Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
File:                     lJgRnhX4EIq62dXhUwGPtGZcpjA.cer (raw, json)
Hash identifier:          I1xbe8+uRoh0KPkcZVoarMWkoWE8Cn05KmNZXFdcges=
Subject key identifier:   94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0E8CA8A9CFB1B3FDA822C7DCCF88F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.mft
caRepository:             rsync://rpki.august.tw/repo/HYSP/6
Notify URL:               https://rpki.august.tw/rrdp/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:11 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 47449
                          AS: 50058
                          AS: 202736
                          IP: 2001:67c:a80::/48
                          IP: 2001:67c:a84::/48
                          IP: 2001:67c:a88::/48
                          IP: 2001:67c:a8c::/48
                          IP: 2001:67c:a90::/48
                          IP: 2001:67c:a94::/48
                          IP: 2001:67c:a98::/48
                          IP: 2001:67c:a9c::/48
                          IP: 2001:67c:aa0::/48
                          IP: 2a12:dd40::/29

Validation:               Failed, certificate revoked on Sat 08 Apr 2023 03:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:e8:ca:8a:9c:fb:1b:3f:da:82:2c:7d:cc:f8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:50:5a:52:f2:46:ee:63:44:12:91:04:fc:
                    d5:e3:fa:ba:04:71:00:e5:5a:b0:05:d9:a2:8f:08:
                    ff:e0:a2:24:49:29:69:60:1c:c2:7e:86:86:24:b1:
                    f9:b3:cd:70:fc:27:cf:6d:97:29:18:11:04:43:aa:
                    bb:84:74:e9:20:cb:5e:b1:b2:9b:dd:3e:4d:ba:8e:
                    42:94:95:6f:0a:e7:8e:35:0f:29:b2:23:d8:29:7c:
                    b8:00:26:8a:ec:33:08:11:63:83:31:7c:ef:0b:55:
                    13:de:13:ac:84:6f:39:f8:28:14:59:43:70:2c:be:
                    2f:5f:43:49:9b:6e:c7:29:e6:a0:10:c8:28:21:91:
                    ac:41:fd:3c:d5:2f:da:9f:f1:d0:4a:0e:29:a3:d7:
                    6a:ca:c0:49:b1:5a:d3:a7:47:c4:ee:d4:c7:19:2f:
                    6a:1b:b5:15:11:43:14:fa:97:65:a6:5a:53:66:23:
                    8f:0d:e9:a3:d2:ee:d9:33:a0:fe:76:6b:f0:c3:05:
                    8c:57:8d:7c:44:a5:55:5e:3b:b8:0e:f1:8b:67:d0:
                    e8:78:3a:b0:cb:c1:39:ee:b7:4d:c1:6c:cb:d9:7f:
                    d1:65:2d:cd:1d:36:87:c6:bd:7b:ce:c2:35:ce:19:
                    18:f6:e5:55:33:ff:2d:80:ee:8d:00:f1:79:4f:b3:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.august.tw/repo/HYSP/6
                RPKI Manifest - URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.mft
                RPKI Notify - URI:https://rpki.august.tw/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a80::/48
                  2001:67c:a84::/48
                  2001:67c:a88::/48
                  2001:67c:a8c::/48
                  2001:67c:a90::/48
                  2001:67c:a94::/48
                  2001:67c:a98::/48
