Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m_6glBpQFRyAvZOnFljLb5E129U.cer
File:                     m_6glBpQFRyAvZOnFljLb5E129U.cer (raw, json)
Hash identifier:          pIKdU89kqYXOfWaLBRzggbd/Xn+S3Wx3pofbNT4zaE8=
Subject key identifier:   9B:FE:A0:94:1A:50:15:1C:80:BD:93:A7:16:58:CB:6F:91:35:DB:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1B821DC72FA599613A1CB1F1776EC2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/m_6glBpQFRyAvZOnFljLb5E129U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:33:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 203014
                          IP: 2a07:5900::/29

Validation:               Failed, certificate revoked on Mon 09 Oct 2023 14:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1b:82:1d:c7:2f:a5:99:61:3a:1c:b1:f1:77:6e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:33:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9bfea0941a50151c80bd93a71658cb6f9135dbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c7:5f:b5:16:1c:f2:52:9d:7e:d2:2e:49:fc:
                    cf:69:5b:fe:04:15:22:db:77:77:33:da:64:ed:f0:
                    77:37:24:5e:dc:69:cb:83:1d:ef:eb:c5:68:c7:be:
                    29:a9:0c:b6:61:bc:25:44:45:db:89:6a:12:40:dc:
                    9f:fb:fe:d8:bd:b2:84:ed:07:26:65:32:65:7d:75:
                    22:db:53:4b:8a:6c:c8:6e:a3:5b:77:56:6e:1a:f4:
                    34:ce:7e:5e:1e:e1:9a:03:98:ac:d2:88:54:bb:9d:
                    de:b6:42:6f:9e:b9:b1:d6:f5:f9:83:ee:71:3b:31:
                    ea:00:43:3f:ef:e9:eb:5b:64:4b:4d:bb:5d:ca:ac:
                    35:9f:6f:08:bc:c8:f6:e8:51:45:69:9b:55:19:14:
                    5e:93:fd:74:b1:f3:85:33:24:df:83:5c:64:e0:a9:
                    70:1d:e4:c5:08:9d:5d:61:51:28:cb:d6:bf:8f:62:
                    3e:b9:17:2d:99:d8:58:dc:dd:04:be:9a:9c:f8:91:
                    f1:ba:81:a8:20:7e:5f:ca:5d:67:79:7b:7c:a2:1a:
                    b5:20:c4:0d:e0:6c:ef:3f:bf:1f:72:70:c7:f0:fb:
                    a0:d7:5b:5c:8d:d0:8c:7d:65:d0:41:a5:cd:19:ed:
                    f4:ee:34:ea:6b:02:9d:f3:00:56:8a:cb:7e:30:0e:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FE:A0:94:1A:50:15:1C:80:BD:93:A7:16:58:CB:6F:91:35:DB:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/m_6glBpQFRyAvZOnFljLb5E129U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:5900::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203014

    Signature Algorithm: sha256WithRSAEncryption
         91:18:80:eb:70:5a:07:07:80:35:35:6e:d5:58:ff:6a:80:70:
         21:be:82:ca:1e:8d:c0:01:b2:80:c4:31:b0:f1:97:f7:8c:c9:
         45:40:63:2d:ff:96:0c:38:48:50:27:51:18:58:57:41:7c:97:
         93:c6:e9:89:de:b4:83:ea:a0:93:ec:18:da:59:b6:f5:a4:53:
         80:cf:5f:f6:dc:7c:48:97:e8:d0:89:18:a4:38:84:f6:94:f1:
         f4:07:e1:28:75:15:21:71:71:aa:3c:91:69:74:98:b1:ba:ee:
         30:83:4b:54:54:69:dc:0c:f1:3e:5c:fb:4a:aa:56:5a:75:7a:
         c6:b7:24:d6:34:13:20:aa:19:df:e3:78:d1:f3:6e:a8:a2:4a:
         53:89:76:95:19:04:69:55:ba:b0:af:23:b8:77:fb:85:f9:8d:
         04:d0:f8:e6:9e:0b:7f:35:d3:44:70:67:0a:2d:40:c2:47:5f:
         45:9f:8c:12:91:61:0a:1a:80:45:8b:13:8d:d6:6e:a6:4e:f6:
         c2:3e:7c:1e:14:bf:49:d1:1a:c3:91:eb:3d:90:c1:52:1a:86:
         85:7b:f8:db:b8:77:fd:0c:a0:f2:e9:fb:d7:5c:82:cf:16:4f:
         51:ae:7f:3f:64:86:48:a7:3c:ac:dd:45:63:8d:17:1b:b0:9e:
         0d:16:c5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:17 2024 by rpki-client on console-fra.rpki-client.org