Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RVd_8q_RXtFIQxRRDEZGQd6g43w.cer
File:                     RVd_8q_RXtFIQxRRDEZGQd6g43w.cer (raw, json)
Hash identifier:          BQs8q6vOHHLOOeciXm0sU9UOhd1KFsxhfjLVeT+/U3c=
Subject key identifier:   45:57:7F:F2:AF:D1:5E:D1:48:43:14:51:0C:46:46:41:DE:A0:E3:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B41ED19A68F18F0BC1DA671FABE67FF2D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/RVd_8q_RXtFIQxRRDEZGQd6g43w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 18 Oct 2023 08:35:39 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 210505

Validation:               Failed, certificate revoked on Fri 15 Dec 2023 10:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:41:ed:19:a6:8f:18:f0:bc:1d:a6:71:fa:be:67:ff:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 18 08:35:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=45577ff2afd15ed1484314510c464641dea0e37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ba:3a:5d:9a:4a:8a:ab:a0:b9:2e:6d:65:fa:
                    6e:34:7a:fd:97:89:44:81:36:fa:26:a7:f0:f4:a2:
                    a9:4c:75:83:4d:66:c4:fd:82:fc:0a:a7:9a:5c:ba:
                    68:6d:d8:26:44:5c:4d:90:43:00:21:cb:42:8a:ff:
                    3e:b3:d0:69:3d:de:c4:8c:fc:84:0b:ef:fd:54:27:
                    2a:cf:49:49:11:c2:53:08:bd:39:c5:27:28:ac:ea:
                    74:8f:70:b1:6e:62:a5:b1:c6:33:c1:97:59:ae:28:
                    70:23:ad:07:0a:ca:95:67:73:4d:a6:89:90:37:af:
                    a6:00:f2:cf:d2:94:a3:c6:4d:57:ce:19:4b:fa:7f:
                    d7:4e:48:a6:06:62:23:29:f7:4a:72:f1:a9:ca:e0:
                    44:25:c8:cd:4e:36:69:91:65:0d:a4:cc:66:73:0f:
                    86:8b:f0:27:08:0c:9e:2a:b8:56:4b:63:58:82:c3:
                    58:62:7f:49:c7:f6:be:b1:24:d3:e1:07:61:bf:b0:
                    3c:89:89:ff:71:a1:29:98:de:d3:c4:e7:39:b4:c2:
                    55:90:22:87:b4:25:bc:69:aa:3c:f5:43:71:b8:8d:
                    e7:7d:2d:32:64:fe:66:6b:14:c8:69:4e:41:1f:6b:
                    70:78:c1:d6:27:95:62:52:a0:36:ca:74:da:f1:50:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:57:7F:F2:AF:D1:5E:D1:48:43:14:51:0C:46:46:41:DE:A0:E3:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/RVd_8q_RXtFIQxRRDEZGQd6g43w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210505

    Signature Algorithm: sha256WithRSAEncryption
         6f:d6:f1:2d:65:e9:95:82:f2:1f:24:ca:be:b5:4f:a7:45:64:
         79:5e:cd:0d:df:62:1e:97:a7:fc:c5:7e:70:dc:08:a3:1c:a0:
         0e:42:8e:8a:da:2a:c8:95:b8:e4:d4:38:e3:fa:fa:5b:77:70:
         d6:0f:1b:7f:18:51:26:5c:80:30:75:2d:33:b0:e8:0d:21:02:
         8c:30:3c:2d:d8:6c:8c:1d:65:f3:b0:07:89:f0:cd:6c:4a:db:
         86:24:b7:df:8a:15:94:18:5d:3a:11:fa:6b:8f:34:ab:54:03:
         ee:67:8b:4c:82:d8:da:6f:00:3c:71:b3:45:37:00:a0:45:a2:
         eb:51:34:85:2c:4e:e3:70:bc:dd:91:55:8a:7e:77:2f:26:29:
         cb:17:8d:fc:93:25:64:27:eb:92:2d:9a:d0:0a:fc:0c:a5:9c:
         e1:07:d5:c8:c1:a1:c0:61:4f:cf:01:e9:47:58:bc:30:1c:50:
         48:56:56:34:2a:68:0f:4e:11:01:0a:23:a1:3e:3f:8b:1f:56:
         06:95:15:48:6c:26:86:31:c7:c6:e5:ec:f7:c7:04:ea:b6:97:
         55:67:5f:7f:d6:1a:26:cb:27:57:41:88:24:ec:a1:a1:ad:9a:
         0a:d9:14:3a:d4:61:1b:a4:58:02:31:0f:aa:1e:36:ce:3a:4e:
         40:28:df:47
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYtB7RmmjxjwvB2mcfq+Z/8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMDE4MDgzNTM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTU3N2ZmMmFmZDE1ZWQxNDg0MzE0NTEwYzQ2NDY0MWRlYTBlMzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqro6XZpKiquguS5tZfpuNHr9l4lE
gTb6Jqfw9KKpTHWDTWbE/YL8CqeaXLpobdgmRFxNkEMAIctCiv8+s9BpPd7EjPyE
C+/9VCcqz0lJEcJTCL05xScorOp0j3CxbmKlscYzwZdZrihwI60HCsqVZ3NNpomQ
N6+mAPLP0pSjxk1XzhlL+n/XTkimBmIjKfdKcvGpyuBEJcjNTjZpkWUNpMxmcw+G
i/AnCAyeKrhWS2NYgsNYYn9Jx/a+sSTT4Qdhv7A8iYn/caEpmN7TxOc5tMJVkCKH
tCW8aao89UNxuI3nfS0yZP5maxTIaU5BH2tweMHWJ5ViUqA2ynTa8VDKjQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFEVXf/Kv0V7RSEMUUQxGRkHeoON8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzI3OWJm
Ni1iMzA4LTQyZTQtOThhNy01ODIzZGRkYmJkZjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvMjc5YmY2
LWIzMDgtNDJlNC05OGE3LTU4MjNkZGRiYmRmMC8xL1JWZF84cV9SWHRGSVF4UlJE
RVpHUWQ2ZzQzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM2STANBgkqhkiG9w0BAQsFAAOCAQEAb9bxLWXplYLy
HyTKvrVPp0VkeV7NDd9iHpen/MV+cNwIoxygDkKOitoqyJW45NQ44/r6W3dw1g8b
fxhRJlyAMHUtM7DoDSECjDA8LdhsjB1l87AHifDNbErbhiS334oVlBhdOhH6a480
q1QD7meLTILY2m8APHGzRTcAoEWi61E0hSxO43C83ZFVin53LyYpyxeN/JMlZCfr
ki2a0Ar8DKWc4QfVyMGhwGFPzwHpR1i8MBxQSFZWNCpoD04RAQojoT4/ix9WBpUV
SGwmhjHHxuXs98cE6raXVWdff9YaJssnV0GIJOyhoa2aCtkUOtRhG6RYAjEPqh42
zjpOQCjfRw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-fra.rpki-client.org