Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VpeICcUPAUHCWRVJugcn_fYLGFA.cer
File:                     VpeICcUPAUHCWRVJugcn_fYLGFA.cer (raw, json)
Hash identifier:          5otPiEQwgmK3uqqLMynZGcEX+FH/GNldOtJgRTcUn7Y=
Subject key identifier:   56:97:88:09:C5:0F:01:41:C2:59:15:49:BA:07:27:FD:F6:0B:18:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC42532A19B69847C8D7B0341482E9CA8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/VpeICcUPAUHCWRVJugcn_fYLGFA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:30:21 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 146.19.130.0/24

Validation:               Failed, certificate revoked on Fri 15 Nov 2024 14:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:32:a1:9b:69:84:7c:8d:7b:03:41:48:2e:9c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:30:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=56978809c50f0141c2591549ba0727fdf60b1850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:94:b4:30:49:23:39:41:98:db:c7:91:a2:
                    b5:3b:42:76:e9:ab:e1:52:29:c0:bb:c3:4a:ec:70:
                    7d:f8:5a:ba:25:37:5a:e1:1f:96:2e:02:1f:ed:d1:
                    73:87:e3:84:d5:c3:79:2f:10:b1:05:70:98:a0:bd:
                    c7:9e:56:a7:34:06:0c:aa:75:13:c6:01:d8:6a:cb:
                    22:7b:2d:a2:c1:0c:13:3d:59:d9:55:43:6f:55:af:
                    38:5b:44:34:00:f1:48:66:d1:95:dd:cb:6e:41:17:
                    85:c8:8c:d5:2d:a5:f5:e8:f3:38:13:b1:eb:3c:ef:
                    e7:d0:d5:d9:2e:2c:ad:ec:f4:ed:93:6e:f2:54:4d:
                    f4:b8:01:82:a8:22:16:ce:3b:26:f6:b5:f7:f3:9b:
                    b1:3f:4e:31:c2:13:08:ed:18:d8:23:06:87:be:bd:
                    b7:61:07:e6:d9:73:f5:6f:83:4c:a2:bd:e2:57:d2:
                    cd:b4:7d:00:4c:01:38:07:87:e4:f3:a1:8b:5a:ee:
                    ae:d8:eb:dd:fd:48:01:6d:78:7c:fb:52:e8:aa:9b:
                    14:ef:f3:3c:a0:a8:ab:79:cc:de:10:76:d7:a6:c3:
                    76:c6:16:af:15:91:81:22:65:9e:35:54:1f:4d:35:
                    97:47:b8:cd:8e:89:52:60:84:90:e2:2a:23:f4:14:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:97:88:09:C5:0F:01:41:C2:59:15:49:BA:07:27:FD:F6:0B:18:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/VpeICcUPAUHCWRVJugcn_fYLGFA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:4c:d4:bd:b7:b2:e6:28:06:c7:45:e2:a2:48:94:ea:0c:
         37:5a:cc:36:dd:9c:a6:56:8a:53:24:b3:c1:b3:e9:81:54:c8:
         97:ff:d5:16:78:73:05:43:72:c0:ff:f0:46:40:70:43:81:89:
         86:70:14:e2:e6:17:94:f7:31:32:fa:28:f8:24:25:a7:27:3e:
         9f:20:c3:41:0a:c3:07:60:b4:cd:97:6f:22:14:6a:43:ea:47:
         dc:aa:20:42:27:e6:ba:f4:f9:6e:3c:59:31:f9:b0:04:3d:27:
         f1:48:12:2c:cd:b6:ec:30:b7:25:c4:90:3c:b3:34:7e:5a:2a:
         98:8e:7e:34:54:21:c1:a4:ae:d3:a3:e2:90:a6:65:c0:58:cd:
         ef:a0:64:f6:28:48:a1:0e:90:79:fd:11:f5:db:2b:aa:90:f7:
         f6:1b:7e:12:7b:d3:80:4a:fd:b0:4c:37:7c:ad:21:c5:0a:4b:
         d2:82:b9:f2:7d:fe:7c:7c:2c:79:09:7f:1e:d1:a5:f0:40:15:
         b9:42:36:ee:bb:36:c1:2c:a2:92:5a:35:bf:c4:2f:cd:ce:1d:
         68:1a:ea:38:b3:9b:be:a7:87:0a:6a:8e:5a:81:bb:f9:9d:cb:
         c8:5f:fe:8a:5e:6a:7e:90:ab:ea:17:6b:d3:5a:4d:a1:97:a9:
         65:0c:16:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----