Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
File:                     Pry3nvWKHJjhUfYMUUJvdOscOTg.cer (raw, json)
Hash identifier:          t4zs73pGKIGsjVZxO57VXSTyUibRybrZDqY7L8C0shM=
Subject key identifier:   3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC50026616D65D180B80D3F47A3B4B4D5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:29:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 51741
                          IP: 91.217.219.0/24
                          IP: 2a12:62c0::/29

Validation:               Failed, certificate revoked on Tue 26 Mar 2024 11:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:26:61:6d:65:d1:80:b8:0d:3f:47:a3:b4:b4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:29:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:b3:b4:3f:21:6a:1e:c0:1b:96:8f:be:16:
                    42:bc:88:08:0e:4b:f6:ae:d2:20:a7:ca:21:36:28:
                    09:16:68:ff:68:18:c6:1f:26:e3:a7:8b:de:6c:86:
                    a8:f2:0f:7a:7c:b5:6d:cc:a6:d8:23:c5:95:9f:8b:
                    70:a2:b5:59:96:98:78:3c:69:13:8f:6d:87:e9:03:
                    37:60:22:e3:d1:c7:2e:83:2e:af:16:4c:74:fe:a2:
                    74:4c:4c:af:6f:b4:9b:5b:24:c6:b4:c5:b7:34:59:
                    ce:53:ba:73:bc:8f:85:a6:80:13:a6:5e:7b:9d:02:
                    c8:0f:e2:91:ed:07:f1:31:ab:75:b2:74:c2:29:99:
                    79:15:c7:5e:46:48:38:ec:ae:ed:d6:8c:ff:ef:bd:
                    dc:93:78:2d:27:09:5f:81:d0:fa:b8:8f:2e:49:e5:
                    83:01:1a:74:c6:c1:eb:05:0a:b3:09:f2:cc:7e:cc:
                    89:96:b9:27:ca:2f:55:cd:cc:10:f5:38:2c:54:8e:
                    a2:56:86:4d:a8:e2:47:8f:36:5e:89:2f:ff:aa:61:
                    45:bc:6d:bf:54:3c:b2:95:c7:f0:08:50:5d:9a:d8:
                    39:ad:9c:c9:c7:68:ba:28:4d:67:e3:70:04:87:b5:
                    73:9f:2a:68:a6:a0:3b:1a:cc:e5:15:13:40:d9:f9:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51741

    Signature Algorithm: sha256WithRSAEncryption
         b0:5d:eb:93:ac:ce:ec:d2:9b:e6:3d:dd:a1:dc:54:b4:21:ce:
         ec:df:61:88:e6:36:c5:c5:53:3b:5a:84:ce:68:d8:20:60:5e:
         b5:23:e2:aa:0c:1b:2c:8b:56:f4:52:40:ee:24:aa:53:74:e8:
         37:2a:61:93:d9:91:db:11:13:af:53:65:61:cd:92:23:eb:71:
         c3:26:6f:a0:b2:ab:fc:60:8d:41:b6:e9:03:89:32:0f:08:98:
         46:2e:55:3a:d3:73:87:ac:49:ea:55:2b:81:2c:03:28:ad:40:
         c8:c3:2d:d8:75:be:b8:a8:ae:dd:82:9e:10:21:77:c2:c4:7e:
         41:e2:9d:ea:df:21:48:20:0e:71:f0:0e:38:ec:e7:d2:e4:65:
         96:b0:90:9a:91:b2:a1:ac:ee:1e:ef:c1:e7:92:08:07:f1:f8:
         8e:bd:12:3b:46:d3:8d:9d:2c:64:f2:10:3e:df:1f:70:5f:dd:
         8c:e1:a8:b4:de:b6:84:3d:f8:c3:fc:fb:15:31:60:7d:45:08:
         d0:eb:5e:f6:70:1a:58:d9:84:d6:a6:c1:56:6a:62:50:86:21:
         5b:90:79:f4:a4:31:dc:47:ea:94:9c:a0:cd:99:ff:7d:15:aa:
         90:6d:a9:ce:b3:b4:30:6b:f1:03:66:51:cc:5b:3b:3a:68:f7:
         61:8b:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:07 2024 by rpki-client on console-fra.rpki-client.org