:   3E:56:93:73:7E:F1:B0:22:18:5B:36:C6:8F:7D:33:77:23:D7:CD:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D27E43EC3AA2EEF718713EB90CBB7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/PlaTc37xsCIYWzbGj30zdyPXzfs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:42 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 62.68.87.0/24
                          IP: 2a12:c280::/29

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 10:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:27:e4:3e:c3:aa:2e:ef:71:87:13:eb:90:cb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3e5693737ef1b022185b36c68f7d337723d7cdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2c:aa:40:fe:99:7f:d8:89:8e:8c:4a:81:66:
                    66:b5:bb:69:74:ae:86:bd:2c:79:8b:b1:ae:91:57:
                    20:79:6b:06:9c:e9:43:ce:9d:5d:40:20:46:be:d2:
                    4b:0c:bf:61:54:fe:5b:77:ce:c8:85:21:0e:64:c2:
                    39:6f:57:5d:f2:1a:78:29:31:d9:1f:ec:0f:36:17:
                    9a:fc:9f:e1:6f:25:51:33:1b:b9:8c:d9:d9:66:d4:
                    2b:c6:da:aa:44:b9:b4:b1:a5:05:4c:01:a3:a6:c3:
                    74:11:14:cf:b2:99:69:2a:c6:8d:91:e1:9b:4a:e6:
                    00:ac:5e:a5:2c:df:9a:ef:5e:03:77:b1:ed:c0:25:
                    54:f7:bb:4a:ac:f2:ae:8e:0d:3e:d8:3a:51:fe:95:
                    14:a7:8b:8a:6d:78:87:17:5b:ec:5a:f6:4d:81:39:
                    c7:fe:7d:4f:8b:2f:6f:7d:7a:23:1f:12:b0:81:bb:
                    43:73:b1:58:bb:90:e7:67:78:0f:d3:37:c9:33:c7:
                    a0:7c:ee:b7:b4:cd:0e:61:4c:08:31:13:bb:b5:c3:
                    b6:d7:4c:7e:c2:7d:ed:dd:7e:9b:a4:61:4b:6c:02:
                    18:af:4b:5f:cf:04:5c:c5:ac:b6:e4:00:5a:21:26:
                    6f:5e:77:a3:f5:a6:59:78:f3:c2:07:fd:b1:c2:48:
                    c4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:56:93:73:7E:F1:B0:22:18:5B:36:C6:8F:7D:33:77:23:D7:CD:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/PlaTc37xsCIYWzbGj30zdyPXzfs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.87.0/24
                IPv6:
                  2a12:c280::/29

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:99:02:fb:b9:c7:99:ab:c1:68:b7:83:57:91:df:fd:d0:
         94:94:21:69:98:99:17:a8:26:e7:84:53:b7:05:b0:17:d9:f5:
         e9:48:c4:51:6b:0b:6c:0f:ac:55:7c:b4:27:73:1b:c2:c3:86:
         3f:9b:f6:d4:8d:c1:c4:5e:21:7b:0e:b0:8d:48:5f:33:0d:f0:
         83:4b:28:b7:a2:32:bd:a3:17:7a:ae:07:d5:c2:d2:b9:c3:f1:
         65:f4:a7:4a:77:93:19:0a:38:c8:75:13:4c:ef:b2:b0:47:c6:
         28:24:a2:f1:c6:62:6f:b2:46:07:99:bd:bc:d1:7f:10:a7:40:
         af:07:8e:19:00:e3:d3:99:e7:78:8d:f5:85:6a:0d:3a:f3:91:
         d1:ab:6f:7f:cc:f4:99:70:42:ee:87:fe:1e:f4:ae:f4:79:fe:
         48:1a:0d:b4:a0:b0:17:fe:a1:4a:60:d4:e3:44:43:4d:a4:a8:
         93:2c:fd:ad:78:44:65:ef:ef:fa:8f:00:44:c1:43:1b:37:25:
         4a:fc:4f:79:5c:c8:b4:9a:3b:4a:a1:a2:ef:25:d0:30:0c:d5:
         a0:c5:01:c3:d5:e2:5e:37:66:6c:68:16:51:48:f9:fd:a6:03:
         20:c4:72:a1:80:f5:43:fa:2e:be:5c:4f:74:54:22:6d:cd:bb:
         d5:2d:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:05 2024 by rpki-client on console-fra.rpki-client.org