Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
File:                     RAzmhNVwHdsComtV4p6sn-gE3to.cer (raw, json)
Hash identifier:          b+q2XNjsz/Ldw+VQRkyf9H3Bqv+Tp8gwMdtsZY6UqcY=
Subject key identifier:   44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC4922F7A27A95FE9614703F1A577B344
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:29:23 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 94.103.176.0/24

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 07:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:2f:7a:27:a9:5f:e9:61:47:03:f1:a5:77:b3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:29:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=440ce684d5701ddb02a26b55e29eac9fe804deda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:65:5d:7b:e6:bd:81:91:91:cc:62:a0:e8:86:
                    ae:29:3a:0f:9a:51:d7:d3:15:65:cc:0e:e3:2d:3f:
                    65:ed:8c:c8:8e:0c:50:7f:de:b9:cc:61:30:82:43:
                    f8:82:4a:0d:41:9e:da:c9:72:b2:3f:15:01:c2:1d:
                    9b:e4:6e:0c:0f:0f:b7:05:42:96:b9:88:46:d7:e7:
                    89:a0:86:02:b0:b0:44:aa:96:db:e4:11:2f:b3:4e:
                    13:4d:97:ec:2a:a8:e7:c0:03:c5:9d:66:58:50:ea:
                    21:96:c1:a4:f2:57:fd:92:52:0d:db:a9:39:ea:56:
                    5a:cc:07:d7:7b:2a:db:ea:7a:75:5b:39:90:83:8b:
                    a2:b6:1d:6c:2e:a7:72:2b:7e:19:01:40:8f:92:68:
                    97:0b:b9:77:1d:5a:be:55:54:e4:f6:89:f1:2b:ab:
                    96:7e:39:8c:0a:75:85:7d:ce:2a:56:b7:f6:bd:f0:
                    e3:26:7c:18:fb:43:f2:95:48:5c:87:6b:4a:08:c1:
                    b3:91:28:6a:a2:7c:ac:9a:ec:86:38:a2:67:7c:19:
                    28:01:65:61:56:69:08:85:7a:c5:a6:e4:d0:f8:4d:
                    a6:0a:f6:68:e6:34:21:14:c8:86:d5:06:c1:7b:d2:
                    d1:6f:dc:bf:92:b8:ed:2b:28:f7:cb:35:ee:cb:44:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:58:ee:e2:ba:64:45:9f:74:57:0d:c8:d9:d5:2d:1f:84:1a:
         d4:8d:dc:4d:dd:df:db:fe:3f:f6:db:3f:43:26:2e:bb:a4:5d:
         1c:98:cf:51:ad:d7:45:c6:76:31:f7:95:6e:a1:a5:3c:fa:c7:
         cb:db:b6:86:58:f1:65:72:5e:a2:2d:e3:7e:a2:43:b7:85:37:
         e8:f1:d2:68:9d:7b:6a:b8:3c:22:93:a8:75:d1:a6:35:93:38:
         56:1f:76:72:04:6f:04:be:a4:22:b1:2e:96:e5:bd:e3:ff:a6:
         34:d0:e1:fc:7c:96:e9:b3:95:27:e5:4d:16:20:32:20:16:ca:
         62:d7:0d:ca:5c:a4:1f:86:de:e2:a2:2d:3b:2e:49:66:6c:cc:
         3c:ce:ee:dc:ef:29:45:a4:20:ca:3f:45:8b:0e:20:a5:74:f1:
         2f:41:32:8f:3d:05:f7:08:75:9e:eb:fa:44:f6:e0:d2:2e:8a:
         f8:20:45:82:a4:72:f6:91:a0:b5:32:44:2e:32:57:67:be:22:
         73:d2:af:88:e5:bb:40:07:87:16:6b:03:00:2d:5d:24:ec:94:
         80:85:01:b4:b7:1a:cc:75:13:56:6d:63:06:a9:6c:f9:17:bf:
         0b:ca:38:cc:7b:ad:58:96:16:f9:c4:44:14:6b:c0:74:f9:5e:
         45:31:9e:4e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzEki96J6lf6WFHA/Gld7NEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDBjZTY4NGQ1NzAxZGRiMDJhMjZiNTVlMjllYWM5ZmU4MDRkZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2Vde+a9gZGRzGKg6IauKToPmlHX
0xVlzA7jLT9l7YzIjgxQf965zGEwgkP4gkoNQZ7ayXKyPxUBwh2b5G4MDw+3BUKW
uYhG1+eJoIYCsLBEqpbb5BEvs04TTZfsKqjnwAPFnWZYUOohlsGk8lf9klIN26k5
6lZazAfXeyrb6np1WzmQg4uith1sLqdyK34ZAUCPkmiXC7l3HVq+VVTk9onxK6uW
fjmMCnWFfc4qVrf2vfDjJnwY+0PylUhch2tKCMGzkShqonysmuyGOKJnfBkoAWVh
VmkIhXrFpuTQ+E2mCvZo5jQhFMiG1QbBe9LRb9y/krjtKyj3yzXuy0ScQwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEQM5oTVcB3bAqJrVeKerJ/oBN7aMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2E0ODc5
MS1jYWZkLTQyM2YtYmQ2MS04MTZhOGMyMTA2MjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvYTQ4Nzkx
LWNhZmQtNDIzZi1iZDYxLTgxNmE4YzIxMDYyNC8xL1JBem1oTlZ3SGRzQ29tdFY0
cDZzbi1nRTN0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAXmewMA0GCSqGSIb3DQEBCwUAA4IBAQCJWO7i
umRFn3RXDcjZ1S0fhBrUjdxN3d/b/j/22z9DJi67pF0cmM9RrddFxnYx95VuoaU8
+sfL27aGWPFlcl6iLeN+okO3hTfo8dJonXtquDwik6h10aY1kzhWH3ZyBG8EvqQi
sS6W5b3j/6Y00OH8fJbps5Un5U0WIDIgFspi1w3KXKQfht7ioi07LklmbMw8zu7c
7ylFpCDKP0WLDiCldPEvQTKPPQX3CHWe6/pE9uDSLor4IEWCpHL2kaC1MkQuMldn
viJz0q+I5btAB4cWawMALV0k7JSAhQG0txrMdRNWbWMGqWz5F78LyjjMe61Ylhb5
xEQUa8B0+V5FMZ5O
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-fra.rpki-client.org