Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RBpYVer4k2FaKBVgTJGQ2mcxZKE.cer
File:                     RBpYVer4k2FaKBVgTJGQ2mcxZKE.cer (raw, json)
Hash identifier:          +3/Re2yOg7Jq/dsCli7b80BGM6VPntZF6EZRasoWKY0=
Subject key identifier:   44:1A:58:55:EA:F8:93:61:5A:28:15:60:4C:91:90:DA:67:31:64:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD738CFA373C8EF22355C8713AAEDE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/7552cc-3fab-40f6-b882-c962072a6585/1/RBpYVer4k2FaKBVgTJGQ2mcxZKE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/7552cc-3fab-40f6-b882-c962072a6585/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:33:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211125
                          IP: 185.145.235.0/24

Validation:               Failed, certificate revoked on Wed 12 Jul 2023 11:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:73:8c:fa:37:3c:8e:f2:23:55:c8:71:3a:ae:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:33:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=441a5855eaf893615a2815604c9190da673164a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:0c:ff:a2:29:4f:29:4e:ba:10:fd:ae:d1:
                    46:d3:a5:75:e0:f5:61:ec:f7:28:95:c6:52:8c:43:
                    68:a5:31:48:6a:5e:89:3d:65:ac:2e:a6:18:ce:15:
                    89:34:e9:70:59:c1:96:59:75:e9:b4:ba:ad:cf:1d:
                    2f:c0:a2:0f:6d:76:1b:6b:ab:ee:89:18:ea:ed:f0:
                    cd:f0:5d:ef:f6:64:1a:0f:77:1a:64:ad:c8:1d:96:
                    9e:9e:b3:5f:71:d5:24:07:5c:16:10:01:e2:10:a7:
                    e7:4a:90:51:9a:ab:29:05:50:d8:7d:db:0b:ae:6d:
                    62:6e:e3:cb:10:33:82:4a:e7:a8:3f:34:28:16:89:
                    6e:7c:9b:dd:2f:8a:a5:1c:b3:75:49:48:33:69:03:
                    b0:95:d0:87:ea:8c:78:4a:15:90:1b:61:df:5e:69:
                    a0:81:3d:ff:88:4a:71:ea:c7:dd:e7:f9:bc:f6:58:
                    0f:8f:76:77:e0:c9:92:fd:3e:b3:3c:08:78:4b:da:
                    89:47:ec:7b:ba:67:2b:c2:a3:91:2d:81:4a:51:1e:
                    87:8c:fa:d8:b0:ea:e4:bd:b1:f8:69:84:38:a7:ff:
                    0b:95:99:bc:e0:d5:94:ad:e3:e4:d7:7a:b8:11:e8:
                    40:f3:4c:1c:5b:53:d1:12:60:15:ac:c9:78:9d:59:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1A:58:55:EA:F8:93:61:5A:28:15:60:4C:91:90:DA:67:31:64:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7552cc-3fab-40f6-b882-c962072a6585/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7552cc-3fab-40f6-b882-c962072a6585/1/RBpYVer4k2FaKBVgTJGQ2mcxZKE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.235.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211125

    Signature Algorithm: sha256WithRSAEncryption
         b0:c6:60:cb:d1:08:7e:aa:d4:bb:4d:27:ad:12:ec:24:b6:5c:
         87:f1:e2:e1:a2:37:5a:7a:30:e1:a8:35:bc:90:87:5d:81:73:
         25:9e:f4:ea:8a:2c:99:fe:f6:e1:86:7d:c8:00:87:37:ba:5a:
         9a:4f:cb:02:c1:24:0c:70:77:6d:6e:66:b7:0f:d4:f1:41:43:
         b7:3c:6b:53:1c:e9:b7:53:45:3c:2a:35:95:73:1b:1b:1e:fb:
         2f:91:23:78:e5:cc:67:d5:9e:ca:44:6c:e6:50:16:2f:2e:f8:
         f3:d5:09:46:80:2b:17:29:78:b9:40:de:6b:6c:a8:2c:76:d9:
         9d:ef:8a:66:96:c4:2e:50:f5:2e:6d:95:28:a5:de:93:b0:91:
         18:f6:d8:1a:14:c7:1e:d3:9e:65:e4:ca:a2:bc:d3:c5:94:53:
         c6:8a:74:65:2c:da:41:a3:ef:dc:d2:94:3d:e7:7c:a0:a4:a1:
         7f:82:dd:54:74:de:02:40:04:7b:58:cb:f5:dc:71:1f:ba:23:
         36:ba:cd:2c:a6:3b:4a:09:a7:25:dc:84:89:ea:87:d1:fc:15:
         45:c3:a6:89:ec:86:86:5d:39:b3:cd:e5:cb:ca:7d:74:94:8c:
         59:56:f0:42:4d:85:ad:2a:27:1b:50:05:c6:2b:4e:85:7d:74:
         c6:5a:de:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-fra.rpki-client.org