Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WWOOE7WfyukUF-An2xPpFSmPW74.cer
File:                     WWOOE7WfyukUF-An2xPpFSmPW74.cer (raw, json)
Hash identifier:          YNXMmIRfbVL2ZN2c40ETHeVTNb6ySvc0eHwO4SEvQVc=
Subject key identifier:   59:63:8E:13:B5:9F:CA:E9:14:17:E0:27:DB:13:E9:15:29:8F:5B:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC94C9F382513185DFD70A2A83658CEC6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/WWOOE7WfyukUF-An2xPpFSmPW74.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 08:31:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 31.41.39.0/24
                          IP: 2a12:4240::/29

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 09:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4c:9f:38:25:13:18:5d:fd:70:a2:a8:36:58:ce:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:31:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=59638e13b59fcae91417e027db13e915298f5bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:76:ee:d8:8a:3f:bf:97:20:0a:81:be:3f:
                    f7:74:4a:3e:ef:77:17:fa:a4:12:3e:b4:55:1a:3b:
                    2c:a2:f9:78:10:4e:f8:90:09:19:2e:07:62:23:4e:
                    ea:25:8a:a4:8f:ec:82:8f:bf:4c:b1:fe:ac:70:80:
                    22:94:52:7a:ce:52:aa:e7:08:76:d8:52:19:98:f3:
                    a7:1d:03:17:79:a7:07:36:a3:d8:ae:37:7d:ec:cc:
                    31:9d:f6:16:c2:44:d3:11:9e:6a:04:5b:7d:87:db:
                    08:5a:84:68:a5:44:6a:bd:01:fd:5d:eb:58:74:5f:
                    eb:ec:8d:b5:c7:3f:62:5d:39:16:07:71:5c:ab:a4:
                    d2:eb:ae:39:21:d1:00:95:18:94:4a:85:cb:3c:72:
                    25:9e:28:b8:42:cf:a5:09:06:73:0e:75:00:93:68:
                    df:b5:95:11:17:7b:1d:4d:10:e5:35:08:7b:17:6f:
                    e1:c3:f2:dd:3b:98:ab:62:4d:33:e7:a5:71:37:77:
                    b1:78:3c:8c:d1:c7:79:d4:44:25:60:97:46:b8:c5:
                    81:87:68:92:dd:80:49:cf:5e:b5:3b:ae:22:90:5e:
                    89:c3:68:7d:ae:a5:1d:42:0b:55:b4:b4:e8:dd:8c:
                    2d:fd:d3:e6:2d:7d:eb:46:d9:07:fd:0f:9e:ad:a4:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:63:8E:13:B5:9F:CA:E9:14:17:E0:27:DB:13:E9:15:29:8F:5B:BE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/WWOOE7WfyukUF-An2xPpFSmPW74.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.39.0/24
                IPv6:
                  2a12:4240::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:ee:42:84:3a:3b:7c:5b:9a:ff:cf:08:8c:a6:06:f8:37:f1:
         8c:eb:81:17:dc:44:02:8a:48:e7:fb:d3:06:b7:51:56:ac:82:
         3d:d3:a3:55:23:fc:09:8f:d4:ff:31:12:44:41:3e:da:5b:08:
         4a:7e:ac:9a:57:fd:a4:92:c3:54:4f:e7:06:22:6d:0a:e0:0d:
         19:ce:14:46:b8:02:13:d3:5b:e3:58:fc:b5:b1:da:f7:f8:d0:
         b8:95:9e:17:ce:bc:a0:e8:70:21:42:27:49:1c:ba:96:0b:0b:
         99:f0:a6:d9:7c:ea:fa:e7:81:b6:a4:42:c8:03:a5:8a:4d:29:
         8e:30:d0:e6:96:eb:b8:b2:53:34:50:fa:05:b0:1b:d8:62:f1:
         19:c8:28:33:fd:f6:f4:34:97:9a:39:8b:54:bb:41:a2:d9:ef:
         f7:9b:dc:8e:ed:8a:53:20:fc:ce:39:dc:f4:41:72:08:62:2f:
         55:e5:0b:4f:f2:e6:18:2a:5f:af:e9:d9:93:53:2c:a1:de:fa:
         41:af:00:e2:c8:09:9e:55:cf:67:e3:8c:7e:af:fb:da:f9:e7:
         ed:74:87:13:8d:60:94:59:bf:aa:c5:3b:fe:26:32:75:f1:78:
         33:80:c2:bf:92:58:9c:48:46:19:d5:10:3f:01:ea:1c:c5:e3:
         43:75:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 14:44:31 2024 by rpki-client on console-fra.rpki-client.org