Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V8XopP5NnpGMSdsYOxFUs_ICxg4.cer
File:                     V8XopP5NnpGMSdsYOxFUs_ICxg4.cer (raw, json)
Hash identifier:          gT6+7T9EL8377ogoxZ6xYGafI9u1Q1ookVDFt7DACCg=
Subject key identifier:   57:C5:E8:A4:FE:4D:9E:91:8C:49:DB:18:3B:11:54:B3:F2:02:C6:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBE01F73AF408A999D8901A02223DB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/V8XopP5NnpGMSdsYOxFUs_ICxg4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:58 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.9.180.0/24

Validation:               Failed, certificate revoked on Fri 10 Nov 2023 10:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:e0:1f:73:af:40:8a:99:9d:89:01:a0:22:23:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57c5e8a4fe4d9e918c49db183b1154b3f202c60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:37:37:23:19:aa:8b:5c:30:02:e6:78:08:b8:
                    96:9d:c9:0b:26:d9:b3:2c:d3:75:76:18:3d:83:ae:
                    89:48:c3:1a:34:cf:fb:62:ea:b0:02:84:ec:f9:2f:
                    97:d6:c3:6c:17:03:e3:b6:6b:65:0b:29:a1:9c:aa:
                    2d:90:15:0f:f8:b5:07:cf:67:3b:7f:88:9b:fe:48:
                    16:22:e5:ef:16:35:19:0b:13:d6:7f:ba:a1:42:66:
                    c6:ec:60:7f:80:d1:da:3e:0f:37:f6:79:d9:8d:62:
                    2d:91:96:94:a5:39:e0:54:98:46:7d:d5:1c:71:ed:
                    e9:d0:a5:72:4f:03:23:87:3a:82:61:21:72:59:d8:
                    e5:a9:51:ae:f7:cd:43:be:35:95:6f:45:8c:cd:3c:
                    1a:09:a8:94:2e:df:76:83:03:77:04:bb:a1:57:b8:
                    f2:b6:f3:8b:ba:61:da:4a:b1:18:70:77:62:17:cd:
                    04:6b:37:bd:76:b1:c1:30:48:58:1b:dc:0e:cf:64:
                    04:e4:bd:94:88:72:20:f0:5e:21:90:61:5b:45:f2:
                    23:b8:00:bb:3b:02:67:32:29:60:41:cd:b9:64:0f:
                    5c:b4:9a:8e:44:d4:a4:84:84:b7:d0:7c:ed:1a:dc:
                    e3:cc:db:05:cf:28:89:31:ca:a5:6e:a3:fc:97:72:
                    59:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C5:E8:A4:FE:4D:9E:91:8C:49:DB:18:3B:11:54:B3:F2:02:C6:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/V8XopP5NnpGMSdsYOxFUs_ICxg4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:2d:7c:74:17:e2:aa:a1:f1:f0:7f:2e:bc:af:12:56:1e:18:
         f7:57:10:b1:13:23:09:2d:53:7b:78:5c:88:47:a1:65:b2:93:
         cb:1f:02:c6:54:1c:01:bd:c0:31:8b:60:90:c6:c2:4f:7a:a3:
         93:d3:39:a6:4d:72:80:b1:f0:d5:ba:6d:60:8f:37:bb:a9:b3:
         b4:30:47:99:39:10:27:d4:38:b8:c6:8d:52:01:d0:f6:a0:21:
         b3:e6:cb:65:d2:76:f8:c9:d4:0b:90:40:03:cc:8f:02:1d:12:
         a4:6f:23:2f:54:2e:6d:14:84:8e:7e:69:a7:3c:42:3d:47:86:
         da:2d:ca:44:a4:2f:09:97:37:0a:aa:0b:38:97:38:dd:5d:a5:
         92:97:1b:fe:70:04:47:e1:66:41:8d:e0:55:4a:5e:66:e7:ef:
         8a:a9:24:ce:03:d1:f4:0d:df:1e:db:d5:60:8d:14:ab:66:f5:
         95:a5:cc:b3:c8:a3:c1:5a:be:74:c7:43:3b:99:c7:64:29:6c:
         16:51:8b:da:e5:19:b5:07:ce:0e:39:77:43:d8:59:b8:2a:b2:
         37:13:1f:2e:e1:35:4d:2f:9b:5f:6d:83:31:57:1a:76:7f:5d:
         e8:ec:06:b9:e5:4c:e6:11:6c:56:1e:eb:b7:6e:fb:de:fb:90:
         bf:4f:67:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:22 2024 by rpki-client on console-fra.rpki-client.org