Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.cer
File:                     dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.cer (raw, json)
Hash identifier:          l8/U1TNNNGomtAjZmkiYRDSHBg8nncfc/Mm2A1w7cqM=
Subject key identifier:   77:35:88:67:F2:19:14:E1:52:FB:F4:6C:8B:CC:06:10:9A:BF:E0:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DF2C46BC1B5ECACA50869263784691
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:31:58 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 195.211.48.0/24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:2c:46:bc:1b:5e:ca:ca:50:86:92:63:78:46:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:31:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=77358867f21914e152fbf46c8bcc06109abfe0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:00:55:e8:01:11:ba:39:46:b4:02:66:eb:
                    9e:06:a9:94:e7:4b:09:53:53:ad:9f:c0:e1:e7:91:
                    aa:1f:9f:06:08:b6:ba:3f:3a:2b:72:1d:84:80:62:
                    a3:23:fa:98:27:42:ea:93:ad:c7:f5:62:5d:93:88:
                    c2:b6:a4:77:23:af:e9:52:a1:bf:9f:16:6d:33:79:
                    3f:73:fa:0f:dc:8e:e4:3c:c8:d6:c0:3a:59:75:ea:
                    c6:cb:69:13:6b:66:5d:9e:61:93:a4:74:80:79:79:
                    d3:dc:d3:8d:b6:a8:13:64:c4:1f:c8:2f:9a:25:28:
                    ff:f1:74:c5:a1:e4:07:63:d8:24:df:73:5d:9b:c6:
                    e1:e0:de:d3:4e:95:eb:ef:c6:e8:0a:a5:64:ce:62:
                    bb:7e:42:e4:a4:a1:93:a4:65:13:22:cb:f9:b9:bd:
                    5b:2a:26:42:3a:85:91:63:d2:99:2a:49:78:37:69:
                    89:f6:92:25:88:52:cc:88:a7:04:46:2e:f2:79:82:
                    14:5b:b9:c5:87:c7:bc:7a:9d:d3:23:6b:7b:f5:22:
                    24:c3:22:d4:49:96:f7:c4:32:98:ed:63:1f:33:ba:
                    23:c0:c6:e9:3d:77:c3:f0:8e:57:62:dc:2d:31:43:
                    5b:41:16:b0:04:cd:3f:7d:e8:19:6d:b0:47:af:d1:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:35:88:67:F2:19:14:E1:52:FB:F4:6C:8B:CC:06:10:9A:BF:E0:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.211.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:02:f0:5a:4c:7b:42:50:e1:4e:4c:fc:94:09:b1:c3:6f:58:
         1f:a9:00:11:24:ac:7f:4e:f8:aa:9b:e1:76:6c:5f:59:49:5b:
         21:c2:6b:31:9c:58:6d:99:0f:4e:e5:f6:b6:81:9f:cb:b1:46:
         45:6d:e7:86:6f:31:a0:2e:2b:b9:a0:e7:40:50:ca:c2:ce:13:
         b1:d7:2a:cb:64:ac:ba:c0:58:bb:46:02:72:44:38:42:4d:18:
         63:fb:48:14:9e:e1:c7:d7:e4:6d:76:14:63:c4:62:53:7a:21:
         8f:42:ed:de:42:7b:fc:e8:04:33:89:9c:26:0e:4f:81:8a:16:
         3c:0e:27:a6:4b:5f:eb:70:43:07:7a:6a:38:ad:62:6d:29:57:
         ff:d5:5d:e4:88:1c:fc:8b:3c:c4:95:4c:64:e4:05:b5:06:43:
         db:7e:cc:54:52:37:87:10:b4:2c:e4:cb:f5:3d:ce:20:90:12:
         9c:91:fa:a3:74:16:d8:8e:ce:39:88:30:88:53:ac:3a:08:0b:
         20:ab:1a:06:1e:74:69:c5:d7:96:7e:35:b1:2e:3b:15:67:94:
         8b:f2:d9:a6:06:e2:28:30:53:15:f7:8a:f4:b2:bb:73:bd:1c:
         52:1a:65:0f:2b:21:b7:a2:1f:e2:b4:ee:ad:8e:1a:67:06:da:
         ae:68:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:48 2024 by rpki-client on console-fra.rpki-client.org