Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-1LLVdIwXqSBvIvr_tr6X6Fcjw.cer
File:                     n-1LLVdIwXqSBvIvr_tr6X6Fcjw.cer (raw, json)
Hash identifier:          fu7jj/RPEnoibmA/x7xoxLX+bm24mv646LkhIRm6hLE=
Subject key identifier:   9F:ED:4B:2D:57:48:C1:7A:92:06:F2:2F:AF:FB:6B:E9:7E:85:72:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018572454BDEA77356CF92349148FF9940FD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/021936-1d47-488c-888d-c74339ff2820/1/n-1LLVdIwXqSBvIvr_tr6X6Fcjw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/021936-1d47-488c-888d-c74339ff2820/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.104.225.0/24
                          IP: 2a11:63c0::/29

Validation:               Failed, certificate revoked on Thu 12 Oct 2023 04:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:45:4b:de:a7:73:56:cf:92:34:91:48:ff:99:40:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9fed4b2d5748c17a9206f22faffb6be97e85723c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:82:49:a9:85:41:84:bd:1a:d8:35:0c:5a:
                    b9:53:02:0b:28:32:02:1d:48:e5:65:24:0d:6e:e3:
                    4d:af:15:02:7d:de:8a:a0:9f:fa:89:df:5f:2e:a6:
                    3d:07:d6:e3:6f:d8:12:fb:57:31:40:b3:ea:3f:15:
                    9b:43:df:26:41:fd:55:08:68:a8:fe:40:14:00:1a:
                    74:e2:16:df:6e:68:4a:c4:be:a1:6e:4c:06:d8:f1:
                    2f:cb:cf:be:53:e8:23:55:3f:57:34:c4:a3:37:59:
                    85:86:68:6f:5a:a0:8a:fc:72:67:c9:de:73:5c:ca:
                    e2:89:b4:30:b0:c2:a9:99:b1:11:ca:31:c0:ba:ab:
                    ef:43:00:e2:d1:12:a8:ec:4c:61:3f:f4:9a:ba:c5:
                    27:7b:e3:6a:e8:f6:bf:16:ee:bc:03:32:bc:e5:16:
                    63:36:c6:68:7f:a0:46:be:4c:4a:ab:bd:4c:e3:50:
                    77:61:71:1b:de:98:14:0f:cb:66:8a:8f:91:16:df:
                    fa:95:d8:00:56:2d:f3:e7:af:e9:27:72:91:6f:85:
                    45:69:02:0d:48:0d:8d:53:fd:70:82:b4:b3:97:4e:
                    d1:c0:e2:cf:6f:ab:20:fe:cb:4d:f9:bf:67:5a:7c:
                    06:2a:5d:d5:81:e8:28:f6:0d:e0:7c:c9:b6:10:00:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:ED:4B:2D:57:48:C1:7A:92:06:F2:2F:AF:FB:6B:E9:7E:85:72:3C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/021936-1d47-488c-888d-c74339ff2820/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/021936-1d47-488c-888d-c74339ff2820/1/n-1LLVdIwXqSBvIvr_tr6X6Fcjw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.225.0/24
                IPv6:
                  2a11:63c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0a:a9:c0:bc:b9:14:f2:02:f0:c4:b7:00:d2:8f:7c:df:88:5e:
         f7:ec:45:29:22:6b:cb:99:6e:5e:f1:13:d1:2d:3e:28:37:16:
         4d:be:7e:ea:6d:bd:f3:f2:06:67:9b:80:2d:ff:b0:2e:10:52:
         5b:45:0d:99:f3:ee:dd:63:50:97:38:1a:3a:a3:93:c4:f5:3e:
         35:dd:df:80:94:42:ec:c9:fc:c9:00:19:ef:f2:bc:e1:b4:d3:
         2b:7d:2f:76:9f:65:5f:90:22:26:e3:62:f0:0a:07:0e:15:10:
         f8:e8:67:b7:fc:f5:32:83:a2:96:d6:9f:cd:5c:ad:68:44:58:
         55:85:10:53:3d:22:18:71:45:e5:dd:c6:90:a9:12:02:46:09:
         44:12:9a:a5:85:b4:bf:99:01:a9:12:52:72:54:77:bd:e5:a8:
         30:8e:d6:a8:06:8b:5c:07:cc:d0:ae:fa:cc:6b:d2:6d:6e:0a:
         17:65:98:0f:6d:8e:54:90:ff:29:ed:a0:93:4c:97:f0:b3:7f:
         1f:af:56:8e:22:90:b8:73:87:b9:72:46:5e:ce:67:3c:78:4c:
         b2:d4:0b:dc:e8:c7:f5:c7:22:a1:0b:38:f4:b3:79:d5:71:8e:
         a0:2e:9f:83:ae:48:b8:c6:1b:7a:47:27:34:f0:c7:b3:d8:26:
         7f:cf:93:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:26 2024 by rpki-client on console-ams.rpki-client.org