Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VTcrlCxSB2gAVM-xGtkRqGjwYZw.cer
File:                     VTcrlCxSB2gAVM-xGtkRqGjwYZw.cer (raw, json)
Hash identifier:          ZEO/qAhfW4D6mJnZ4K4URldtewHzqpah9jDUgr4Rur0=
Subject key identifier:   55:37:2B:94:2C:52:07:68:00:54:CF:B1:1A:D9:11:A8:68:F0:61:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708C0CC380AD1B920412F6BAE990D21D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/VTcrlCxSB2gAVM-xGtkRqGjwYZw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:35:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.126.104.0/24
                          IP: 2a12:b980::/29

Validation:               Failed, certificate revoked on Thu 16 Nov 2023 11:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:0c:c3:80:ad:1b:92:04:12:f6:ba:e9:90:d2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:35:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55372b942c5207680054cfb11ad911a868f0619c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:5c:cc:50:41:01:2b:99:61:2d:2a:17:d6:
                    08:21:1e:bd:17:eb:54:ad:c0:1c:b6:00:f3:b6:21:
                    8e:d4:56:c9:19:b1:66:18:80:e2:cd:55:74:df:f9:
                    89:a9:57:f9:32:94:a9:45:21:57:39:19:50:2a:ae:
                    36:ab:5a:c1:22:f6:18:22:84:c0:bb:d3:61:85:5f:
                    f6:d9:fe:07:ce:8c:18:5e:db:1a:7b:fc:ef:15:3f:
                    b9:c4:99:1a:1f:bc:55:d3:47:27:c5:0a:62:21:1b:
                    4c:30:3a:f2:d1:63:02:fb:d9:f2:9b:87:f8:03:73:
                    f9:de:4c:ab:33:3a:e1:15:3c:9a:36:a8:8a:f3:5c:
                    ae:3c:e3:ff:91:82:eb:22:38:c2:a9:fe:98:da:f6:
                    a5:c7:ee:7e:e2:44:26:b8:f1:4a:2d:e6:89:51:b4:
                    0c:81:43:83:2c:a5:40:2a:24:9d:62:e5:52:ef:87:
                    c4:ad:b3:00:21:7f:6e:87:7e:d9:1f:86:56:de:e2:
                    ab:bc:53:8e:99:a6:d4:ea:b8:dc:15:b1:ac:01:b5:
                    af:6e:d7:0e:cd:d9:ab:ef:09:5a:cb:9d:40:aa:87:
                    06:33:b2:9d:b2:75:12:59:97:dc:fa:a2:f5:39:e5:
                    32:e1:e6:70:2c:eb:cd:93:0c:2c:94:44:28:4b:a2:
                    ca:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:37:2B:94:2C:52:07:68:00:54:CF:B1:1A:D9:11:A8:68:F0:61:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/VTcrlCxSB2gAVM-xGtkRqGjwYZw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.104.0/24
                IPv6:
                  2a12:b980::/29

    Signature Algorithm: sha256WithRSAEncryption
         1e:61:c1:b9:d3:88:dc:4a:8e:0d:b2:75:1a:9d:42:b3:91:3b:
         6f:21:07:c5:53:49:b2:32:30:47:14:89:5e:16:12:a0:9a:1c:
         b5:99:dc:f6:5e:b5:11:8b:de:28:9c:86:8d:9c:dd:e3:ed:13:
         94:ed:cc:be:b5:35:74:c0:2f:f2:ad:dc:99:64:38:f3:21:68:
         0e:7c:b0:67:ee:a0:d7:d5:3c:57:63:c0:d9:c8:80:0b:99:2b:
         07:5d:bb:20:31:c8:7d:07:a6:e0:1c:21:31:f3:28:70:6a:9e:
         a3:53:31:e9:f5:cc:c5:5d:13:3b:f0:28:67:72:23:0c:35:aa:
         32:a5:12:02:d7:08:f8:a4:71:f3:7e:eb:aa:72:09:53:04:22:
         d3:06:96:fb:b6:17:66:a4:01:04:e4:41:aa:86:c5:8c:6f:0f:
         45:d4:72:eb:bd:27:c0:a6:d2:d5:78:44:b2:da:bf:35:43:6f:
         dd:28:13:71:cf:4f:d1:77:3f:cf:4d:bc:e5:3d:1d:bc:75:ac:
         5c:79:2a:99:75:6b:d8:0c:74:21:a4:2a:38:53:d2:26:70:11:
         47:cf:40:cb:4a:52:06:93:a6:e2:30:ca:72:5b:cd:5d:dc:55:
         4f:5c:c6:78:76:0b:56:05:17:89:dc:02:9c:24:c2:21:f8:e3:
         26:1c:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:51 2024 by rpki-client on console-ams.rpki-client.org