Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dQO84u3P0SwFE8Zh2tVE0lmmxkY.cer
File:                     dQO84u3P0SwFE8Zh2tVE0lmmxkY.cer (raw, json)
Hash identifier:          rP578g3wp/O+gKwJUdzzZop/UhlT0/8RTwri8ha3xHw=
Subject key identifier:   75:03:BC:E2:ED:CF:D1:2C:05:13:C6:61:DA:D5:44:D2:59:A6:C6:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01877AA6737468168604E25A3589EEB57C0D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/3/7503BCE2EDCFD12C0513C661DAD544D259A6C646.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/3
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 13 Apr 2023 12:45:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 52210
                          AS: 57194
                          AS: 212934

Validation:               Failed, certificate revoked on Sun 16 Apr 2023 09:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7a:a6:73:74:68:16:86:04:e2:5a:35:89:ee:b5:7c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 13 12:45:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7503bce2edcfd12c0513c661dad544d259a6c646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2a:7e:79:7b:0f:12:2f:72:04:ce:51:17:5b:
                    b6:c5:2d:b3:a9:f9:b2:2f:bd:3f:8f:af:e5:7c:ed:
                    b0:6e:18:41:ac:9f:3c:a2:de:41:4b:cf:2b:f9:f6:
                    e3:b0:19:9b:50:7f:5d:f1:2d:e6:2e:ed:ec:e4:0c:
                    02:1b:93:a6:8e:6d:a2:51:dc:69:99:73:01:01:dd:
                    a2:cd:7b:5f:8e:9d:be:fa:da:76:ef:fa:79:26:74:
                    4e:d3:e7:44:a1:f2:8f:a6:53:58:ea:9d:c7:a6:9a:
                    ef:e2:da:51:52:1d:02:b8:40:32:5d:36:25:2d:4f:
                    50:aa:f8:3a:c1:12:ae:6a:7c:9a:61:c0:62:ef:94:
                    81:29:55:5f:05:d2:8c:b1:a9:ce:37:cb:22:06:eb:
                    68:21:89:d8:87:a5:c9:c7:d1:f4:3b:56:25:68:94:
                    00:ec:c4:b5:bf:16:0c:df:f8:f4:0d:86:2c:57:62:
                    c1:9d:a5:28:6c:c8:b6:9c:d7:25:22:64:55:4e:12:
                    88:d0:d0:42:b0:61:54:9b:80:00:ae:62:cf:77:5b:
                    ca:30:62:12:b2:9a:98:40:54:ad:06:e0:85:b1:3f:
                    76:00:e1:a1:c2:a8:f6:5d:41:33:5c:3e:e1:cb:32:
                    8f:3b:45:c4:c1:d2:20:74:e8:52:b3:ce:46:49:1d:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:03:BC:E2:ED:CF:D1:2C:05:13:C6:61:DA:D5:44:D2:59:A6:C6:46
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/3
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/3/7503BCE2EDCFD12C0513C661DAD544D259A6C646.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52210
                  57194
                  212934

    Signature Algorithm: sha256WithRSAEncryption
         2d:80:13:9f:56:c3:20:a7:f6:e6:df:a0:ba:6c:ac:c3:e7:31:
         72:80:2a:f6:86:d7:7d:15:41:57:27:84:eb:d0:13:6b:33:26:
         18:32:29:81:a6:89:de:15:99:ea:72:58:0f:4c:8f:c6:42:ea:
         f9:a0:db:ce:db:41:fe:9e:b0:d7:06:9b:02:9a:17:56:37:be:
         80:79:28:cd:72:36:70:f8:c1:94:2b:ea:df:4f:1b:5d:e9:11:
         83:b0:ea:02:f1:15:31:d9:f6:20:79:7e:b9:9b:29:84:15:49:
         33:83:aa:7e:a4:30:0b:c0:67:9c:6f:a9:5d:3a:c9:a8:86:62:
         be:c4:3e:0b:82:ab:37:6f:10:93:1a:54:77:31:21:f8:e4:c0:
         f1:2c:63:59:97:d5:c3:95:91:a6:65:89:c9:ca:f7:f8:c3:5c:
         b7:fd:49:a9:64:ed:5c:e1:f9:97:95:17:1a:7a:a6:ce:dc:d0:
         93:bb:18:92:90:3c:ef:a2:28:de:84:01:0b:0a:22:2f:f5:2e:
         de:f1:60:5a:89:9c:76:e1:83:df:c1:15:df:94:b9:69:0d:e7:
         e1:16:1e:16:59:89:99:cc:9a:a1:59:1c:7f:e6:29:ee:38:f7:
         9a:7a:91:3f:44:92:c0:6e:c8:cc:fa:04:a3:8d:a2:9a:c5:86:
         6b:c4:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:19 2024 by rpki-client on console-ams.rpki-client.org