Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h_cYJqExaaYp5xqJ264QhzCiqgY.cer
File:                     h_cYJqExaaYp5xqJ264QhzCiqgY.cer (raw, json)
Hash identifier:          wGv5TDAPQyEIZTthXQ9fB1I+aB0QqKDfox+k1dqUVMs=
Subject key identifier:   87:F7:18:26:A1:31:69:A6:29:E7:1A:89:DB:AE:10:87:30:A2:AA:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA2985443F86603FF540012E781377FD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:32:47 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 195.2.248.0/24
                          IP: 2a12:2940::/29

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 06:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:85:44:3f:86:60:3f:f5:40:01:2e:78:13:77:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:32:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=87f71826a13169a629e71a89dbae108730a2aa06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:12:bb:e6:b1:18:d7:36:79:1c:b4:a3:46:
                    02:88:90:9f:83:1d:fc:9d:38:2c:61:e4:cc:25:19:
                    2c:d1:88:d7:f2:0d:06:83:b2:60:8b:93:33:c9:df:
                    8f:9c:e6:b9:74:64:38:2b:a7:60:3b:c3:03:53:f2:
                    8c:da:e8:4f:1f:fd:4a:5b:ee:f3:3b:1a:fd:e0:01:
                    89:21:b8:36:e3:08:17:73:a0:5f:9a:69:1c:1e:aa:
                    d5:3a:cb:df:f9:2b:54:25:58:a7:d8:84:b8:4d:ef:
                    a1:1d:3e:1e:4a:28:59:5d:97:44:2d:67:93:97:ea:
                    c1:f9:4f:7e:ae:47:d1:e0:63:12:7e:88:b8:38:ba:
                    49:51:6e:10:9f:70:49:80:0f:bf:82:dd:0a:e9:51:
                    eb:3c:45:23:07:1e:87:c6:d9:3e:b0:4c:f9:50:c9:
                    6a:7c:5e:2d:46:b8:af:4b:95:f1:6c:48:93:1b:43:
                    f7:05:a2:30:0e:6f:81:74:c7:8d:8a:22:30:98:a9:
                    ad:78:f0:b1:b6:31:89:0e:1f:9f:35:c1:10:e8:3e:
                    79:62:7b:f8:0a:fb:e7:9f:fc:f7:35:4c:9c:f8:7f:
                    6c:ab:8b:33:90:b9:01:2e:a2:9c:09:b0:5e:7e:75:
                    6c:8b:79:17:42:fb:ab:16:94:8a:ca:08:49:94:9a:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F7:18:26:A1:31:69:A6:29:E7:1A:89:DB:AE:10:87:30:A2:AA:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.2.248.0/24
                IPv6:
                  2a12:2940::/29

    Signature Algorithm: sha256WithRSAEncryption
         9d:83:e8:97:07:a4:06:b3:48:86:df:74:d0:88:63:f7:c6:2f:
         74:7b:25:25:54:38:e1:a2:7f:2b:21:dd:86:26:ab:d0:0f:c3:
         3e:c3:ba:dc:03:6c:a6:08:f5:32:04:ab:54:4c:ec:8a:d7:1c:
         a2:a2:2f:94:3f:51:77:1d:07:c7:63:68:d0:9e:f8:80:d0:e9:
         20:ca:bc:4f:4f:a1:cc:f5:23:75:1c:66:bf:27:be:ab:bd:36:
         38:b4:07:60:ff:01:0f:39:91:73:af:52:a6:f0:ce:4e:6c:25:
         8e:9e:77:9b:b2:b7:9f:7b:29:a0:44:73:88:82:c7:75:0a:2b:
         dc:35:60:a9:50:ef:71:9b:a2:e1:07:35:f2:6a:4f:74:49:a4:
         5f:0b:3b:83:25:75:1a:27:ad:4b:43:15:1c:ee:3a:c7:6b:7b:
         40:fc:ce:2f:b3:fa:c2:4b:69:38:24:7d:62:f0:a3:d0:c9:5c:
         eb:b8:e4:cb:18:e8:6e:03:f2:74:7d:35:8a:81:d7:1b:3e:4d:
         b6:bc:e7:6b:e5:a7:ed:9f:95:9d:61:2a:61:bc:65:a6:a0:5a:
         14:2f:f8:0d:71:57:26:8b:ea:64:d2:66:ce:6a:6f:89:e8:66:
         49:f5:92:60:f0:1d:18:e7:61:e2:ed:e6:49:0a:dd:16:97:a6:
         de:49:c5:c9
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzKKYVEP4ZgP/VAAS54E3f9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMjQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2Y3MTgyNmExMzE2OWE2MjllNzFhODlkYmFlMTA4NzMwYTJhYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcASu+axGNc2eRy0o0YCiJCfgx38
nTgsYeTMJRks0YjX8g0Gg7Jgi5Mzyd+PnOa5dGQ4K6dgO8MDU/KM2uhPH/1KW+7z
Oxr94AGJIbg24wgXc6BfmmkcHqrVOsvf+StUJVin2IS4Te+hHT4eSihZXZdELWeT
l+rB+U9+rkfR4GMSfoi4OLpJUW4Qn3BJgA+/gt0K6VHrPEUjBx6Hxtk+sEz5UMlq
fF4tRrivS5XxbEiTG0P3BaIwDm+BdMeNiiIwmKmtePCxtjGJDh+fNcEQ6D55Ynv4
Cvvnn/z3NUyc+H9sq4szkLkBLqKcCbBefnVsi3kXQvurFpSKyghJlJqbwwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIf3GCahMWmmKecaiduuEIcwoqoGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2YxMzQ3
Yy05ZmRlLTQwZWItYjNhOC0yZDUzMjFlNTAwNTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvZjEzNDdj
LTlmZGUtNDBlYi1iM2E4LTJkNTMyMWU1MDA1OS8xL2hfY1lKcUV4YWFZcDV4cUoy
NjRRaHpDaXFnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwwL4MA0EAgACMAcDBQMqEilAMA0GCSqGSIb3
DQEBCwUAA4IBAQCdg+iXB6QGs0iG33TQiGP3xi90eyUlVDjhon8rId2GJqvQD8M+
w7rcA2ymCPUyBKtUTOyK1xyioi+UP1F3HQfHY2jQnviA0OkgyrxPT6HM9SN1HGa/
J76rvTY4tAdg/wEPOZFzr1Km8M5ObCWOnnebsrefeymgRHOIgsd1CivcNWCpUO9x
m6LhBzXyak90SaRfCzuDJXUaJ61LQxUc7jrHa3tA/M4vs/rCS2k4JH1i8KPQyVzr
uOTLGOhuA/J0fTWKgdcbPk22vOdr5aftn5WdYSphvGWmoFoUL/gNcVcmi+pk0mbO
am+J6GZJ9ZJg8B0Y52Hi7eZJCt0Wl6beScXJ
-----END CERTIFICATE-----