Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VUq3nF5YaxFdh90YvpKDbKcQYew.cer
File:                     VUq3nF5YaxFdh90YvpKDbKcQYew.cer (raw, json)
Hash identifier:          aCcE4KNCF5OHxOnGpU96myYgYBOhsS3kY230rPYh2nY=
Subject key identifier:   55:4A:B7:9C:5E:58:6B:11:5D:87:DD:18:BE:92:83:6C:A7:10:61:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701E190705ECEF612886DB0E2F54F169
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a5/66c660-3692-42e9-b902-eecc62f78769/1/VUq3nF5YaxFdh90YvpKDbKcQYew.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a5/66c660-3692-42e9-b902-eecc62f78769/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:58 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 205603

Validation:               Failed, certificate revoked on Sat 24 Jun 2023 16:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:19:07:05:ec:ef:61:28:86:db:0e:2f:54:f1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=554ab79c5e586b115d87dd18be92836ca71061ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:0c:98:77:2f:77:39:b4:0c:3f:d9:9c:4b:
                    6b:e0:47:42:4f:25:11:49:10:2f:9f:5f:c7:3a:7f:
                    ae:a7:33:43:a5:01:c6:37:8c:e1:46:2b:56:61:e6:
                    64:00:02:be:82:6f:04:72:56:d4:b6:af:b7:22:59:
                    91:db:b7:c3:72:eb:8f:db:a1:94:74:b5:ad:40:6b:
                    c5:68:ca:6c:4a:23:43:31:6d:9f:e1:3a:3e:23:ba:
                    6f:31:3e:a8:3c:1c:d9:25:0b:5e:a9:49:75:bc:25:
                    82:84:d7:ef:bc:cd:23:a0:38:43:d3:64:6b:43:ae:
                    d2:c7:cf:ef:b9:b0:97:20:d8:03:7d:44:0c:fa:cf:
                    59:26:e4:d8:28:fd:19:81:37:e3:9f:38:cb:e0:67:
                    53:c3:a5:1a:53:fc:4d:36:03:a2:6d:f1:be:93:89:
                    ab:8b:5c:2b:9a:84:91:7c:c2:2c:00:91:db:01:4c:
                    ff:40:7c:ec:ef:d2:7c:a9:95:36:51:45:b0:f4:d1:
                    38:da:d8:31:d2:9b:0b:7a:31:a4:45:95:bc:37:27:
                    40:f9:22:7a:ea:da:5f:1a:7b:ab:54:0e:9e:8b:6e:
                    06:4b:e3:21:11:1a:2b:66:71:b1:f7:63:c0:d4:e0:
                    b7:c4:4d:1c:a8:82:da:db:7c:a0:f5:85:3d:7c:e1:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4A:B7:9C:5E:58:6B:11:5D:87:DD:18:BE:92:83:6C:A7:10:61:EC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/66c660-3692-42e9-b902-eecc62f78769/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/66c660-3692-42e9-b902-eecc62f78769/1/VUq3nF5YaxFdh90YvpKDbKcQYew.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205603

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:3f:17:01:42:8e:dc:83:fa:1a:9c:63:a9:26:85:85:57:
         71:98:b9:af:e9:1c:80:3a:3a:6a:fa:c5:59:d9:3a:37:fa:b2:
         16:95:d6:2c:19:1d:cd:6e:2b:85:0b:e3:67:75:f8:b1:9f:0b:
         c9:45:75:21:23:a3:46:87:bf:e1:cb:ca:c9:76:37:76:4c:3d:
         28:63:cd:67:95:fc:9e:42:19:91:a8:20:67:71:3e:6e:3b:50:
         35:55:fc:0f:a4:81:a4:3e:3d:c7:ee:00:13:cf:db:60:02:24:
         c8:87:e4:d5:11:89:08:56:48:cb:96:1a:94:43:57:86:ea:ea:
         c2:10:12:61:84:e6:31:9c:f9:a9:c6:4e:67:bb:41:9a:2a:a0:
         3a:a3:13:b0:82:5a:a3:a5:3e:4d:63:a7:a7:a3:4f:a5:73:87:
         27:91:97:17:55:73:3b:c1:5f:86:89:65:ff:bd:db:cb:06:fc:
         89:1f:cc:af:cd:99:14:a2:1d:3b:04:ba:42:73:69:08:37:8a:
         54:5f:21:e8:16:f2:0d:63:61:90:6a:21:c0:b5:f8:ed:ec:63:
         be:ba:68:fd:0c:36:d3:d8:2c:c5:7b:e9:08:4b:a5:b0:f5:c1:
         04:26:66:62:45:c3:0b:e9:51:54:d6:30:86:78:2a:11:03:3b:
         7e:f7:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:27 2024 by rpki-client on console-fra.rpki-client.org