                  2001:67c:a9c::/48
                  2001:67c:aa0::/48
                  2a12:dd40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47449
                  50058
                  202736

    Signature Algorithm: sha256WithRSAEncryption
         1a:7a:e8:7e:d6:e6:a6:6c:37:fe:24:f5:9d:42:c3:51:35:ff:
         54:00:f5:7c:db:0d:fb:69:a7:4e:76:bb:33:f4:e4:1f:2d:7d:
         be:67:ed:5b:46:a6:49:5d:e8:d3:17:9a:2b:58:7b:56:73:be:
         66:e3:02:c7:50:49:b6:7a:f0:d4:a4:4c:cf:bd:83:f2:09:ac:
         7f:12:58:d5:6b:b9:dd:fb:10:3e:f0:83:c7:5f:92:30:50:cb:
         3f:5a:c4:30:ae:96:e2:d7:bb:c8:d7:48:e0:e4:bd:f2:2d:2a:
         0d:a7:0c:d0:1f:56:ea:e2:ee:18:31:2c:01:9e:ec:ba:6b:0e:
         29:09:15:aa:93:64:58:cc:9b:47:33:5b:fb:b4:6b:ce:a1:83:
         a5:86:1d:a3:a3:dd:b1:b0:19:61:0e:6c:a3:e0:9b:fe:19:4a:
         37:44:ba:75:83:9d:ad:85:90:c3:ab:c6:0a:4d:ae:10:07:b8:
         34:20:46:68:78:b8:06:49:ac:3f:33:f2:11:a8:47:81:05:15:
         e0:ec:ae:9e:ff:2b:a5:83:e1:ec:2f:fb:43:8f:82:08:e0:77:
         1e:dd:79:3d:0c:c5:db:09:b1:d8:5a:ca:15:49:a1:5b:8e:86:
         61:a2:e5:dd:f1:7a:2f:bd:0a:97:30:91:63:ae:fc:88:ae:fb:
         e2:57:2b:3c
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYVr0OjKipz7Gz/agix9zPiPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDk4MTE5ZTE1ZjgxMDhhYmFkOWQ1ZTE1MzAxOGZiNDY2NWNhNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVdQWlLyRu5jRBKRBPzV4/q6BHEA
5VqwBdmijwj/4KIkSSlpYBzCfoaGJLH5s81w/CfPbZcpGBEEQ6q7hHTpIMtesbKb
3T5Nuo5ClJVvCueONQ8psiPYKXy4ACaK7DMIEWODMXzvC1UT3hOshG85+CgUWUNw
LL4vX0NJm27HKeagEMgoIZGsQf081S/an/HQSg4po9dqysBJsVrTp0fE7tTHGS9q
G7UVEUMU+pdlplpTZiOPDemj0u7ZM6D+dmvwwwWMV418RKVVXju4DvGLZ9DoeDqw
y8E57rdNwWzL2X/RZS3NHTaHxr17zsI1zhkY9uVVM/8tgO6NAPF5T7OUwwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJSYEZ4V+BCKutnV4VMBj7RmXKYwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgdcGCCsGAQUFBwELBIHKMIHHMC4GCCsGAQUFBzAFhiJyc3lu
YzovL3Jwa2kuYXVndXN0LnR3L3JlcG8vSFlTUC82MFsGCCsGAQUFBzAKhk9yc3lu
YzovL3Jwa2kuYXVndXN0LnR3L3JlcG8vSFlTUC82Lzk0OTgxMTlFMTVGODEwOEFC
QUQ5RDVFMTUzMDE4RkI0NjY1Q0E2MzAubWZ0MDgGCCsGAQUFBzANhixodHRwczov
L3Jwa2kuYXVndXN0LnR3L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQ
ME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBxBggrBgEFBQcBBwEB/wRiMGAwXgQCAAIwWAMHACABBnwKgAMH
ACABBnwKhAMHACABBnwKiAMHACABBnwKjAMHACABBnwKkAMHACABBnwKlAMHACAB
BnwKmAMHACABBnwKnAMHACABBnwKoAMFAyoS3UAwJAYIKwYBBQUHAQgBAf8EFTAT
oBEwDwIDALlZAgMAw4oCAwMX8DANBgkqhkiG9w0BAQsFAAOCAQEAGnroftbmpmw3
/iT1nULDUTX/VAD1fNsN+2mnTna7M/TkHy19vmftW0amSV3o0xeaK1h7VnO+ZuMC
x1BJtnrw1KRMz72D8gmsfxJY1Wu53fsQPvCDx1+SMFDLP1rEMK6W4te7yNdI4OS9
8i0qDacM0B9W6uLuGDEsAZ7sumsOKQkVqpNkWMybRzNb+7RrzqGDpYYdo6PdsbAZ
YQ5so+Cb/hlKN0S6dYOdrYWQw6vGCk2uEAe4NCBGaHi4BkmsPzPyEahHgQUV4Oyu
nv8rpYPh7C/7Q4+CCOB3Ht15PQzF2wmx2FrKFUmhW46GYaLl3fF6L70KlzCRY678
iK774lcrPA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:06 2024 by rpki-client on console-fra.rpki-client.org