Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer
File:                     a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer (raw, json)
Hash identifier:          Dhh86IiK+8WQabT7xsuI/u6SB9/vC79t0CWTpHTcOIw=
Subject key identifier:   6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD127FC1567C2E684C9764FDDA7C196
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:27 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.23.214.0/24

Validation:               Failed, certificate revoked on Tue 28 Nov 2023 13:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:27:fc:15:67:c2:e6:84:c9:76:4f:dd:a7:c1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6b4b5e69148a3310c34871324bc56fe84b891dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:58:eb:52:0a:36:16:0c:1d:52:f4:76:7d:
                    40:58:07:d6:1a:fa:8b:7a:5c:4d:52:92:c3:20:84:
                    eb:ad:8f:17:45:5b:be:59:f9:fe:b8:eb:83:cf:12:
                    96:5d:69:01:30:7a:d9:be:7a:b1:87:69:bd:14:f8:
                    00:6a:44:ef:7b:89:42:49:93:6a:7f:0e:9b:26:53:
                    a0:8f:af:98:f0:b3:46:02:f4:07:6d:22:31:ee:3d:
                    16:a5:3c:b1:0a:c7:e3:ed:bf:c1:80:cd:f6:dc:a9:
                    4c:43:7a:cf:1d:9b:09:67:1a:7b:ad:f5:97:6c:2f:
                    48:1c:86:3b:c0:a9:b1:42:b4:02:91:7e:b6:61:30:
                    eb:2a:89:e2:00:36:21:89:8d:27:6d:6b:af:d0:02:
                    87:c1:29:28:95:b3:6e:ed:24:0f:01:6d:c4:fd:ee:
                    ba:bb:45:97:cb:35:19:a6:c6:6e:5e:26:9f:d4:a6:
                    8d:57:bd:1d:5f:f8:fb:11:46:2f:b3:77:a7:a3:6f:
                    4b:c4:af:2f:09:82:09:35:e9:d1:08:15:e2:85:c1:
                    02:db:8f:c5:6a:72:dc:84:63:c4:ad:b6:d4:ec:24:
                    ad:00:0d:9b:04:55:b2:1c:3c:bb:03:58:84:88:2a:
                    1b:08:2c:41:ec:63:0a:5c:f9:d9:53:2e:5f:8c:7c:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b5:aa:38:12:b1:60:aa:d2:72:d9:9c:5c:07:7c:da:c5:fb:
         4e:f2:db:73:31:1a:75:1c:1c:7f:4f:30:10:d8:f5:75:be:bc:
         71:e8:00:bc:8d:ff:db:06:04:c9:14:e4:e5:94:ee:83:ca:07:
         33:e6:a9:13:98:55:d6:5f:47:de:a2:73:ed:62:4e:9c:07:7e:
         e9:f4:c2:a3:3b:4a:d6:82:8e:b6:58:20:f9:c9:2a:09:b9:5d:
         f5:f6:85:18:6e:e9:be:bc:e9:92:74:8a:54:33:bf:65:cb:88:
         ce:77:0a:9c:a0:68:23:25:2b:47:c3:d9:57:b3:10:6f:a5:79:
         e9:3f:69:d8:e6:94:bd:f4:75:27:54:a7:6b:b8:5a:c2:0a:28:
         76:0a:76:02:e3:c4:8d:44:29:27:a2:a0:31:20:2d:e8:ad:a6:
         b2:52:cb:87:d5:7e:ea:f3:b9:3e:22:74:c7:ed:d1:83:e5:98:
         15:c4:92:3b:ad:d3:03:6e:09:c9:56:23:6c:0f:1b:bf:c6:72:
         ff:61:d9:0d:76:62:05:56:b4:9b:9c:b0:91:60:f3:b8:91:4e:
         28:45:ea:90:4e:2d:72:07:63:50:43:81:4a:de:e7:1f:51:5b:
         9e:04:a5:7d:0e:75:e9:ed:16:03:64:59:0e:9b:9e:2f:ae:89:
         97:36:fb:85
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVr0Sf8FWfC5oTJdk/dp8GWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjRiNWU2OTE0OGEzMzEwYzM0ODcxMzI0YmM1NmZlODRiODkxZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8lY61IKNhYMHVL0dn1AWAfWGvqL
elxNUpLDIITrrY8XRVu+Wfn+uOuDzxKWXWkBMHrZvnqxh2m9FPgAakTve4lCSZNq
fw6bJlOgj6+Y8LNGAvQHbSIx7j0WpTyxCsfj7b/BgM323KlMQ3rPHZsJZxp7rfWX
bC9IHIY7wKmxQrQCkX62YTDrKoniADYhiY0nbWuv0AKHwSkolbNu7SQPAW3E/e66
u0WXyzUZpsZuXiaf1KaNV70dX/j7EUYvs3eno29LxK8vCYIJNenRCBXihcEC24/F
anLchGPErbbU7CStAA2bBFWyHDy7A1iEiCobCCxB7GMKXPnZUy5fjHzvBQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGtLXmkUijMQw0hxMkvFb+hLiR3/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzM2Yzdi
OS1iZTI5LTQ2YzctODM0Yy0zZDhmMzkwMjJlNDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvMzZjN2I5
LWJlMjktNDZjNy04MzRjLTNkOGYzOTAyMmU0NC8xL2EwdGVhUlNLTXhERFNIRXlT
OFZ2NkV1SkhmOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA1BfWMA0GCSqGSIb3DQEBCwUAA4IBAQCetao4
ErFgqtJy2ZxcB3zaxftO8ttzMRp1HBx/TzAQ2PV1vrxx6AC8jf/bBgTJFOTllO6D
ygcz5qkTmFXWX0feonPtYk6cB37p9MKjO0rWgo62WCD5ySoJuV319oUYbum+vOmS
dIpUM79ly4jOdwqcoGgjJStHw9lXsxBvpXnpP2nY5pS99HUnVKdruFrCCih2CnYC
48SNRCknoqAxIC3oraayUsuH1X7q87k+InTH7dGD5ZgVxJI7rdMDbgnJViNsDxu/
xnL/YdkNdmIFVrSbnLCRYPO4kU4oReqQTi1yB2NQQ4FK3ucfUVueBKV9DnXp7RYD
ZFkOm54vromXNvuF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:53 2024 by rpki-client on console-ams.rpki-client.org