Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rii7zW7stRjIvolEZSwD7t7A0f4.cer
File:                     Rii7zW7stRjIvolEZSwD7t7A0f4.cer (raw, json)
Hash identifier:          26J8yGeODMQV7PjKY7kumIDnq/+XplJGrvwHiL3545I=
Subject key identifier:   46:28:BB:CD:6E:EC:B5:18:C8:BE:89:44:65:2C:03:EE:DE:C0:D1:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D65A5DC268F85F221495B4651F550
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/Rii7zW7stRjIvolEZSwD7t7A0f4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:58 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.168.151.0/24
Validation:               Failed, certificate revoked on Fri 19 Apr 2024 06:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:65:a5:dc:26:8f:85:f2:21:49:5b:46:51:f5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4628bbcd6eecb518c8be8944652c03eedec0d1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:c4:35:b6:34:a2:9f:a9:a9:cf:7c:b9:af:
                    ba:56:ab:67:c8:0d:c0:0d:68:cc:7e:ef:5b:8a:72:
                    1d:9f:2f:9f:9d:6f:7d:37:91:43:ea:cc:7f:25:88:
                    fe:19:7d:58:9f:fd:7e:39:7b:6c:0a:76:a8:f6:bb:
                    9a:ab:d4:48:c5:39:c1:d6:ff:e3:b9:7a:26:9b:6a:
                    76:61:25:51:7e:f6:f3:28:cf:a1:15:dc:cd:45:43:
                    e3:65:1a:a9:b8:66:17:26:69:90:13:b2:1d:1d:df:
                    c4:2d:94:19:5e:9a:29:e6:a2:aa:fc:4b:32:99:28:
                    e5:3e:04:4a:64:91:45:9d:6c:45:8f:93:2c:3e:18:
                    53:aa:4e:4e:cf:65:a9:91:39:f3:13:99:de:e3:a5:
                    49:2e:5f:5b:39:b4:26:e8:e5:54:7d:44:f7:d7:67:
                    de:ab:f2:56:d9:2d:20:5b:e8:7a:d3:0b:d9:6e:5f:
                    d3:05:cc:8d:c0:af:b1:ee:a3:a8:c9:4f:d1:5d:e3:
                    f8:ab:eb:08:ef:13:37:48:8b:55:ab:3f:a5:db:3f:
                    c8:89:af:0f:09:3b:05:7e:cd:b4:73:41:6e:3b:12:
                    69:b3:16:60:70:15:70:bb:d3:7d:6c:0f:ef:14:92:
                    b8:aa:c4:82:36:05:58:cb:ce:87:95:e8:ca:03:67:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:BB:CD:6E:EC:B5:18:C8:BE:89:44:65:2C:03:EE:DE:C0:D1:FE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/Rii7zW7stRjIvolEZSwD7t7A0f4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.168.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f8:ac:14:a0:c7:e2:b1:d8:12:15:09:85:a6:a3:cc:4b:09:
         b7:04:45:0e:b0:a0:d1:a7:46:2e:98:de:b9:74:30:32:eb:2f:
         8f:9d:cc:4d:ec:41:6f:0a:91:a4:c4:b1:da:76:97:d0:78:0b:
         5d:bb:23:04:53:b6:23:63:2a:d6:d8:34:9e:3d:e7:d0:06:ea:
         67:31:5d:50:c6:14:dd:4e:de:0d:14:97:3e:13:d6:eb:a5:85:
         ab:b8:07:89:ce:51:12:19:dc:1f:e1:4b:94:f8:ba:4e:af:4a:
         be:55:e3:9a:a7:24:4c:cb:67:4d:bf:33:7a:7a:be:7e:9e:00:
         55:bd:92:b1:da:ca:14:ce:bc:9b:40:77:ba:4b:90:8d:12:b7:
         70:1f:0a:27:07:45:da:f2:fe:fe:1e:49:8e:eb:d4:c8:87:e7:
         c9:07:5c:cf:8f:5c:05:24:dc:35:1c:34:41:d3:d0:2f:77:24:
         25:e7:90:36:1b:d3:69:44:b6:5b:3e:26:57:c4:57:67:0c:ee:
         b6:ef:64:7a:02:42:cd:e1:dc:f7:da:38:a4:d9:d0:fe:6b:44:
         46:ea:68:6c:d1:02:3c:9c:a9:64:65:af:c3:8a:99:d8:ae:55:
         f2:a4:a1:14:db:f9:98:e3:db:bc:c8:7b:0f:f1:31:7e:99:ee:
         f8:f5:00:c8
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzCbWWl3CaPhfIhSVtGUfVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjI4YmJjZDZlZWNiNTE4YzhiZTg5NDQ2NTJjMDNlZWRlYzBkMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvPENbY0op+pqc98ua+6VqtnyA3A
DWjMfu9binIdny+fnW99N5FD6sx/JYj+GX1Yn/1+OXtsCnao9ruaq9RIxTnB1v/j
uXomm2p2YSVRfvbzKM+hFdzNRUPjZRqpuGYXJmmQE7IdHd/ELZQZXpop5qKq/Esy
mSjlPgRKZJFFnWxFj5MsPhhTqk5Oz2WpkTnzE5ne46VJLl9bObQm6OVUfUT312fe
q/JW2S0gW+h60wvZbl/TBcyNwK+x7qOoyU/RXeP4q+sI7xM3SItVqz+l2z/Iia8P
CTsFfs20c0FuOxJpsxZgcBVwu9N9bA/vFJK4qsSCNgVYy86HlejKA2crpQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEYou81u7LUYyL6JRGUsA+7ewNH+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzJkMWM1
NS00MjViLTRjYjgtODE3Mi1iNDM1NDEyNzJhYmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMmQxYzU1
LTQyNWItNGNiOC04MTcyLWI0MzU0MTI3MmFiZS8xL1JpaTd6VzdzdFJqSXZvbEVa
U3dEN3Q3QTBmNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuaiXMA0GCSqGSIb3DQEBCwUAA4IBAQAx+KwU
oMfisdgSFQmFpqPMSwm3BEUOsKDRp0YumN65dDAy6y+PncxN7EFvCpGkxLHadpfQ
eAtduyMEU7YjYyrW2DSePefQBupnMV1QxhTdTt4NFJc+E9brpYWruAeJzlESGdwf
4UuU+LpOr0q+VeOapyRMy2dNvzN6er5+ngBVvZKx2soUzrybQHe6S5CNErdwHwon
B0Xa8v7+HkmO69TIh+fJB1zPj1wFJNw1HDRB09AvdyQl55A2G9NpRLZbPiZXxFdn
DO6272R6AkLN4dz32jik2dD+a0RG6mhs0QI8nKlkZa/DipnYrlXypKEU2/mY49u8
yHsP8TF+me749QDI
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:23 2025 by rpki-client