Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jofpoijx4kzdB-pEpQMQTUGib9I.cer
File:                     jofpoijx4kzdB-pEpQMQTUGib9I.cer (raw, json)
Hash identifier:          +gNtw/m4M1qmjOXCC+mzoif2x4Cd3rK+xGYXhn6BlmA=
Subject key identifier:   8E:87:E9:A2:28:F1:E2:4C:DD:07:EA:44:A5:03:10:4D:41:A2:6F:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB08FBE7644EDFC3B9AD073983FB61E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/jofpoijx4kzdB-pEpQMQTUGib9I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 213328
                          IP: 185.83.124.0/22
                          IP: 2a05:9b40::/29

Validation:               Failed, certificate revoked on Thu 06 Apr 2023 10:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:8f:be:76:44:ed:fc:3b:9a:d0:73:98:3f:b6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e87e9a228f1e24cdd07ea44a503104d41a26fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:84:be:78:2e:3c:7a:26:fc:ee:40:39:29:
                    b6:c2:25:48:b4:81:db:7e:ff:88:ac:f8:70:80:34:
                    ae:26:9f:af:9f:e1:f3:73:96:ca:57:54:54:91:f9:
                    0b:c8:52:c2:0b:4f:8c:03:19:da:ca:cf:ba:fd:66:
                    4c:07:96:60:94:f8:02:7b:f1:4e:bd:df:32:ff:54:
                    08:2a:67:c5:5e:99:53:ec:6a:40:3c:15:b9:76:31:
                    3a:c8:77:34:5f:82:23:eb:bc:a0:6e:d5:f2:9f:45:
                    d8:b9:3c:6d:e5:ac:b0:34:75:52:b7:48:06:a2:f4:
                    4d:9d:d9:82:37:07:a4:82:c8:bd:98:53:4f:08:f4:
                    9d:05:07:91:ba:28:f5:67:5a:f1:76:6a:33:78:b7:
                    81:cb:c7:31:81:ef:3b:35:1d:73:da:2f:73:fc:28:
                    ab:2a:1f:3d:1d:af:52:a6:69:91:e1:5e:f2:8c:56:
                    0f:1a:5b:61:ba:36:e8:8d:e9:f0:7b:bd:54:4c:38:
                    f1:29:ed:47:9a:d0:e4:4d:80:60:1c:12:b7:79:d5:
                    15:0b:76:4b:6b:ab:eb:93:d7:39:ca:b3:84:5a:a0:
                    42:8b:03:8f:bd:c3:52:ae:6c:47:49:d8:c8:d8:7c:
                    5b:30:63:d9:b9:38:3c:1d:b9:9b:8e:9e:2c:cb:9d:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:87:E9:A2:28:F1:E2:4C:DD:07:EA:44:A5:03:10:4D:41:A2:6F:D2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/jofpoijx4kzdB-pEpQMQTUGib9I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.124.0/22
                IPv6:
                  2a05:9b40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213328

    Signature Algorithm: sha256WithRSAEncryption
         90:b5:04:4f:92:e6:5d:94:8b:bf:38:e9:78:84:fe:0d:91:01:
         fb:46:03:87:02:72:27:c0:a9:57:4b:df:08:cf:78:09:50:d8:
         6d:f7:8c:39:f9:6a:a5:e3:f0:8c:fa:6c:d6:d2:1c:46:1d:ed:
         b3:1c:69:2b:62:2d:8f:d8:bd:e2:ab:42:75:65:a1:50:d8:f0:
         e6:37:9e:96:6e:91:09:6e:c9:08:49:96:57:4d:ad:f3:84:fe:
         64:a2:9f:51:ac:be:3f:f4:c0:34:44:7f:a3:ff:6f:64:b5:48:
         b9:e6:30:11:d5:4d:cb:67:e6:ea:e7:e0:6e:04:55:7e:59:11:
         a8:3c:fc:52:05:c5:71:58:7a:58:d5:44:51:7f:49:91:2c:d8:
         5a:17:59:16:ed:e2:a2:61:81:88:cd:5e:1a:e2:ce:04:92:ee:
         07:83:0e:4e:1a:28:5d:23:45:f1:5b:d3:9c:3f:4a:32:4d:c9:
         c3:07:29:8f:0a:d7:ed:e6:22:18:59:95:e5:d3:f6:01:48:09:
         0b:ea:c5:d3:ec:b5:30:2c:04:8d:87:9b:70:54:ae:e0:0a:10:
         65:a2:69:d5:32:b8:42:cc:d9:73:f4:a3:a2:15:93:a7:76:0e:
         5f:51:bc:c2:c1:be:d8:d8:06:c2:4a:ca:ad:98:77:cf:60:14:
         1b:6d:15:88
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYVvsI++dkTt/Dua0HOYP7YeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTg3ZTlhMjI4ZjFlMjRjZGQwN2VhNDRhNTAzMTA0ZDQxYTI2ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX6EvnguPHom/O5AOSm2wiVItIHb
fv+IrPhwgDSuJp+vn+Hzc5bKV1RUkfkLyFLCC0+MAxnays+6/WZMB5ZglPgCe/FO
vd8y/1QIKmfFXplT7GpAPBW5djE6yHc0X4Ij67ygbtXyn0XYuTxt5aywNHVSt0gG
ovRNndmCNwekgsi9mFNPCPSdBQeRuij1Z1rxdmozeLeBy8cxge87NR1z2i9z/Cir
Kh89Ha9SpmmR4V7yjFYPGlthujbojenwe71UTDjxKe1HmtDkTYBgHBK3edUVC3ZL
a6vrk9c5yrOEWqBCiwOPvcNSrmxHSdjI2HxbMGPZuTg8Hbmbjp4sy52CuwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFI6H6aIo8eJM3QfqRKUDEE1Bom/SMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzQ2MGY5
OC05NmU0LTQwYmItOWZhYi1lMzIwODQ5YjJhOTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvNDYwZjk4
LTk2ZTQtNDBiYi05ZmFiLWUzMjA4NDliMmE5OC8xL2pvZnBvaWp4NGt6ZEItcEVw
UU1RVFVHaWI5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVN8MA0EAgACMAcDBQMqBZtAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBUDANBgkqhkiG9w0BAQsFAAOCAQEAkLUET5LmXZSL
vzjpeIT+DZEB+0YDhwJyJ8CpV0vfCM94CVDYbfeMOflqpePwjPps1tIcRh3tsxxp
K2Itj9i94qtCdWWhUNjw5jeelm6RCW7JCEmWV02t84T+ZKKfUay+P/TANER/o/9v
ZLVIueYwEdVNy2fm6ufgbgRVflkRqDz8UgXFcVh6WNVEUX9JkSzYWhdZFu3iomGB
iM1eGuLOBJLuB4MOThooXSNF8VvTnD9KMk3JwwcpjwrX7eYiGFmV5dP2AUgJC+rF
0+y1MCwEjYebcFSu4AoQZaJp1TK4QszZc/SjohWTp3YOX1G8wsG+2NgGwkrKrZh3
z2AUG20ViA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:53 2024 by rpki-client on console-fra.rpki-client.org