Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZdoS7t980OCmr7cnhsTIUuAgUkU.cer
File:                     ZdoS7t980OCmr7cnhsTIUuAgUkU.cer (raw, json)
Hash identifier:          jQSTX2X3nfkfn/QnqLlucioAbpZbwQRrzCf7qUfnvSY=
Subject key identifier:   65:DA:12:EE:DF:7C:D0:E0:A6:AF:B7:27:86:C4:C8:52:E0:20:52:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0BBEE5B3F7C537311E8026D9683F5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/ZdoS7t980OCmr7cnhsTIUuAgUkU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:31:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.139.112.0/22
                          IP: 2a04:f6c0::/29

Validation:               Failed, certificate revoked on Fri 18 Aug 2023 11:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:bb:ee:5b:3f:7c:53:73:11:e8:02:6d:96:83:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:31:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65da12eedf7cd0e0a6afb72786c4c852e0205245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:08:9f:da:e0:76:99:a3:0f:35:a6:87:d4:
                    39:c7:8e:12:c4:ed:01:5b:7d:26:b3:ed:c7:a8:ac:
                    a8:bb:1e:a5:5b:a2:2a:66:22:b4:49:5e:ed:bc:53:
                    8e:f8:7a:16:90:b4:b1:dd:be:13:44:52:db:0a:81:
                    b8:f1:b3:7a:9e:c4:8d:5e:21:0c:5a:cd:53:f5:0f:
                    5a:25:e4:49:5b:ff:f0:cf:09:b9:ee:1f:9f:88:fa:
                    3b:a9:fd:47:09:6d:f3:34:e4:f6:c7:bc:63:2d:37:
                    0c:39:b1:01:d6:ae:9b:b7:fb:89:00:ab:47:ac:e5:
                    77:1b:3c:3f:6f:4e:f0:a6:3b:c0:bf:ec:75:c8:00:
                    d6:83:43:9b:2a:c2:42:b6:47:41:04:60:cf:a3:61:
                    0f:bb:9e:44:0c:43:8b:df:62:09:78:f7:d5:6e:a0:
                    98:86:bf:e0:e5:24:f3:43:b5:71:da:fb:c3:48:da:
                    d6:5a:32:52:2b:be:ca:e7:f7:ff:c8:c0:e8:20:9a:
                    f5:73:0b:04:b5:e8:a7:d5:f3:74:f4:58:53:0a:52:
                    50:89:85:b2:5d:47:7e:6a:66:88:14:fe:a4:79:2e:
                    dc:2b:ca:25:b1:4c:75:db:04:e6:bc:ef:5b:08:3b:
                    a5:56:19:10:3a:ad:ae:cb:bd:f1:62:24:dd:65:d5:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DA:12:EE:DF:7C:D0:E0:A6:AF:B7:27:86:C4:C8:52:E0:20:52:45
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/081be5-22fa-4b0b-af5d-0bedb52856b8/1/ZdoS7t980OCmr7cnhsTIUuAgUkU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.112.0/22
                IPv6:
                  2a04:f6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:12:fe:58:c3:b3:66:2d:d0:2c:36:5c:dd:12:04:1d:38:c3:
         0a:93:ac:f0:08:c9:03:a2:2b:40:bb:4d:10:49:fa:70:84:ae:
         ac:df:55:52:ed:21:8b:28:25:a2:98:87:1a:5f:d0:fa:01:96:
         63:b3:a2:71:d2:33:b9:a4:5e:6c:15:f1:2a:08:c3:23:8d:b0:
         7a:28:35:05:b7:6c:0e:5c:92:f1:e9:30:bc:aa:dd:13:92:95:
         ff:c6:f9:0e:b8:96:50:c4:54:c8:18:d8:15:d5:3c:74:41:42:
         a0:7b:85:4d:8a:4e:3f:5e:3b:47:e2:c9:f9:f6:78:ae:60:13:
         96:8c:e5:61:59:a0:10:93:56:8b:56:81:89:92:85:7d:17:78:
         ef:ab:98:46:88:b8:da:48:d0:89:c5:8b:60:c9:3f:a9:2a:58:
         cf:fc:66:ed:57:80:74:2a:ba:92:77:cb:2c:84:60:bf:55:5a:
         2a:33:86:55:67:97:a9:d5:25:56:ff:eb:cb:f2:24:a5:3c:16:
         2e:ca:7f:9d:bd:83:6b:ba:33:8d:b0:62:bf:be:8e:09:3a:55:
         7f:25:64:1d:7a:35:a1:9c:dc:f0:ce:90:58:68:21:dd:3a:26:
         a8:51:a7:0b:d6:33:a7:53:d1:58:57:0e:54:96:1a:92:1f:9a:
         44:30:11:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:27 2024 by rpki-client on console-fra.rpki-client.org