Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6vcJwgPS3Zb0l5kT_LSd9n9190.cer
File:                     d6vcJwgPS3Zb0l5kT_LSd9n9190.cer (raw, json)
Hash identifier:          +wyzAf96SqXiQXnGSLzZTTzbPeJeM4zcuBBiUYrcuVQ=
Subject key identifier:   77:AB:DC:27:08:0F:4B:76:5B:D2:5E:64:4F:F2:D2:77:D9:FD:D7:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186E583389DC01F8420DC7BCDFE14A5275B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/25237e-415b-43a9-9ac6-0b18577c9fd3/1/d6vcJwgPS3Zb0l5kT_LSd9n9190.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/25237e-415b-43a9-9ac6-0b18577c9fd3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 15 Mar 2023 13:43:47 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 49468
                          IP: 91.213.11.0/24

Validation:               Failed, certificate revoked on Wed 22 Mar 2023 08:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e5:83:38:9d:c0:1f:84:20:dc:7b:cd:fe:14:a5:27:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 15 13:43:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77abdc27080f4b765bd25e644ff2d277d9fdd7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:e6:7e:6a:52:36:de:c2:43:11:29:68:30:
                    b0:c3:1e:c2:3e:c3:0b:65:ce:83:71:00:2a:5a:19:
                    b7:62:d8:56:6f:7e:09:91:ba:01:0c:72:0a:f2:9b:
                    c9:50:06:c8:83:70:93:70:46:98:4e:c7:3f:76:2d:
                    7c:01:1f:bd:94:e7:72:dc:a1:c1:65:bf:a4:cf:e9:
                    5c:e1:6f:1d:86:78:4e:03:df:af:e8:3a:27:c1:85:
                    6d:50:f7:66:7c:25:3a:67:f0:79:6c:6c:df:6a:31:
                    4f:d8:0f:e9:4a:1a:fb:5c:ac:b8:e6:c1:28:fa:d3:
                    14:28:86:41:cf:cf:7f:9e:9c:e0:9b:dd:e0:17:77:
                    98:d8:f8:b8:8e:39:75:37:74:c2:a1:83:04:1e:ee:
                    6d:c9:1e:80:68:5b:b2:ec:7e:d6:9a:b6:e4:bc:bf:
                    77:89:d0:44:da:7d:32:99:6e:8a:1a:03:4d:2f:34:
                    c0:8b:f6:cb:42:be:e1:c0:b6:d4:5c:13:a0:4e:5c:
                    47:bb:2d:da:f4:ff:05:19:c0:56:e8:12:88:98:e0:
                    61:92:cb:da:ca:be:ee:cd:c8:b4:05:a7:44:78:37:
                    a2:d9:c3:e8:91:fd:6e:42:9c:2e:42:13:86:cf:4f:
                    7b:21:3d:5e:d1:ba:c6:60:9c:db:05:94:72:c1:2e:
                    8c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AB:DC:27:08:0F:4B:76:5B:D2:5E:64:4F:F2:D2:77:D9:FD:D7:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/25237e-415b-43a9-9ac6-0b18577c9fd3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/25237e-415b-43a9-9ac6-0b18577c9fd3/1/d6vcJwgPS3Zb0l5kT_LSd9n9190.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.11.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49468

    Signature Algorithm: sha256WithRSAEncryption
         9b:7b:7b:90:f1:34:28:af:83:f5:22:3c:fb:5c:f5:dd:a2:53:
         7f:db:b5:1c:c8:31:72:b2:67:77:26:82:97:a5:14:40:90:aa:
         9a:6a:9d:04:a4:0c:0c:ca:c6:86:1f:6b:04:89:1c:aa:10:c8:
         f7:74:b4:68:6d:73:93:53:fe:d3:43:cc:09:0b:3d:83:84:0b:
         a4:01:59:21:f9:e5:41:78:23:df:1f:e1:0b:7e:5b:c6:20:50:
         94:63:7f:21:7d:3f:16:c5:9e:13:2b:d0:55:d5:81:0d:db:82:
         1a:a0:36:ac:ff:77:be:d5:4f:80:cf:89:df:f6:66:f4:a0:36:
         c7:f3:fd:f6:10:e4:a5:96:4e:03:28:ca:08:80:19:77:b3:9f:
         f6:84:6d:65:db:92:22:b9:70:4b:8f:28:33:23:a0:93:53:94:
         af:f8:88:96:c4:42:47:be:43:5b:54:85:92:71:89:05:33:9b:
         17:14:f8:d5:1f:58:a6:46:1b:0b:3e:0a:2e:b4:ec:51:92:cd:
         f4:94:16:64:b4:db:35:55:fd:cb:27:71:5c:e1:da:71:4b:e4:
         54:07:ae:ca:e2:ca:9a:f0:8f:09:6d:db:b7:6d:4a:77:6a:5e:
         f1:89:48:ca:42:c3:68:d8:f0:73:f5:89:66:47:77:9f:85:df:
         d3:da:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:46 2024 by rpki-client on console-ams.rpki-client.org