Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VPC1im5vAF5dXX9HjwPESABEcQk.cer
File:                     VPC1im5vAF5dXX9HjwPESABEcQk.cer (raw, json)
Hash identifier:          uOkebl6N/fgYGdq1YlYYWVe2sv3Yde4JyxdUS75X16o=
Subject key identifier:   54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018ACC447967D023F2F98C924322DD1F7FFD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/VPC1im5vAF5dXX9HjwPESABEcQk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 25 Sep 2023 12:15:54 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 57565
                          IP: 2a13:ee40::/29

Validation:               Failed, certificate revoked on Thu 16 Nov 2023 14:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cc:44:79:67:d0:23:f2:f9:8c:92:43:22:dd:1f:7f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 25 12:15:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=54f0b58a6e6f005e5d5d7f478f03c44800447109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:f7:65:7c:2c:aa:b8:91:dc:da:c7:46:96:
                    54:56:22:73:57:7e:40:63:9b:6c:1f:4c:f5:a5:f6:
                    83:ff:ce:00:e3:57:ef:c7:80:c2:4d:15:7a:09:a8:
                    06:97:cb:61:31:0d:6b:c1:7f:47:9b:7b:3f:b1:0a:
                    d4:10:9c:12:f7:c2:66:bb:96:04:7d:ed:a5:1d:53:
                    ba:e8:95:9c:71:27:76:2b:c1:89:86:b6:86:83:d2:
                    fa:5b:63:bd:16:2c:0f:29:80:0d:d0:f0:5d:23:38:
                    46:8e:7b:70:ee:f8:23:af:39:d9:d2:db:d6:31:83:
                    ad:28:f8:f8:8f:33:e3:53:3a:54:cb:12:04:1d:66:
                    0f:99:90:89:9f:e0:ed:6f:7d:01:a4:b3:cc:ec:d7:
                    7a:81:e1:f4:86:e9:e0:b6:a4:cf:ee:f9:7a:0a:fd:
                    53:34:5c:52:8e:34:50:39:73:50:59:2a:d2:d5:08:
                    6f:a2:ed:7c:99:48:37:2e:90:6e:64:fc:13:8c:ff:
                    6f:4f:b2:08:ed:9e:8d:86:6b:31:c9:f7:ef:65:ba:
                    9a:22:1b:f4:60:a0:22:15:fa:9a:b4:17:4c:30:6b:
                    8a:8a:7a:64:1f:d9:2e:6e:ae:39:80:5d:f1:89:76:
                    2e:82:8f:16:43:54:e0:3a:6b:0a:71:f8:5e:ae:6f:
                    32:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/VPC1im5vAF5dXX9HjwPESABEcQk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ee40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57565

    Signature Algorithm: sha256WithRSAEncryption
         32:e7:5b:8f:5e:ec:85:9c:c4:8f:db:39:6b:20:51:a7:36:9e:
         29:4f:19:29:50:b5:b3:2e:2a:f4:e2:e9:4e:71:57:72:9b:93:
         29:46:27:e1:98:b3:19:85:a3:2d:59:83:da:38:a5:1e:88:d8:
         17:97:49:00:ca:fe:08:c9:2b:c3:cb:97:ed:40:d1:c7:40:7d:
         83:55:e4:85:5c:83:a1:c1:52:b6:a2:78:6e:c8:96:07:06:db:
         36:42:c0:45:9f:14:7b:35:09:0c:d7:ce:44:a0:8a:bb:08:bd:
         fd:c0:cc:99:73:26:fa:70:79:1c:d2:00:4e:50:9a:2b:75:84:
         60:23:11:87:11:c3:3a:eb:50:d6:bb:03:aa:df:2d:08:53:1e:
         58:df:85:a0:92:67:05:5d:62:57:8a:96:6f:f2:96:92:68:ed:
         86:ca:b0:10:3b:f0:a5:1b:25:f1:8e:db:c1:36:d4:55:b9:ff:
         f7:e8:7f:6d:98:2e:75:5e:05:e7:b9:d4:4d:78:f6:65:47:93:
         ee:b7:8e:4d:42:57:72:9c:40:d3:4b:23:ca:46:93:2c:b7:d8:
         64:28:51:af:04:2f:34:b9:ea:8c:f1:d5:80:22:f7:71:31:3b:
         24:59:24:f0:3e:cb:a9:dd:65:51:b3:8f:05:b7:fb:84:9c:b2:
         c0:b9:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:26 2024 by rpki-client on console-fra.rpki-client.org