Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RAk01RfFBkEklrgIt98lyg_WRV8.cer
File:                     RAk01RfFBkEklrgIt98lyg_WRV8.cer (raw, json)
Hash identifier:          k7ARJBjP2zXNQ6jGqk7gyL2rXVhKf1LvKYsY2I1vPno=
Subject key identifier:   44:09:34:D5:17:C5:06:41:24:96:B8:08:B7:DF:25:CA:0F:D6:45:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0192E7BFA22DFF42E15D4E50DF9DCED04BB9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/RAk01RfFBkEklrgIt98lyg_WRV8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Nov 2024 12:42:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 210173
                          IP: 2a0d:9140::/29

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 12:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:e7:bf:a2:2d:ff:42:e1:5d:4e:50:df:9d:ce:d0:4b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  1 12:42:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=440934d517c506412496b808b7df25ca0fd6455f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:3d:13:32:d1:22:e6:36:60:13:db:af:d6:
                    9c:38:f0:41:54:5b:6b:70:6a:2a:f2:59:3f:be:c9:
                    c9:d8:a9:83:3c:2d:51:7e:c4:5e:19:ef:f5:f0:2f:
                    2b:7c:09:32:b4:5b:a0:3c:80:d7:21:c1:33:9c:6b:
                    e7:89:d1:69:b7:57:f6:73:de:0a:62:23:a4:fb:d5:
                    c9:54:d1:ea:a3:d4:32:13:c8:30:e8:5e:7d:52:a1:
                    f8:ae:8b:8a:aa:6b:e2:33:a0:f8:64:7d:b5:f9:f8:
                    cf:a0:97:06:7e:0a:85:d0:3b:49:4e:67:7f:52:3f:
                    00:0c:00:c5:e0:74:b2:80:0b:d3:18:bf:5a:40:1a:
                    ae:98:73:be:30:d6:53:8b:fa:03:36:64:ee:57:c6:
                    79:b3:32:62:e9:ea:89:06:af:0c:fd:74:ee:d4:3e:
                    4b:2c:87:11:de:1e:86:4a:c6:aa:7b:c5:ca:68:14:
                    1d:dd:3d:e0:21:46:7d:ba:1e:7a:a0:3f:72:9d:14:
                    a0:86:b3:e2:b8:c3:fa:22:6d:ac:31:da:37:b6:62:
                    68:58:85:4c:bb:46:67:94:42:b4:20:7a:b9:51:58:
                    54:3a:fd:90:66:4e:d5:31:92:59:34:20:df:f6:79:
                    10:ca:e3:71:e1:a0:61:26:b8:2b:39:e5:3e:d7:9b:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:09:34:D5:17:C5:06:41:24:96:B8:08:B7:DF:25:CA:0F:D6:45:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/RAk01RfFBkEklrgIt98lyg_WRV8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:9140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210173

    Signature Algorithm: sha256WithRSAEncryption
         4f:97:2b:3b:25:76:15:6c:6e:93:4e:e3:b4:5a:11:82:88:9a:
         85:e6:e2:38:bd:f3:c4:e6:1d:ed:67:be:57:4d:54:3e:3c:24:
         0b:73:4a:04:d9:a1:5a:34:79:b6:30:e4:f5:db:18:b4:45:7b:
         fd:3b:97:da:bc:c2:21:59:23:6e:c3:bd:2c:92:4a:96:9a:08:
         1d:24:8a:55:35:e0:aa:70:32:b6:44:f3:f3:fa:c9:cb:e8:ba:
         a7:5f:d0:6e:f4:3b:c4:e8:ea:17:9b:f1:33:9e:f2:9f:4e:34:
         fd:37:3e:d8:6b:15:94:52:bc:e5:0e:50:f0:36:62:02:cb:9b:
         f2:6c:06:86:6e:a8:f7:e4:d9:c7:f0:31:47:49:fd:65:91:0d:
         bf:92:cc:6a:6e:9f:a2:ae:76:63:21:57:67:be:a5:48:9c:ce:
         dd:67:61:96:2a:49:32:67:0c:89:3f:aa:3d:aa:67:1a:df:94:
         e7:c3:c4:02:af:55:dd:8c:e3:b5:05:65:47:7d:6c:66:a7:54:
         cb:63:de:f9:8d:f3:e6:d6:23:2a:d4:26:18:b5:d1:1d:ed:fa:
         07:82:a6:78:12:ec:d7:e7:5f:a9:9c:1b:2c:4e:3c:1b:75:c7:
         ad:9f:14:d0:57:a8:93:1b:2d:41:b0:73:e8:6c:fd:da:f8:73:
         cd:95:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:41:13 2024 by rpki-client on console-fra.rpki-client.org