Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fPWKUfsa9a91hgUN-aTSDe7V4lg.cer
File:                     fPWKUfsa9a91hgUN-aTSDe7V4lg.cer (raw, json)
Hash identifier:          yfFFt6brS6hhSeRWj4EibbSM19GqZHj2if705CrvsLM=
Subject key identifier:   7C:F5:8A:51:FB:1A:F5:AF:75:86:05:0D:F9:A4:D2:0D:EE:D5:E2:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018AC36AF70A114C460B81EA34662DA5E989
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/7CF58A51FB1AF5AF7586050DF9A4D20DEED5E258.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 23 Sep 2023 19:01:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 200975
                          AS: 205848
                          IP: 2001:67c:129c::/48

Validation:               Failed, certificate revoked on Thu 19 Oct 2023 16:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:c3:6a:f7:0a:11:4c:46:0b:81:ea:34:66:2d:a5:e9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 23 19:01:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7cf58a51fb1af5af7586050df9a4d20deed5e258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:50:bb:40:1a:2c:61:32:a7:7c:9d:c8:60:
                    79:3c:c9:c8:47:40:79:8f:d7:fc:69:2c:ed:fb:56:
                    03:f2:36:88:a9:4e:95:c1:9e:8b:4e:c5:03:27:82:
                    de:df:f9:b8:f2:ee:cf:8f:51:17:f3:e8:e8:36:bc:
                    26:2e:59:94:8b:1f:64:c3:65:67:cd:92:8f:ec:79:
                    e4:f7:fa:2f:56:8e:91:33:53:e1:2d:ce:98:d8:d0:
                    be:70:4e:ee:7c:8e:15:90:b4:6c:0a:6e:56:08:7d:
                    ac:88:c4:c1:41:d7:6b:19:16:86:d3:f8:7f:da:71:
                    41:aa:35:1f:8d:c0:dd:b5:ce:e5:88:67:30:27:ad:
                    ae:34:58:be:86:56:61:9a:90:24:37:da:e3:e2:bc:
                    e6:d1:0b:0d:a0:f2:d0:9d:27:2f:cc:eb:7c:4a:2b:
                    a9:8d:d3:e8:b6:bc:52:6a:f6:bf:dd:03:f4:de:84:
                    6d:12:7c:df:91:a5:5e:2b:69:f6:8a:33:f9:3a:de:
                    58:ba:d2:f3:e0:ad:b7:cb:4c:26:66:f7:0b:ad:f8:
                    5e:f5:ed:4c:67:cc:a6:a1:29:48:44:f3:a2:5f:20:
                    f8:d8:2b:33:d8:34:7b:6b:4b:4f:f8:b2:19:7d:97:
                    44:d0:0b:18:3c:6d:a8:8b:c5:45:d0:93:7a:db:ea:
                    4b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F5:8A:51:FB:1A:F5:AF:75:86:05:0D:F9:A4:D2:0D:EE:D5:E2:58
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/7CF58A51FB1AF5AF7586050DF9A4D20DEED5E258.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:129c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200975
                  205848

    Signature Algorithm: sha256WithRSAEncryption
         a5:9a:59:b7:3f:e9:25:cf:17:82:67:a1:0c:9d:47:ce:1f:bb:
         91:fd:20:89:76:75:49:eb:02:50:12:a4:da:d8:0d:bc:2d:0c:
         54:e0:16:7a:0e:4e:f7:2d:c3:e3:da:59:ab:9a:4d:75:d5:cd:
         a8:2e:46:a1:0f:70:13:9c:ae:b4:8d:50:5d:78:ec:e1:b9:b1:
         64:11:7a:1f:b9:9b:8d:2a:ea:04:63:f9:5c:1c:eb:cb:82:59:
         9a:ec:15:e9:0d:94:f7:57:69:29:6e:35:33:6a:49:38:8d:31:
         b0:ba:f5:33:74:da:ad:fd:69:6d:ea:e8:b5:43:7a:65:72:2d:
         e4:a6:5d:cb:92:93:32:82:41:03:03:4a:3d:80:46:15:40:ee:
         3b:27:55:33:84:8c:37:8d:77:ac:8f:2e:38:db:50:2a:0e:e0:
         5a:86:41:2f:bd:7f:cf:10:5e:4b:7b:62:38:19:72:b6:8e:b4:
         9d:41:f9:92:f7:31:90:1d:4c:b8:45:13:67:1c:3f:a3:7f:e3:
         7b:47:73:f3:20:a4:27:17:4a:7d:60:22:d9:a0:c6:75:72:d7:
         aa:1a:a3:4a:f7:1a:76:67:b7:b2:69:51:d2:9b:3b:51:76:3c:
         ae:22:d4:78:b2:a2:4b:bf:a1:17:5a:87:d2:37:6f:e8:3e:1c:
         6f:6d:1f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:44 2024 by rpki-client on console-ams.rpki-client.org