Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YZSARE9B5_ibPJ13XAFpDhS7xVM.cer
File:                     YZSARE9B5_ibPJ13XAFpDhS7xVM.cer (raw, json)
Hash identifier:          sSI7z9TicruxKsnrlTW0l0Cud+jGtrnYr7YEs830mwA=
Subject key identifier:   61:94:80:44:4F:41:E7:F8:9B:3C:9D:77:5C:01:69:0E:14:BB:C5:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B63452CD852414EA3FE9C54A7BF9F48
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/YZSARE9B5_ibPJ13XAFpDhS7xVM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211142
                          IP: 185.83.229.0/24

Validation:               Failed, certificate revoked on Mon 18 Dec 2023 17:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:45:2c:d8:52:41:4e:a3:fe:9c:54:a7:bf:9f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=619480444f41e7f89b3c9d775c01690e14bbc553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:4d:a3:ca:15:19:e4:9e:7c:f6:cc:b8:ea:
                    6f:a4:70:41:78:6c:d3:a0:cb:fc:a1:7a:45:ab:e7:
                    aa:98:bd:78:55:41:05:56:90:76:bf:ac:c7:f9:b1:
                    c4:cb:ec:c7:16:cc:4c:f3:f4:ca:7a:18:75:77:b2:
                    80:11:25:5a:97:14:bd:e2:d5:a1:48:aa:b6:68:a5:
                    cb:87:8d:08:87:8c:49:68:7c:c8:8a:53:89:1b:5f:
                    f7:f8:4d:1a:c7:b1:c8:97:52:c2:84:69:5e:2c:af:
                    1b:8c:dd:b6:80:82:93:b8:d3:0a:a3:dd:d7:73:63:
                    04:90:ad:56:c3:c9:60:b4:7d:01:bc:49:53:63:20:
                    fb:6d:a0:9d:9e:47:fc:a5:52:06:49:db:8c:8c:74:
                    88:a5:18:e4:67:b1:db:a2:03:74:4c:e0:ef:72:8c:
                    73:eb:cc:b9:59:73:55:9c:f8:a0:2d:e1:da:62:2e:
                    46:9f:6e:cf:0d:45:b5:ef:48:88:3b:c0:25:ff:f1:
                    c9:db:13:bb:b6:57:1d:47:17:f2:e2:ca:7b:80:63:
                    be:da:ed:8d:db:60:77:f3:dc:8f:e3:72:96:ac:b0:
                    ef:ee:b7:dd:e7:2b:08:a6:fb:71:b5:e2:7a:77:05:
                    2a:06:14:88:b9:80:df:48:a0:ba:10:d8:bc:20:b0:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:94:80:44:4F:41:E7:F8:9B:3C:9D:77:5C:01:69:0E:14:BB:C5:53
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/YZSARE9B5_ibPJ13XAFpDhS7xVM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.229.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211142

    Signature Algorithm: sha256WithRSAEncryption
         23:29:80:5e:7b:9f:10:94:65:26:61:8d:4f:af:7b:de:f8:51:
         52:f8:a9:06:9d:ff:1e:48:4b:bc:99:67:27:d6:f2:2d:9e:13:
         b0:71:7e:9d:dd:7f:56:c4:4f:d1:da:35:ca:67:03:78:e7:fb:
         2c:a2:22:03:f2:16:50:fc:10:fb:2e:78:91:1a:cc:40:e4:2f:
         26:c3:27:95:99:75:61:5e:95:ad:9e:1a:7a:ec:89:1f:a9:58:
         f4:24:db:cc:11:f2:0c:d5:5b:71:6b:de:38:81:15:07:a9:da:
         55:cf:bb:61:37:d8:45:00:cf:34:5d:da:f4:64:50:62:00:7d:
         45:10:3b:f2:27:25:14:82:8b:e8:03:ad:1b:88:45:3e:3b:07:
         3a:1d:64:df:bc:db:b4:b0:04:d7:6f:d4:39:42:fe:47:b6:9d:
         3a:68:5f:b6:c5:d0:67:41:f9:08:54:40:46:48:a0:72:58:72:
         41:a5:2a:bd:aa:fc:27:4e:18:48:92:6a:56:b7:d5:cf:41:3a:
         9c:e8:6b:2e:2a:bc:70:f3:60:36:ef:a8:a5:56:74:2f:fc:72:
         fd:62:44:60:cf:a2:eb:8c:f4:a2:0c:44:e1:6e:1b:78:6f:9b:
         0f:94:6f:17:b4:34:77:48:15:a4:7d:25:80:0a:2d:24:48:55:
         7d:f9:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:56 2024 by rpki-client on console-ams.rpki-client.org