Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_JADy7GItseXFu443O5GisGdjKs.cer
File:                     _JADy7GItseXFu443O5GisGdjKs.cer (raw, json)
Hash identifier:          hCLNbfa3dDIr3ARdYaJuA3wjcxuWuSCmSn8aTiCdVHs=
Subject key identifier:   FC:90:03:CB:B1:88:B6:C7:97:16:EE:38:DC:EE:46:8A:C1:9D:8C:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC725BAF4F066E7202C1FCBD09B875676
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/_JADy7GItseXFu443O5GisGdjKs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 22:29:47 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 203712
                          IP: 185.126.104.0/22
                          IP: 2a0a:7040::/29

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 09:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:25:ba:f4:f0:66:e7:20:2c:1f:cb:d0:9b:87:56:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:29:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fc9003cbb188b6c79716ee38dcee468ac19d8cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:06:56:a6:bd:fd:bb:09:42:ed:9f:60:ca:
                    08:c7:c8:f4:ce:87:5b:9a:67:f3:4e:95:c4:70:56:
                    99:9a:e6:97:7f:fb:2c:95:9e:ad:82:28:d0:10:76:
                    fc:23:26:e8:49:43:e1:c6:3f:82:15:c5:e2:d8:3f:
                    3d:80:0c:9a:cb:a3:91:93:c7:e2:f1:a5:cb:06:01:
                    f9:34:b4:88:7a:0d:33:13:c3:87:96:4a:8f:a4:39:
                    bb:22:1b:d9:61:30:ec:22:82:74:ef:1c:b4:dd:ce:
                    a1:4d:b0:46:42:97:1e:da:74:96:24:02:ae:a4:65:
                    fa:06:af:d7:19:6b:cf:2e:38:b6:0d:43:18:54:18:
                    21:20:27:85:52:05:e8:72:d1:f7:47:d0:c6:38:29:
                    de:c9:00:ae:38:6c:bb:e1:cc:74:31:e9:6f:a9:cf:
                    7a:25:5a:94:2b:1d:ab:27:4f:1c:95:e6:4d:1b:98:
                    23:de:f8:50:23:43:75:0e:bd:ab:42:ab:8e:1e:74:
                    ff:06:78:53:86:54:f2:a3:52:8a:90:8e:29:74:62:
                    6a:ec:a3:ec:10:a7:e8:57:25:da:ce:1b:41:5a:ee:
                    5c:16:a3:c1:7a:7c:87:ab:28:3e:ad:10:63:44:47:
                    3f:b7:d1:a1:4e:d2:e4:76:02:32:5b:93:a6:79:a8:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:90:03:CB:B1:88:B6:C7:97:16:EE:38:DC:EE:46:8A:C1:9D:8C:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/08fd6b-02b4-4e34-97a9-74cff927b033/1/_JADy7GItseXFu443O5GisGdjKs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.104.0/22
                IPv6:
                  2a0a:7040::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203712

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:cc:2a:4e:06:18:f8:2a:87:84:29:66:c1:3d:b6:f3:1f:
         42:ef:dc:2a:ab:c7:7c:bf:28:04:5c:43:de:fa:42:96:89:4d:
         c6:53:b8:07:04:9f:7a:67:d4:c5:10:e0:82:fb:37:a3:17:64:
         ea:b7:7f:1b:61:4b:55:c8:0c:4f:7e:b8:e8:2e:a4:0f:87:e6:
         af:4d:5d:66:1f:bd:2a:30:6e:d3:94:f5:17:e5:bb:60:fb:95:
         82:c0:3d:fe:2e:36:ea:80:af:b6:22:0a:1f:b6:c6:0d:5a:fe:
         7e:35:f1:13:af:51:21:24:c4:30:c7:29:6a:90:53:34:c5:1b:
         5e:19:56:40:16:0a:68:70:93:83:e9:9d:e9:05:06:14:fb:9a:
         23:ff:96:15:19:2e:08:b3:f7:65:e2:fd:c7:03:a8:13:7f:30:
         48:6d:f2:f8:79:09:fb:47:24:4f:77:0b:74:e5:5d:83:57:de:
         63:db:db:bc:4e:c5:c9:8a:56:91:37:1d:c9:f2:44:26:d3:42:
         bb:b3:7d:ea:b6:1a:75:67:79:cf:67:ee:97:ea:1a:e3:49:80:
         d0:bf:5a:62:39:44:2b:38:f4:d7:8b:53:3e:9f:6a:00:1f:fe:
         fc:c8:86:de:0b:fb:de:e0:8c:90:25:28:94:fb:b9:64:12:19:
         ef:da:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:30 2024 by rpki-client on console-ams.rpki-client.org