Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jH_T29w6m5Ux5oa1sHZFwyixtRo.cer
File:                     jH_T29w6m5Ux5oa1sHZFwyixtRo.cer (raw, json)
Hash identifier:          gdhhm3bB1YqVuoS1lMdUpHqZIBKE95d6Wta6xR1HdYc=
Subject key identifier:   8C:7F:D3:DB:DC:3A:9B:95:31:E6:86:B5:B0:76:45:C3:28:B1:B5:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC64B60F0010C802C3289820436558D09
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/jH_T29w6m5Ux5oa1sHZFwyixtRo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:31:17 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211131
                          IP: 185.104.190.0/24
Validation:               Failed, certificate revoked on Mon 15 Jan 2024 16:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:60:f0:01:0c:80:2c:32:89:82:04:36:55:8d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:31:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8c7fd3dbdc3a9b9531e686b5b07645c328b1b51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:4b:47:b7:4b:59:46:14:97:38:1c:e8:33:
                    e5:53:47:aa:3c:66:6e:82:cb:e6:ab:45:cb:54:94:
                    31:f3:45:cd:0e:66:53:c3:e9:9c:94:b9:2d:5e:88:
                    62:84:c6:5e:1e:e9:4f:d0:3c:65:de:c4:4f:c0:fc:
                    08:e0:64:5b:3e:6a:7a:bb:52:2b:ad:19:4b:e3:66:
                    cf:86:1f:c2:74:8c:0f:d3:33:14:56:de:29:c0:75:
                    ad:13:29:56:d1:ff:96:fa:a9:76:46:66:28:4f:c0:
                    9b:16:8e:04:28:07:a6:db:23:38:39:95:0a:f6:cd:
                    72:d2:73:ac:a3:db:e4:a8:a3:f7:54:ce:eb:61:1f:
                    b8:be:c7:7b:55:40:d5:39:37:1e:33:ae:dc:37:7e:
                    4e:db:16:b8:eb:56:ae:02:e5:10:c0:ff:e6:2c:8a:
                    3f:ba:74:8f:0e:e6:de:0d:96:17:ba:07:5b:85:1f:
                    b0:e9:ef:aa:31:da:62:3f:8b:40:d5:3d:83:ff:b8:
                    c8:83:37:ca:90:37:61:e7:fd:74:df:a7:83:bd:db:
                    26:c4:ac:c1:22:3d:17:75:d9:fa:26:ce:26:06:77:
                    d7:7b:28:ed:1a:a1:90:57:a2:97:a2:b6:06:28:29:
                    9f:b7:3b:60:1a:dc:04:e9:6d:46:a2:50:63:06:02:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7F:D3:DB:DC:3A:9B:95:31:E6:86:B5:B0:76:45:C3:28:B1:B5:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/jH_T29w6m5Ux5oa1sHZFwyixtRo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.190.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211131

    Signature Algorithm: sha256WithRSAEncryption
         15:ab:06:d5:d0:6d:ca:a5:5c:4a:75:9f:57:cc:0e:96:c7:5f:
         0a:ce:9f:2a:cc:8c:29:af:3c:fa:d4:b8:02:8d:b3:e4:98:31:
         bd:62:6f:3b:5c:a4:20:48:05:b4:60:27:eb:c7:3e:63:76:80:
         a7:95:fe:c6:51:2a:40:0f:f0:a2:d0:97:fd:35:9b:16:15:87:
         97:cb:85:99:95:0a:e1:ae:44:95:74:3d:8a:2b:e6:90:c1:2b:
         36:81:80:3e:f0:25:2c:d7:6e:c4:15:23:93:49:a6:10:32:9d:
         7c:7c:08:d0:1c:7d:55:31:20:d6:09:17:e0:0b:a9:47:ec:86:
         ed:95:4b:84:46:4b:dd:84:0c:ad:45:e4:9f:28:c9:02:7e:b8:
         f4:5f:c7:52:81:17:de:f5:ac:e2:be:1e:0f:b1:76:c5:3f:25:
         af:e1:12:a9:fb:7d:a5:db:a7:9d:43:09:b7:1d:a6:c1:bd:c5:
         82:9f:70:fe:93:ab:5b:43:f8:26:aa:c5:4f:55:94:aa:1d:72:
         85:1d:6b:fb:97:65:a0:1b:af:b6:97:84:05:38:a6:c2:e4:32:
         7c:41:b7:28:6e:75:c8:ba:c8:c9:ee:83:8e:f7:89:8a:2d:3b:
         4e:0d:07:a2:16:38:99:98:8d:41:15:a1:73:09:62:73:5a:e3:
         11:7c:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:14 2025 by rpki-client