Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mlaEqibBq7oYwZHG6tbWnSkq-Yc.cer
File:                     mlaEqibBq7oYwZHG6tbWnSkq-Yc.cer (raw, json)
Hash identifier:          6mpHrWAOA9TBs/Yd+Y4btzd/Qy+pbBRe7y6PzsX9LeA=
Subject key identifier:   9A:56:84:AA:26:C1:AB:BA:18:C1:91:C6:EA:D6:D6:9D:29:2A:F9:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0189CFF10893E905FB4E2C8CB28B32372869
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/mlaEqibBq7oYwZHG6tbWnSkq-Yc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 12:20:27 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 15497
                          IP: 2a03:6300::/29

Validation:               Failed, certificate revoked on Tue 19 Dec 2023 10:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:cf:f1:08:93:e9:05:fb:4e:2c:8c:b2:8b:32:37:28:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug  7 12:20:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a5684aa26c1abba18c191c6ead6d69d292af987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:c2:ff:7c:f4:1f:10:da:bd:d0:ce:d0:b0:
                    8a:05:f7:8b:6e:e2:85:85:e5:ab:7f:b8:4f:5c:5a:
                    45:35:34:85:45:23:7c:fb:ee:95:4b:87:69:e8:f0:
                    1d:59:7a:dd:18:1e:44:db:3f:e0:91:08:be:4a:2d:
                    b3:03:12:60:2c:66:4b:24:3b:43:d4:3a:89:7d:19:
                    3c:c8:f2:83:17:e1:82:5d:06:8e:a1:3f:79:03:b8:
                    15:a4:b3:66:ab:e5:54:4d:e4:f1:43:62:c2:09:f6:
                    f2:4b:f2:a0:42:e8:db:99:cb:03:6b:1d:18:7f:90:
                    43:5b:26:19:ba:e4:32:c1:d8:e2:ea:ee:98:70:5d:
                    9a:e6:24:21:3d:96:e6:05:f7:46:eb:44:6f:1a:63:
                    c1:14:1f:7a:42:e1:79:e6:1c:33:d9:a8:9b:d5:3e:
                    94:3e:75:a0:3e:54:6f:fb:d9:1b:78:71:84:8b:6e:
                    9f:fb:e4:ff:27:60:0a:51:ee:7c:1a:8d:79:3c:16:
                    8c:40:0b:20:cb:74:c5:51:e2:d9:6b:d3:26:36:8b:
                    1c:77:88:1e:05:c4:be:e7:63:4b:2f:1a:5e:e5:9e:
                    41:a1:f0:ca:10:9b:a1:50:74:84:74:36:27:41:79:
                    c1:11:47:68:e9:2d:3c:d1:d4:a6:9b:ed:e9:62:40:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:56:84:AA:26:C1:AB:BA:18:C1:91:C6:EA:D6:D6:9D:29:2A:F9:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/mlaEqibBq7oYwZHG6tbWnSkq-Yc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:6300::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15497

    Signature Algorithm: sha256WithRSAEncryption
         5b:6e:2c:2c:c5:35:02:1a:46:f3:de:74:2d:ad:5b:a4:d1:1e:
         f3:95:92:89:85:c3:5e:31:26:de:44:4c:7c:40:e4:f9:f1:af:
         da:a4:92:25:24:41:36:59:9a:17:7d:06:4a:fe:15:9a:b5:c1:
         6b:94:7e:8c:49:d1:2f:80:14:71:55:02:24:44:8d:e8:38:08:
         84:21:95:3d:15:36:27:61:43:e5:80:04:ef:e9:44:8d:29:72:
         fb:fb:3d:a7:44:af:3e:8d:32:75:85:bf:60:b4:33:91:59:03:
         df:9c:8e:1c:b5:d5:2e:88:77:5d:72:29:30:bc:b6:2e:d7:0c:
         e5:eb:24:ba:3f:9f:c5:7e:51:dd:13:d6:81:af:47:a9:87:75:
         1c:23:fa:4a:70:6c:40:7f:1a:65:d5:c2:5c:d5:7a:98:1d:e7:
         5f:a6:ce:c1:9e:4a:5e:8a:2a:e3:6f:03:9a:3d:3b:81:09:34:
         37:ce:f0:c3:b8:cc:35:c6:ed:dc:d9:e8:bb:d9:ba:fc:f1:8c:
         3b:5d:ff:df:97:f5:4d:93:6e:27:ac:dd:ce:ff:29:70:83:82:
         28:9f:dd:1c:ff:28:05:a5:2b:0b:35:28:0e:98:14:08:b0:f5:
         d8:cc:08:27:cc:1e:18:f3:99:74:fd:78:d4:51:aa:f9:f3:dc:
         09:7e:c5:67
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYnP8QiT6QX7TiyMsosyNyhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwODA3MTIyMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTU2ODRhYTI2YzFhYmJhMThjMTkxYzZlYWQ2ZDY5ZDI5MmFmOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBnC/3z0HxDavdDO0LCKBfeLbuKF
heWrf7hPXFpFNTSFRSN8++6VS4dp6PAdWXrdGB5E2z/gkQi+Si2zAxJgLGZLJDtD
1DqJfRk8yPKDF+GCXQaOoT95A7gVpLNmq+VUTeTxQ2LCCfbyS/KgQujbmcsDax0Y
f5BDWyYZuuQywdji6u6YcF2a5iQhPZbmBfdG60RvGmPBFB96QuF55hwz2aib1T6U
PnWgPlRv+9kbeHGEi26f++T/J2AKUe58Go15PBaMQAsgy3TFUeLZa9MmNoscd4ge
BcS+52NLLxpe5Z5BofDKEJuhUHSEdDYnQXnBEUdo6S080dSmm+3pYkAfTQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFJpWhKomwau6GMGRxurW1p0pKvmHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2YyODU5
OC02NzU0LTQ1YzMtYjQxMS04MTJkNGQ4NTAxZGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvZjI4NTk4
LTY3NTQtNDVjMy1iNDExLTgxMmQ0ZDg1MDFkZi8xL21sYUVxaWJCcTdvWXdaSEc2
dGJXblNrcS1ZYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgNjADAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgI8iTANBgkqhkiG9w0BAQsFAAOCAQEAW24sLMU1AhpG8950La1bpNEe85WSiYXD
XjEm3kRMfEDk+fGv2qSSJSRBNlmaF30GSv4VmrXBa5R+jEnRL4AUcVUCJESN6DgI
hCGVPRU2J2FD5YAE7+lEjSly+/s9p0SvPo0ydYW/YLQzkVkD35yOHLXVLoh3XXIp
MLy2LtcM5eskuj+fxX5R3RPWga9HqYd1HCP6SnBsQH8aZdXCXNV6mB3nX6bOwZ5K
Xooq428Dmj07gQk0N87ww7jMNcbt3Nnou9m6/PGMO13/35f1TZNuJ6zdzv8pcIOC
KJ/dHP8oBaUrCzUoDpgUCLD12MwIJ8weGPOZdP141FGq+fPcCX7FZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:22 2024 by rpki-client on console-ams.rpki-client.org