Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mapHxZ1qVFUYCFrAznnDAtswUuI.cer
File:                     mapHxZ1qVFUYCFrAznnDAtswUuI.cer (raw, json)
Hash identifier:          M1FVNtsi/tvMsbkaYe9UV+3/YKONhwZtKPzboxtYwQQ=
Subject key identifier:   99:AA:47:C5:9D:6A:54:55:18:08:5A:C0:CE:79:C3:02:DB:30:52:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F53D68705C6E3C4695C5E8BB38C44
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:47 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.176.80.0/22

Validation:               Failed, certificate revoked on Wed 22 Mar 2023 10:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:53:d6:87:05:c6:e3:c4:69:5c:5e:8b:b3:8c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=99aa47c59d6a545518085ac0ce79c302db3052e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:49:9c:4e:db:13:f3:79:18:86:66:0b:b4:
                    45:40:94:33:7e:8e:c6:60:c4:b2:61:85:f0:3c:08:
                    71:84:40:10:99:9b:64:af:9f:53:20:36:ea:ff:07:
                    38:43:29:a5:b7:16:68:66:54:fb:cf:e4:a8:d4:39:
                    bc:f9:71:57:c4:7b:37:3b:84:48:ef:6e:74:44:4f:
                    6c:56:07:06:38:db:23:9b:a5:dc:25:12:07:79:31:
                    de:03:da:0f:74:30:53:57:97:10:bf:53:25:d3:00:
                    92:9c:a7:d5:36:58:50:c0:79:87:4c:fc:16:c6:71:
                    3a:73:be:d6:c7:13:59:56:42:06:d8:fb:61:49:ff:
                    3e:ba:ad:c6:cb:84:27:eb:16:fd:bd:8d:b5:fd:6f:
                    dd:53:82:d1:45:eb:f2:e1:27:9a:c4:6a:fd:8b:19:
                    ef:66:77:12:e1:b5:35:1b:a5:9a:5c:19:de:6e:1d:
                    7e:cc:f6:6d:e9:74:40:4b:c3:59:b9:13:ad:76:8e:
                    58:b4:58:15:06:53:1f:8c:41:d8:bd:8e:33:00:2e:
                    c4:ed:e9:fd:ca:e4:60:b7:e1:88:28:f4:e6:d5:b2:
                    94:c8:4d:69:9c:5d:35:e2:65:57:fd:d9:21:43:23:
                    dd:a5:51:07:0f:35:fa:a0:a5:49:b8:7f:96:93:ff:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AA:47:C5:9D:6A:54:55:18:08:5A:C0:CE:79:C3:02:DB:30:52:E2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.176.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:2e:b9:30:cc:40:fe:b5:6f:13:5f:ab:a4:60:cd:da:f2:c6:
         3c:e7:02:cb:c8:75:bf:4b:63:59:ce:91:14:68:8b:2b:ee:af:
         c6:75:6b:de:9a:1b:49:20:86:92:e1:0a:e4:d6:a3:8d:66:6d:
         ae:ab:ad:4e:32:ac:58:5f:18:7f:b5:1e:3e:0e:aa:c4:71:ff:
         4a:0e:ee:e6:68:a8:80:b6:4b:94:04:ec:33:0b:24:4f:37:84:
         1f:b6:35:02:dc:7d:bf:29:bd:25:2c:23:33:5a:42:94:eb:d5:
         a9:91:aa:28:b7:a5:89:98:7f:19:b0:d1:91:f3:78:c8:d0:f0:
         33:a2:64:1e:75:e7:f2:ee:74:cf:14:5b:41:2a:cb:76:2e:c4:
         4a:d6:f6:ba:e3:a2:db:5c:c4:a2:51:ae:f1:d8:bb:26:56:60:
         dd:c5:bd:6d:c7:31:ca:19:cf:82:ff:8b:4d:23:bc:04:7e:03:
         7d:ef:63:96:51:43:21:98:e6:82:15:9e:1f:77:e1:05:50:36:
         76:0a:30:65:ed:a0:dd:24:2e:36:d4:0b:39:d8:69:06:e2:05:
         72:41:91:0b:b7:0e:08:1e:d6:e6:39:1b:4a:32:50:91:72:da:
         14:79:6a:11:9a:13:98:26:27:ca:a4:c8:9f:45:e3:24:73:52:
         71:85:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:18 2024 by rpki-client on console-fra.rpki-client.org