Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S50e1m3wGh5JkqdF_9u81anmCMs.cer
File:                     S50e1m3wGh5JkqdF_9u81anmCMs.cer (raw, json)
Hash identifier:          2NZH1qRaYbxWZkAA9EDFIc0SIGKJtutJq1Ih27dkb7Q=
Subject key identifier:   4B:9D:1E:D6:6D:F0:1A:1E:49:92:A7:45:FF:DB:BC:D5:A9:E6:08:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD10E9FD93A6A9BBAF4A6F3DC6A6D16
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/S50e1m3wGh5JkqdF_9u81anmCMs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 35782
                          IP: 195.10.202.0/24

Validation:               Failed, certificate revoked on Fri 19 May 2023 12:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:0e:9f:d9:3a:6a:9b:ba:f4:a6:f3:dc:6a:6d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4b9d1ed66df01a1e4992a745ffdbbcd5a9e608cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:fe:c1:2a:cc:87:9c:56:b6:7e:da:98:d2:
                    fd:27:d9:43:35:70:74:ee:12:9e:ab:3b:91:8e:69:
                    aa:42:b2:a1:6c:c7:55:ff:24:ec:7b:55:a1:54:c2:
                    95:4d:9b:85:03:71:c5:f4:9f:dd:b1:c8:e3:d0:82:
                    d0:3d:da:de:1c:e4:90:20:42:66:69:68:d3:2a:5a:
                    ff:f6:cc:f8:e6:c4:a7:0f:c1:e6:e9:0e:10:ea:4c:
                    33:3c:18:59:8e:d2:89:40:d2:32:f3:40:64:be:f0:
                    21:18:e1:1e:cc:37:6f:c7:53:02:8d:b4:e5:f4:21:
                    0a:fe:d9:12:21:be:a2:5f:b6:c3:0a:63:89:00:d0:
                    1a:96:38:a1:b0:83:0d:d9:f4:b7:11:86:41:32:e1:
                    31:e5:86:21:4b:56:90:7b:1a:eb:8c:bc:86:85:af:
                    9a:1c:93:54:fd:ce:09:3b:63:5b:0c:03:cf:cb:45:
                    f8:1f:3a:94:c0:1c:cb:dc:e9:0b:1b:cc:52:b5:c5:
                    af:80:71:2b:93:b8:51:a2:81:7a:21:2f:25:90:fe:
                    91:4a:e7:63:18:85:d4:ce:ab:cd:78:c1:89:45:c9:
                    f2:d0:f2:b6:8f:9b:10:78:a0:6a:15:1e:c9:c1:87:
                    c9:0e:3c:66:60:79:b1:2f:5c:9e:a2:22:6e:fb:21:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9D:1E:D6:6D:F0:1A:1E:49:92:A7:45:FF:DB:BC:D5:A9:E6:08:CB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/S50e1m3wGh5JkqdF_9u81anmCMs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.10.202.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35782

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:ef:d1:d1:9d:5c:25:0d:d2:5b:ad:c5:00:ad:ef:c8:06:
         e0:f2:8e:77:15:8d:49:d9:24:be:35:f2:48:8f:3e:38:a7:78:
         86:51:df:b7:45:68:05:05:98:b1:09:d3:be:72:f6:8d:dc:54:
         81:ae:1e:bc:6f:e9:6b:e9:b9:1d:1a:9f:52:dc:a3:81:2d:79:
         c7:e0:db:5f:2f:b7:63:1e:ad:12:2e:63:59:d3:a1:b9:18:42:
         97:03:6e:5d:01:41:fe:c4:bd:c1:7b:ee:c3:90:20:37:f2:b8:
         77:6d:1f:cb:89:de:b9:cf:d3:40:6c:62:c7:9b:f2:bd:97:9e:
         cc:67:30:dd:6e:53:40:41:9d:54:1e:35:20:d2:b0:a4:27:91:
         36:6b:3b:cf:72:80:61:f1:4f:5f:73:63:59:95:0d:f6:bf:10:
         e1:fe:96:30:32:ad:a0:33:61:40:d3:8e:b5:94:74:c2:1d:e7:
         c4:4f:53:4d:81:42:62:60:15:e1:5c:b8:a6:f1:39:e7:b6:56:
         33:8c:02:ff:97:46:b5:97:d4:43:17:6e:18:10:c7:9d:2e:85:
         3e:fe:f1:d8:5e:1c:21:9d:ca:11:fe:2c:3d:9d:09:cc:80:31:
         79:32:d2:5c:3c:70:6c:43:61:d7:fd:92:12:4f:58:5e:aa:f4:
         ee:a2:ed:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:44 2024 by rpki-client on console-ams.rpki-client.org