Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_W9cC4pzOa09WXQh6fAId-P0tvc.cer
File:                     _W9cC4pzOa09WXQh6fAId-P0tvc.cer (raw, json)
Hash identifier:          tYwWD0SXIc/a4zghyf+HLomKbBk0fugUWk+YFWBjEfQ=
Subject key identifier:   FD:6F:5C:0B:8A:73:39:AD:3D:59:74:21:E9:F0:08:77:E3:F4:B6:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701D467A27BD0EA1503AFF243434A78F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/f44e2e-2610-4997-bb12-aee9a4bea3aa/1/_W9cC4pzOa09WXQh6fAId-P0tvc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/f44e2e-2610-4997-bb12-aee9a4bea3aa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.14.97.0/24

Validation:               Failed, certificate revoked on Tue 29 Aug 2023 07:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1d:46:7a:27:bd:0e:a1:50:3a:ff:24:34:34:a7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd6f5c0b8a7339ad3d597421e9f00877e3f4b6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bd:3c:1e:da:fb:0e:a0:8a:a8:cc:ff:dc:f9:
                    4a:cb:87:23:b0:41:a9:a4:db:a3:be:fb:08:23:e3:
                    80:32:1b:cf:3b:35:34:c3:55:16:c7:3d:da:2a:fa:
                    98:84:e9:b3:2f:f0:97:01:1c:bb:87:32:88:60:fc:
                    cc:d0:b3:df:22:38:a9:86:d2:d5:89:e7:09:be:8f:
                    ff:8b:bc:18:c2:f4:89:53:3a:a3:1b:c8:24:3b:94:
                    a8:ed:db:06:40:6d:e6:96:fe:0c:e8:4c:8c:a7:30:
                    91:80:db:97:0a:b9:8c:c2:d2:d7:bc:10:be:7e:9b:
                    e0:e4:43:67:89:47:26:09:4d:7c:cc:3f:42:e9:66:
                    f0:f3:9a:f4:6c:1a:0c:42:df:1b:29:1f:d4:51:92:
                    74:0a:f9:56:72:cc:04:f6:7f:db:c7:12:c5:e8:1a:
                    a4:1e:41:c4:95:58:d4:c3:5c:1f:36:32:57:25:8b:
                    a7:4a:ea:87:58:02:d2:cd:90:f8:22:ac:8c:63:85:
                    5c:a5:59:b8:ed:34:69:0c:27:13:88:79:47:d4:d4:
                    42:18:4e:28:9f:ca:ab:38:86:13:46:d1:17:e7:c7:
                    3e:d1:61:d2:80:bc:51:a1:41:ec:30:2c:4e:54:16:
                    99:5b:3b:47:a3:2e:4a:7b:8f:24:60:61:89:e0:16:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6F:5C:0B:8A:73:39:AD:3D:59:74:21:E9:F0:08:77:E3:F4:B6:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/f44e2e-2610-4997-bb12-aee9a4bea3aa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/f44e2e-2610-4997-bb12-aee9a4bea3aa/1/_W9cC4pzOa09WXQh6fAId-P0tvc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.14.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e1:49:5f:b2:17:3a:0b:b2:fb:9e:65:22:e8:85:71:4a:88:
         ef:19:1f:f8:92:80:95:97:8f:33:b8:88:77:1d:91:ca:df:09:
         cd:5b:f4:d3:cc:08:99:03:b9:83:39:7e:5c:7a:90:ce:85:80:
         c8:23:df:04:d2:97:78:fd:9d:e9:e0:20:ae:cb:db:fd:5d:69:
         bd:17:7a:3a:1d:c1:75:e4:b3:1e:36:27:b7:26:f8:5d:7b:93:
         09:7e:2b:1d:39:7e:eb:ef:d4:05:c1:71:07:8c:1c:7a:2f:bd:
         54:dd:9b:d3:b9:3c:ef:9e:4a:de:ae:78:c8:b1:ca:ca:db:fa:
         93:9f:48:38:f8:a9:41:85:9d:50:ca:b8:da:88:54:1e:90:85:
         52:78:0c:9c:fe:75:70:e7:4b:a6:38:fc:33:d9:9f:a9:f1:9e:
         0d:aa:66:9e:f4:8c:91:d4:e3:24:3f:00:1a:3f:29:65:15:80:
         84:97:6b:5e:81:1e:11:67:dc:b1:11:7f:ad:e1:9c:16:20:cb:
         32:1a:47:5e:c7:af:f1:a6:fb:ea:96:99:70:8b:cf:04:94:bf:
         48:ce:43:93:3f:04:35:e9:6e:bd:68:ea:54:28:d7:e2:25:75:
         97:60:0c:e7:8a:30:4c:72:03:81:88:4a:ee:3a:98:de:54:4a:
         64:6b:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:38 2024 by rpki-client on console-fra.rpki-client.org