Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer
File:                     dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer (raw, json)
Hash identifier:          mtNkJrWlB6cBhf3etRE8lNSuoinydlA6EY8/Kwl+nTU=
Subject key identifier:   75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26CF294E25D3AE6FF9B56C3D3290476
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://0.sb/repo/sb/29/7542E5AC037FDD3DD15E6579917FA4EC50F4621E.mft
caRepository:             rsync://0.sb/repo/sb/29/
Notify URL:               https://0.sb/rrdp/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:29 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.122.207.0/24

Validation:               Failed, certificate revoked on Mon 26 Feb 2024 13:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6c:f2:94:e2:5d:3a:e6:ff:9b:56:c3:d3:29:04:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:f3:12:5f:c7:ad:66:71:8c:2c:91:89:68:
                    0b:70:0d:39:1d:c2:4e:9d:a8:d1:3e:b1:75:9c:4e:
                    03:8e:88:7d:61:e3:c6:6b:7b:a7:56:a9:a0:e5:20:
                    7c:9b:2c:36:b9:e6:8c:93:81:2e:58:15:d7:4c:31:
                    b1:c6:a3:07:c6:96:69:d0:61:2f:d2:ff:5e:df:dd:
                    f2:cd:44:41:7c:bf:f8:41:16:51:db:3b:fa:1b:ba:
                    7b:5d:59:21:03:e1:4a:2f:a8:a8:2d:c1:01:e0:be:
                    cb:8e:f9:08:77:41:7f:dc:cc:ec:3c:b4:35:21:8b:
                    22:f8:89:63:0b:d8:0e:bf:f3:35:d3:87:e8:1c:cf:
                    9a:57:bc:88:e8:0a:47:29:84:39:60:63:21:bc:9d:
                    2f:14:8b:96:d1:6c:63:c7:76:08:22:e1:2d:a9:c3:
                    18:51:6e:de:ac:df:bc:6a:07:b4:7f:fe:dd:33:91:
                    b2:fc:e1:94:86:5e:c4:ce:36:b0:85:6f:5f:0a:aa:
                    5a:dd:45:8a:ef:cd:92:2f:4b:e1:6f:19:f2:a9:b9:
                    c5:a2:7e:21:0c:53:ef:01:de:9b:d8:71:4a:40:ec:
                    0e:d7:f2:fb:33:50:a5:25:7e:78:69:43:31:c8:2c:
                    17:9e:22:de:c6:9d:25:d4:a4:7d:e6:30:79:be:d0:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://0.sb/repo/sb/29/
                RPKI Manifest - URI:rsync://0.sb/repo/sb/29/7542E5AC037FDD3DD15E6579917FA4EC50F4621E.mft
                RPKI Notify - URI:https://0.sb/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.122.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c5:49:b3:7d:ef:6a:39:78:d7:9a:83:ab:e2:e6:98:92:3f:
         7f:05:ff:0b:2f:53:2f:11:92:ce:cd:c1:1d:77:78:94:11:1c:
         01:12:93:89:a7:25:9f:39:dc:18:36:59:04:8d:3b:55:58:8e:
         6a:a0:c0:a6:4c:8a:4c:1a:76:2c:98:97:14:dd:e4:2f:f9:50:
         9f:61:da:5f:0d:95:dd:c8:ea:c2:76:72:91:5d:b7:c1:8f:79:
         0f:ad:e8:ab:38:4a:69:f5:aa:7a:38:e7:e0:82:12:9b:14:ae:
         ce:11:9d:de:20:0c:64:c9:06:5e:ad:72:a0:07:cd:f9:9d:e9:
         a2:8f:de:ac:cc:d5:cf:8d:6b:3a:37:cd:c0:24:15:b9:03:0b:
         17:ba:0b:d4:4a:fd:74:2c:d6:33:97:6d:85:ed:a4:16:c9:d4:
         9e:f7:90:39:b7:6c:26:e4:76:57:3a:00:16:f8:f0:e3:8c:b3:
         6a:9f:f9:74:37:d3:84:b2:f8:a7:8c:c9:a8:9d:4e:65:08:bc:
         b7:7c:cd:eb:fb:e6:74:c0:9e:b1:68:06:69:5b:52:cc:cf:30:
         a8:35:0b:8e:72:98:00:a4:02:4c:a2:cb:50:2f:43:1e:f0:7d:
         fc:c5:3d:bc:61:c8:c6:e2:86:37:65:e9:b7:e0:64:03:99:8d:
         68:e3:a4:1d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzCbPKU4l065v+bVsPTKQR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTQyZTVhYzAzN2ZkZDNkZDE1ZTY1Nzk5MTdmYTRlYzUwZjQ2MjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuHzEl/HrWZxjCyRiWgLcA05HcJO
najRPrF1nE4Djoh9YePGa3unVqmg5SB8myw2ueaMk4EuWBXXTDGxxqMHxpZp0GEv
0v9e393yzURBfL/4QRZR2zv6G7p7XVkhA+FKL6ioLcEB4L7LjvkId0F/3MzsPLQ1
IYsi+IljC9gOv/M104foHM+aV7yI6ApHKYQ5YGMhvJ0vFIuW0Wxjx3YIIuEtqcMY
UW7erN+8age0f/7dM5Gy/OGUhl7EzjawhW9fCqpa3UWK782SL0vhbxnyqbnFon4h
DFPvAd6b2HFKQOwO1/L7M1ClJX54aUMxyCwXniLexp0l1KR95jB5vtBaDQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHVC5awDf9090V5leZF/pOxQ9GIeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgbgGCCsGAQUFBwELBIGrMIGoMCQGCCsGAQUFBzAFhhhyc3lu
YzovLzAuc2IvcmVwby9zYi8yOS8wUAYIKwYBBQUHMAqGRHJzeW5jOi8vMC5zYi9y
ZXBvL3NiLzI5Lzc1NDJFNUFDMDM3RkREM0REMTVFNjU3OTkxN0ZBNEVDNTBGNDYy
MUUubWZ0MC4GCCsGAQUFBzANhiJodHRwczovLzAuc2IvcnJkcC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAuXrPMA0GCSqGSIb3DQEBCwUAA4IBAQBJxUmzfe9qOXjXmoOr4uaY
kj9/Bf8LL1MvEZLOzcEdd3iUERwBEpOJpyWfOdwYNlkEjTtVWI5qoMCmTIpMGnYs
mJcU3eQv+VCfYdpfDZXdyOrCdnKRXbfBj3kPreirOEpp9ap6OOfgghKbFK7OEZ3e
IAxkyQZerXKgB835nemij96szNXPjWs6N83AJBW5AwsXugvUSv10LNYzl22F7aQW
ydSe95A5t2wm5HZXOgAW+PDjjLNqn/l0N9OEsvinjMmonU5lCLy3fM3r++Z0wJ6x
aAZpW1LMzzCoNQuOcpgApAJMostQL0Me8H38xT28YcjG4oY3Zem34GQDmY1o46Qd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:00 2024 by rpki-client on console-fra.rpki-client.org