Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eWzBB-6C9wqpDeRGbNHPzBZukMw.cer
File:                     eWzBB-6C9wqpDeRGbNHPzBZukMw.cer (raw, json)
Hash identifier:          MAKbbdhMxcodiRh2ND3ATyZ/0KQqeezOAhUuHUtBm7o=
Subject key identifier:   79:6C:C1:07:EE:82:F7:0A:A9:0D:E4:46:6C:D1:CF:CC:16:6E:90:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A95BA52461C4A8A7B05B7FB77F1D19301
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://0.sb/repo/sb/16/796CC107EE82F70AA90DE4466CD1CFCC166E90CC.mft
caRepository:             rsync://0.sb/repo/sb/16/
Notify URL:               https://0.sb/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 22:05:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 109.107.140.0/24

Validation:               Failed, certificate revoked on Thu 14 Dec 2023 12:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:95:ba:52:46:1c:4a:8a:7b:05:b7:fb:77:f1:d1:93:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 14 22:05:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=796cc107ee82f70aa90de4466cd1cfcc166e90cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:75:2a:b8:00:cf:48:92:10:4b:a9:4c:45:
                    b6:ac:6a:e5:5c:39:75:9b:82:0e:aa:c6:f9:ef:1e:
                    eb:ce:db:12:6f:b0:50:50:d7:f1:58:e5:59:49:a5:
                    13:75:60:57:f9:02:2e:42:a7:41:79:fc:9b:e2:5b:
                    d0:6c:2a:2b:b9:85:02:5c:eb:04:af:2c:29:e4:01:
                    57:ae:2a:7f:65:fb:3d:7d:63:53:0a:b7:1c:60:7a:
                    3e:f7:71:ad:83:2e:ad:54:77:46:55:6b:aa:42:49:
                    e0:4b:65:a2:b1:33:36:83:de:5f:5a:b4:44:c2:16:
                    70:e0:23:7d:fc:65:b7:aa:5b:b9:07:2a:12:84:bd:
                    0b:33:67:ce:1c:e6:09:8c:ac:d5:cc:3c:8c:4b:3e:
                    b7:9f:d4:f1:71:26:2d:6a:dd:58:ff:8f:8d:b8:1d:
                    0b:77:3f:df:da:fb:b4:2c:26:89:de:87:57:60:b6:
                    1c:c3:89:39:05:77:d7:73:78:9d:db:12:f3:5a:3f:
                    a9:6f:65:f1:99:fb:c2:35:7a:8b:f1:68:f5:4d:cc:
                    6f:cf:10:b5:4b:6f:ec:a9:72:6d:2c:4f:17:6c:62:
                    d4:04:74:02:72:26:f7:39:79:d4:b6:9b:98:52:e0:
                    5e:9a:bd:52:b9:5b:be:08:00:22:ea:e3:13:79:6c:
                    fb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6C:C1:07:EE:82:F7:0A:A9:0D:E4:46:6C:D1:CF:CC:16:6E:90:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://0.sb/repo/sb/16/
                RPKI Manifest - URI:rsync://0.sb/repo/sb/16/796CC107EE82F70AA90DE4466CD1CFCC166E90CC.mft
                RPKI Notify - URI:https://0.sb/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:4b:0e:e3:58:1d:42:7e:6c:39:e4:26:c9:16:ee:42:a1:3d:
         21:9b:79:a4:32:d4:2e:ec:e4:9f:e5:b3:24:09:a6:dc:2d:20:
         b3:dc:75:29:c7:0c:fc:45:b7:02:61:c0:8e:8c:7b:b1:74:7a:
         c9:7e:ea:5f:5c:0b:d1:0d:41:57:25:32:96:48:99:86:02:80:
         85:76:14:f5:a0:38:c9:73:78:57:e1:46:31:2f:66:a9:ac:5c:
         44:60:07:40:bb:43:c5:54:38:b7:e1:c4:9d:0a:a7:e2:0f:39:
         2d:d7:3c:fc:14:cf:22:b5:25:b7:77:8c:89:e7:99:2d:38:bb:
         0f:ee:7c:15:0b:b4:56:d8:f5:52:57:94:cf:e4:5c:ff:4c:df:
         6c:cd:1c:3a:3a:88:46:24:b6:f6:eb:7b:98:88:d6:ae:9d:38:
         62:1e:6f:c4:82:c7:6e:34:d5:df:66:89:a5:8b:2e:87:52:25:
         a7:9e:fd:1d:59:0d:67:f7:bc:1b:a7:9e:2f:3e:cd:3a:98:e1:
         a2:11:35:7a:4a:90:db:36:fa:6a:d0:b9:61:54:a6:e2:d7:88:
         b5:bd:39:b4:26:48:98:8d:8c:a4:9c:81:4f:58:70:c1:df:6b:
         d4:9c:82:06:9e:cc:72:45:d8:71:52:40:c7:ac:2e:cd:e9:b1:
         f0:f4:9c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:38 2024 by rpki-client on console-ams.rpki-client.org