Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bgdrUEy5Xl393nlMiYHI9snJUF0.cer
File:                     bgdrUEy5Xl393nlMiYHI9snJUF0.cer (raw, json)
Hash identifier:          dwed/Tn1tvdC0j1t+wGGY10DPtud7TF0sMaLTDqt9R8=
Subject key identifier:   6E:07:6B:50:4C:B9:5E:5D:FD:DE:79:4C:89:81:C8:F6:C9:C9:50:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188E83140E25493833F32E04E58635BFC87
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/bgdrUEy5Xl393nlMiYHI9snJUF0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 23 Jun 2023 12:18:42 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 57436
                          IP: 2001:678:110::/48
                          IP: 2001:678:114::/48
                          IP: 2001:678:118::/48
                          IP: 2001:67c:88::/48

Validation:               Failed, certificate revoked on Fri 08 Sep 2023 06:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e8:31:40:e2:54:93:83:3f:32:e0:4e:58:63:5b:fc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 23 12:18:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e076b504cb95e5dfdde794c8981c8f6c9c9505d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:45:dd:ef:09:f0:61:39:5c:b3:d9:a5:3e:
                    b4:4c:7c:4c:6c:08:aa:ac:0b:2b:00:23:7f:d1:8e:
                    cd:d4:18:b5:84:b2:33:d2:16:1b:d1:9a:09:07:ae:
                    f7:f4:dc:ce:2d:cc:b0:51:50:aa:17:85:86:c7:1e:
                    4e:54:0d:ad:7b:61:e6:71:d6:08:3a:14:e8:fb:7c:
                    2e:73:5a:ba:b7:6a:8a:40:91:df:b0:8d:07:80:f8:
                    de:84:07:49:3d:3a:6e:b4:b0:27:c0:ae:51:88:1e:
                    c4:e3:fc:bd:b7:8f:fa:5d:c3:eb:23:23:db:45:70:
                    c6:1f:8f:f5:f1:90:24:f7:4a:f9:58:26:0d:bf:86:
                    eb:45:b8:c5:92:dc:83:35:0b:f4:b1:35:20:61:d3:
                    d4:bf:f5:47:83:45:33:44:5d:9f:4e:5d:a0:86:e1:
                    d0:3a:86:75:79:b8:38:5b:fa:17:4a:c6:23:bd:9f:
                    de:d2:4c:eb:c8:d0:50:d5:96:c8:11:ac:15:fb:e7:
                    54:b6:94:02:40:57:bc:ad:db:04:ce:d6:88:3c:4d:
                    52:cd:38:29:95:4a:ae:da:f0:a3:aa:73:d3:3f:27:
                    47:11:c6:19:b1:2e:33:e8:4c:cc:9f:ac:26:8b:b2:
                    e8:ef:7b:e7:6d:4f:3c:47:8e:d6:e1:cb:49:f8:44:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:07:6B:50:4C:B9:5E:5D:FD:DE:79:4C:89:81:C8:F6:C9:C9:50:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/bgdrUEy5Xl393nlMiYHI9snJUF0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:110::/48
                  2001:678:114::/48
                  2001:678:118::/48
                  2001:67c:88::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57436

    Signature Algorithm: sha256WithRSAEncryption
         94:cc:fd:f2:4d:4b:19:44:40:05:27:7d:83:13:50:d7:e8:33:
         ae:3f:4f:ba:7f:ea:1d:97:01:65:e6:5d:4f:33:65:1b:11:f7:
         3d:89:6c:e3:a4:6d:b2:2c:94:de:71:a8:3a:90:ac:61:4b:01:
         a3:51:a7:33:da:c2:8f:2f:75:72:eb:f4:be:cc:f3:0d:f1:7d:
         2a:83:07:23:28:3f:45:e7:b2:fc:59:58:f0:70:ac:66:81:92:
         f8:66:8c:6a:f3:88:e7:ee:97:4e:29:45:bd:c6:fb:e5:43:64:
         55:08:b5:81:2e:d2:e0:c6:6a:46:e6:87:52:e2:75:f2:95:93:
         cd:b7:71:6c:23:99:91:6c:b6:22:e2:e1:cc:5a:89:e7:3d:4f:
         83:c1:e2:17:d8:dd:91:72:06:57:fe:88:53:88:df:64:49:b5:
         1f:ed:8d:72:f6:36:61:a3:00:be:64:8d:20:f6:43:3b:e6:03:
         59:84:76:43:b5:f4:8b:d7:ee:5f:b8:2e:db:59:ba:cf:98:2d:
         25:78:84:69:3e:13:62:53:e2:ec:51:77:ec:fc:37:03:65:56:
         fc:f1:88:03:71:47:2b:c7:83:6b:c6:e2:39:c4:e1:fa:2b:8e:
         fa:19:77:5a:6c:32:5b:19:26:86:e2:8f:2e:7c:e5:34:c4:21:
         5f:fc:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:17 2024 by rpki-client on console-fra.rpki-client.org