Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VycxN_MI310o__ictb23G2S1dgo.cer
File:                     VycxN_MI310o__ictb23G2S1dgo.cer (raw, json)
Hash identifier:          OqyDUiix2HfFNvBwIiPLxybMLZ48tLOct406X3CDkQ0=
Subject key identifier:   57:27:31:37:F3:08:DF:5D:28:FF:F8:9C:B5:BD:B7:1B:64:B5:76:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857245B4BC3E6C12554A62AADE819E253F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a9/9e9f54-7cff-45b1-b7b0-f1118aa2df4a/1/VycxN_MI310o__ictb23G2S1dgo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a9/9e9f54-7cff-45b1-b7b0-f1118aa2df4a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 213302
                          IP: 195.200.235.0/24

Validation:               Failed, certificate revoked on Wed 12 Jul 2023 12:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:45:b4:bc:3e:6c:12:55:4a:62:aa:de:81:9e:25:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57273137f308df5d28fff89cb5bdb71b64b5760a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:34:c9:19:bb:0c:1c:db:d4:57:74:d5:bf:
                    8a:a8:41:75:b7:9d:66:be:a1:64:4c:13:c1:9b:d7:
                    7d:5f:b4:42:40:23:c7:9e:66:a5:1d:55:ff:fb:dc:
                    61:26:a6:0d:49:bd:b8:66:74:24:4d:68:46:45:99:
                    ae:8e:ce:a9:f4:55:d2:e3:c2:93:6a:fe:d7:85:ff:
                    4a:45:32:36:15:29:ec:6f:c7:90:ea:ca:56:9d:7e:
                    a9:ae:de:a6:b7:ae:eb:dc:56:2d:71:20:77:7a:36:
                    12:76:58:34:f1:d8:69:30:82:1b:3f:b4:15:44:e3:
                    a9:0f:c1:c5:78:1c:46:93:8e:84:a8:5d:ff:de:11:
                    89:43:d6:41:dc:3a:fa:c6:44:32:bd:d8:40:75:4e:
                    d6:93:fd:83:9b:86:ce:d0:75:84:66:4f:ad:14:34:
                    36:17:b6:5b:98:4f:a0:6b:da:12:4a:c3:4f:eb:69:
                    69:20:42:92:44:21:21:39:61:6e:c7:7c:42:a0:df:
                    b1:bb:10:78:35:da:16:90:52:fa:59:66:c1:c8:81:
                    ba:1f:be:26:0b:50:dc:ca:8e:75:a6:4d:0d:e7:4a:
                    b7:62:8d:e4:5a:dd:72:71:0b:ac:ac:a2:c1:7c:6a:
                    14:20:cb:d7:61:41:23:21:d0:83:ba:ca:8a:80:84:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:27:31:37:F3:08:DF:5D:28:FF:F8:9C:B5:BD:B7:1B:64:B5:76:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9e9f54-7cff-45b1-b7b0-f1118aa2df4a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9e9f54-7cff-45b1-b7b0-f1118aa2df4a/1/VycxN_MI310o__ictb23G2S1dgo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.200.235.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213302

    Signature Algorithm: sha256WithRSAEncryption
         45:8e:10:34:95:b7:b7:bb:1f:56:38:15:8c:29:a9:01:b7:07:
         dd:f8:a8:93:f3:99:97:7b:29:49:40:40:4c:57:c4:c1:1b:4e:
         1d:81:2e:ae:5d:99:22:47:80:76:47:65:83:d8:07:c9:45:59:
         e2:dd:1a:2f:03:62:1c:50:d2:5d:c9:9d:61:e6:b8:d8:af:2e:
         bc:90:a7:7b:4f:e8:66:fe:36:23:98:7e:cf:6c:a5:0c:4d:84:
         47:9e:13:b5:ee:63:29:b5:eb:2a:d2:21:ba:43:13:8f:f1:83:
         e0:c4:68:53:71:7c:cb:37:df:6c:83:25:8f:33:68:41:c2:a7:
         5a:52:34:c0:8a:a1:b3:b4:20:de:ea:1a:1c:61:12:7e:72:f0:
         e3:5a:dc:d8:f6:2c:05:82:e6:58:d4:01:44:ad:80:ae:4c:ca:
         54:8c:12:e0:b1:9c:ad:65:0c:8d:5e:6c:c2:42:0a:7e:25:8c:
         77:c5:7e:4a:e7:d7:4e:af:db:0a:cc:9c:c8:77:d7:d2:1c:37:
         a3:a0:8c:31:70:00:d6:d5:7d:ba:f1:2b:af:34:e7:a0:05:4f:
         52:4d:38:d1:c4:f1:28:10:35:f7:50:28:07:97:e3:97:97:66:
         00:34:ec:0c:aa:ec:e1:9c:8a:42:f3:f4:cc:1f:5b:dd:b4:e4:
         90:bf:59:88
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYVyRbS8PmwSVUpiqt6BniU/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMTEzNzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzI3MzEzN2YzMDhkZjVkMjhmZmY4OWNiNWJkYjcxYjY0YjU3NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBU0yRm7DBzb1Fd01b+KqEF1t51m
vqFkTBPBm9d9X7RCQCPHnmalHVX/+9xhJqYNSb24ZnQkTWhGRZmujs6p9FXS48KT
av7Xhf9KRTI2FSnsb8eQ6spWnX6prt6mt67r3FYtcSB3ejYSdlg08dhpMIIbP7QV
ROOpD8HFeBxGk46EqF3/3hGJQ9ZB3Dr6xkQyvdhAdU7Wk/2Dm4bO0HWEZk+tFDQ2
F7ZbmE+ga9oSSsNP62lpIEKSRCEhOWFux3xCoN+xuxB4NdoWkFL6WWbByIG6H74m
C1Dcyo51pk0N50q3Yo3kWt1ycQusrKLBfGoUIMvXYUEjIdCDusqKgISoIwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFFcnMTfzCN9dKP/4nLW9txtktXYKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzllOWY1
NC03Y2ZmLTQ1YjEtYjdiMC1mMTExOGFhMmRmNGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvOWU5ZjU0
LTdjZmYtNDViMS1iN2IwLWYxMTE4YWEyZGY0YS8xL1Z5Y3hOX01JMzEwb19faWN0
YjIzRzJTMWRnby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw8jrMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNBNjANBgkqhkiG9w0BAQsFAAOCAQEARY4QNJW3t7sfVjgVjCmpAbcH3fiok/OZ
l3spSUBATFfEwRtOHYEurl2ZIkeAdkdlg9gHyUVZ4t0aLwNiHFDSXcmdYea42K8u
vJCne0/oZv42I5h+z2ylDE2ER54Tte5jKbXrKtIhukMTj/GD4MRoU3F8yzffbIMl
jzNoQcKnWlI0wIqhs7Qg3uoaHGESfnLw41rc2PYsBYLmWNQBRK2ArkzKVIwS4LGc
rWUMjV5swkIKfiWMd8V+SufXTq/bCsycyHfX0hw3o6CMMXAA1tV9uvErrzTnoAVP
Uk040cTxKBA191AoB5fjl5dmADTsDKrs4ZyKQvP0zB9b3bTkkL9ZiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-fra.rpki-client.org