Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l6gPNBVZCYVSZHarGYKZAuGWPhI.cer
File:                     l6gPNBVZCYVSZHarGYKZAuGWPhI.cer (raw, json)
Hash identifier:          HLm2X1Ra0lclDF580yG/u9qYDBbslabHukOnRUps4AQ=
Subject key identifier:   97:A8:0F:34:15:59:09:85:52:64:76:AB:19:82:99:02:E1:96:3E:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF7E89D201CFEE6F948C55CE17FC327
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/803735-69ed-4c81-a0de-01569abaa5e1/1/l6gPNBVZCYVSZHarGYKZAuGWPhI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/803735-69ed-4c81-a0de-01569abaa5e1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:34:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 62403
                          IP: 185.36.100.0/22
                          IP: 2a00:eb60::/32

Validation:               Failed, certificate revoked on Thu 13 Jul 2023 08:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:e8:9d:20:1c:fe:e6:f9:48:c5:5c:e1:7f:c3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:34:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=97a80f3415590985526476ab19829902e1963e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:27:cd:b3:51:8a:7a:eb:31:8b:4d:3f:5a:
                    2c:ca:5e:36:61:14:08:21:03:4c:be:9d:c0:b0:2a:
                    a0:0b:82:56:aa:91:9d:dd:0c:4d:9e:8f:93:a3:3b:
                    b4:7c:1f:b9:e8:87:0c:4f:12:1f:f2:96:75:90:c2:
                    de:dd:ad:99:ae:14:e6:1a:83:3f:e1:31:8a:4b:18:
                    8d:93:c2:22:42:cb:db:0b:0f:4e:c7:10:2b:fe:91:
                    12:fd:ec:ec:3c:78:03:b3:05:19:0f:0d:e2:71:a1:
                    48:4a:1d:fd:7d:1b:5c:f7:d6:1c:b6:7b:a3:d5:4e:
                    7d:e4:27:1a:b5:51:7c:42:8a:2a:72:77:24:a0:76:
                    c8:a3:f6:17:c7:63:38:f0:bb:64:da:bc:76:c9:3a:
                    1d:db:6b:5a:67:b2:17:58:f9:7a:48:03:25:be:92:
                    b6:d9:88:3c:34:47:49:e5:71:0f:03:41:5d:50:c1:
                    be:c8:af:ba:96:04:29:41:68:e0:56:ba:c0:30:b4:
                    3c:c4:7e:66:c8:3d:ea:54:30:db:cc:b3:e7:96:2a:
                    ef:e3:ff:2c:54:34:c9:0e:e3:ff:f7:e1:55:64:f9:
                    4e:4c:67:09:56:4c:5f:46:97:d5:5b:67:fb:76:32:
                    9b:d5:92:32:30:c5:f2:94:db:8e:c0:bf:bb:05:7e:
                    73:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A8:0F:34:15:59:09:85:52:64:76:AB:19:82:99:02:E1:96:3E:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/803735-69ed-4c81-a0de-01569abaa5e1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/803735-69ed-4c81-a0de-01569abaa5e1/1/l6gPNBVZCYVSZHarGYKZAuGWPhI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.36.100.0/22
                IPv6:
                  2a00:eb60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62403

    Signature Algorithm: sha256WithRSAEncryption
         7d:bc:03:ed:0b:96:c0:2d:55:6e:c1:9b:15:7d:71:44:3b:ae:
         ce:a5:21:dd:e5:c1:b4:67:77:90:14:5a:a7:f2:c8:be:07:ef:
         a0:77:88:b2:71:49:01:e0:c9:bb:95:19:41:b1:52:cb:b3:0b:
         4b:05:b8:2c:cf:25:d1:4e:18:bf:67:98:16:13:a2:a2:14:51:
         d3:da:a2:04:78:28:73:46:43:a4:a6:f6:26:dd:55:be:49:5f:
         11:7e:5d:7d:37:d9:92:2c:6b:1a:a3:54:3a:91:c1:1a:e5:9b:
         5c:6e:f6:91:a6:48:99:df:63:f7:a2:2f:49:94:2b:df:86:bd:
         64:65:2c:75:94:af:7f:0d:fd:8d:07:67:84:6f:cb:89:ea:fb:
         10:02:61:7a:f3:c0:14:38:f3:b4:26:27:14:b2:19:25:e2:57:
         0d:69:17:2d:a5:46:f5:18:20:44:73:5c:89:f7:e4:f0:bc:6d:
         c8:17:24:b2:83:ee:03:b5:eb:a2:bc:d2:47:b0:96:8a:2e:a8:
         f6:85:d6:79:cb:94:f6:d7:8b:71:de:be:6b:98:b5:67:58:9f:
         49:0a:e7:dd:f5:69:bf:07:d9:b0:9e:97:dc:45:e3:8c:e8:8b:
         72:ec:b4:69:8a:7a:df:6d:02:1b:6e:5b:cd:c9:7c:a3:bb:7d:
         c1:9e:5b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:04 2024 by rpki-client on console-fra.rpki-client.org