Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TQJlGvmMOb1CjR7zm861282-39w.cer
File:                     TQJlGvmMOb1CjR7zm861282-39w.cer (raw, json)
Hash identifier:          Hy9VkOu/1iTmn/rcQWdLej4zvTXQw1XNMGq/FuMKUAw=
Subject key identifier:   4D:02:65:1A:F9:8C:39:BD:42:8D:1E:F3:9B:CE:B5:DB:CD:BE:DF:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01906910EDA0C8C0DA5873B7CD43E65639A9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/4D02651AF98C39BD428D1EF39BCEB5DBCDBEDFDC.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 30 Jun 2024 12:13:55 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 208051
                          IP: 2001:678:b34::/48

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 18:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:69:10:ed:a0:c8:c0:da:58:73:b7:cd:43:e6:56:39:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 12:13:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4d02651af98c39bd428d1ef39bceb5dbcdbedfdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:b3:11:81:d6:09:cf:90:b0:da:3a:1a:19:
                    8e:48:b0:d7:0b:98:4a:41:bb:21:2c:38:1e:ce:82:
                    ef:3b:8d:7b:e3:4e:ae:51:22:c5:7f:4c:25:75:17:
                    ab:27:c1:13:da:05:71:1d:76:d7:9b:e9:99:ab:a9:
                    c8:69:98:32:6a:63:b9:25:b0:eb:8f:04:b9:ca:41:
                    dd:3f:3f:9b:84:ee:77:77:9c:ab:33:37:61:b1:9e:
                    b7:15:47:68:2a:10:eb:88:de:3f:e6:52:82:60:ee:
                    ee:7b:7c:47:6b:4f:42:04:34:2a:27:ed:cf:ca:db:
                    e3:24:6b:51:23:7b:4f:7e:ae:6d:5a:29:65:ad:c4:
                    0b:34:d0:9f:9c:75:78:f2:b6:b5:7b:3e:e9:bf:f9:
                    9a:64:8d:9d:fc:04:e5:13:fe:de:71:6f:0a:67:84:
                    5a:ac:fd:e4:c0:27:ff:e8:35:22:a8:4b:ca:c1:40:
                    01:98:48:13:8e:bc:c4:47:f8:9d:2e:bb:bb:c1:6b:
                    96:6e:c4:d3:97:e3:01:bc:4c:80:68:95:5b:b3:88:
                    8a:9d:66:a0:eb:66:4c:e8:55:e0:46:a4:41:4a:eb:
                    c6:97:f0:50:72:c3:87:a2:8b:93:0a:c8:ec:4f:dc:
                    e6:04:d4:be:ee:2d:4c:b6:9a:e2:d2:2a:e0:28:b5:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:02:65:1A:F9:8C:39:BD:42:8D:1E:F3:9B:CE:B5:DB:CD:BE:DF:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/4D02651AF98C39BD428D1EF39BCEB5DBCDBEDFDC.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:b34::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208051

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:5e:be:68:21:ea:29:3f:07:ee:a3:96:dc:bd:4d:2f:9b:
         58:17:b6:83:74:4a:31:5a:f2:e6:66:4d:2d:18:6e:69:d2:c8:
         0a:1e:e8:41:07:c1:fe:25:68:b8:eb:f8:ad:61:f0:2e:18:06:
         84:08:a7:e4:ab:cc:af:28:1f:40:a9:b5:3a:53:84:80:46:5c:
         fb:3e:04:56:89:6e:02:34:7f:5f:9d:26:13:c3:fe:a1:34:eb:
         ef:48:af:d0:ec:fd:c2:cb:3a:eb:7a:6b:2f:e6:ce:8d:66:95:
         3b:8e:ff:f0:6d:8d:16:35:ef:15:d5:4e:67:7a:35:82:03:50:
         aa:29:90:c2:a4:f4:cc:ba:63:44:b7:79:e4:5b:39:e8:a2:76:
         94:99:9c:f3:39:c3:32:4f:5b:e5:42:18:16:f3:03:c1:11:1c:
         9c:60:ce:9c:4e:30:f4:2f:ac:3f:52:68:b1:d0:d0:6b:99:6f:
         df:f1:7a:00:a1:e5:cd:11:ea:ad:12:4f:38:4a:10:d6:10:fb:
         00:87:e6:db:58:f8:2d:aa:77:01:30:74:95:9a:db:58:8e:f8:
         24:a3:a1:25:81:e6:93:1f:fe:d7:44:af:72:cf:b8:22:b8:3f:
         ef:b7:55:05:4a:35:73:e1:93:27:5a:0d:71:a8:22:15:4f:d4:
         4e:bc:f7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:08:25 2024 by rpki-client on console-fra.rpki-client.org