Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pPCloPFpOpdC1_qvT4_RfoHMKrY.cer
File:                     pPCloPFpOpdC1_qvT4_RfoHMKrY.cer (raw, json)
Hash identifier:          FGbsU30kMp22yXRODATxeE3Zzk1/7gfbBeW+f2OTmHE=
Subject key identifier:   A4:F0:A5:A0:F1:69:3A:97:42:D7:FA:AF:4F:8F:D1:7E:81:CC:2A:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0F18B6FC2A26F1282FA4103106A88
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/pPCloPFpOpdC1_qvT4_RfoHMKrY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 39080
                          AS: 200315
                          IP: 2a0d:f40::/29

Validation:               Failed, certificate revoked on Tue 17 Jan 2023 10:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:f1:8b:6f:c2:a2:6f:12:82:fa:41:03:10:6a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a4f0a5a0f1693a9742d7faaf4f8fd17e81cc2ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:f5:3b:32:29:b2:b4:5e:a5:68:52:df:67:
                    8a:16:3f:92:a3:06:8c:c1:9d:47:99:5d:ec:45:df:
                    65:e4:21:8c:ff:63:e0:f6:d8:c7:c3:74:af:eb:92:
                    d0:c2:33:86:d4:28:95:9c:93:85:8c:9b:32:a4:fb:
                    ae:67:4a:8e:8b:fd:f9:11:04:7b:fb:c0:71:90:ac:
                    2f:8d:ac:59:b8:8f:5d:d5:f2:06:71:d5:00:6c:0a:
                    59:22:8b:f0:d0:be:c1:94:c5:ce:fd:47:8e:cf:51:
                    69:58:1e:6d:89:b8:a6:3a:60:c2:cd:f2:ac:a5:9d:
                    7d:d9:78:da:f9:a8:8f:c2:6d:eb:85:94:fb:bd:09:
                    0c:14:b4:c8:3c:50:0d:e0:fe:c8:4c:02:aa:65:3f:
                    75:7c:e0:c6:25:88:da:62:0e:b6:7e:02:14:5b:f2:
                    8c:52:17:2e:ec:21:51:3b:82:99:c4:17:6a:0f:19:
                    1a:1d:c0:f3:66:95:1f:bd:53:d7:94:df:0d:84:29:
                    49:ee:20:e6:dd:67:b4:6d:77:c1:7a:9e:5e:56:0e:
                    9c:ec:45:da:81:f1:11:57:a2:eb:fb:80:ba:7a:03:
                    b7:d6:2d:e5:15:b3:34:42:25:51:4b:b7:d7:c0:46:
                    58:92:11:5d:b4:bf:bf:cd:03:88:86:db:27:ce:5b:
                    ba:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F0:A5:A0:F1:69:3A:97:42:D7:FA:AF:4F:8F:D1:7E:81:CC:2A:B6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/pPCloPFpOpdC1_qvT4_RfoHMKrY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:f40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39080
                  200315

    Signature Algorithm: sha256WithRSAEncryption
         79:c6:a9:02:20:c2:df:3b:94:fd:c1:bd:14:54:e0:bf:a1:d1:
         79:ba:29:12:ff:e1:d8:99:5f:91:7d:a1:e2:4c:9c:f2:d1:73:
         03:16:a9:27:fd:a5:23:cf:2c:45:c8:5b:45:13:7c:73:30:46:
         95:fa:c8:35:e7:65:eb:3c:b6:07:6d:35:54:46:ec:b3:d8:5c:
         56:75:6f:b1:d1:40:dc:57:cb:80:5d:8f:f3:e3:92:78:9b:82:
         4f:20:ec:c0:b5:32:1d:ef:b8:bf:09:bc:dc:29:8b:2d:79:d7:
         0a:11:02:02:be:74:0f:59:58:ac:0a:f0:7f:6d:41:55:8f:0e:
         29:63:fd:cc:8f:ca:ed:e6:dc:25:85:57:a4:8a:97:bb:0e:67:
         2e:d0:75:67:bd:d7:d4:56:4f:3d:42:ae:0b:73:37:b4:1d:67:
         f0:4f:e8:3e:14:9f:cd:70:68:cf:ed:0f:c8:cc:95:d2:ef:4e:
         1d:9f:72:0f:41:d8:97:2d:56:1d:97:b5:0b:56:a7:b0:78:42:
         29:fc:f2:e9:51:1f:2c:8e:65:35:40:7c:de:4c:e7:13:ac:71:
         b1:d3:ae:93:36:c5:2b:27:a7:77:00:89:fe:2d:49:7b:48:3f:
         b7:7c:38:fe:b0:5e:26:16:0e:81:7f:5e:11:da:4c:72:b8:90:
         67:d5:d0:33
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYVr0PGLb8KibxKC+kEDEGqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGYwYTVhMGYxNjkzYTk3NDJkN2ZhYWY0ZjhmZDE3ZTgxY2MyYWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNH1OzIpsrRepWhS32eKFj+SowaM
wZ1HmV3sRd9l5CGM/2Pg9tjHw3Sv65LQwjOG1CiVnJOFjJsypPuuZ0qOi/35EQR7
+8BxkKwvjaxZuI9d1fIGcdUAbApZIovw0L7BlMXO/UeOz1FpWB5tibimOmDCzfKs
pZ192Xja+aiPwm3rhZT7vQkMFLTIPFAN4P7ITAKqZT91fODGJYjaYg62fgIUW/KM
Uhcu7CFRO4KZxBdqDxkaHcDzZpUfvVPXlN8NhClJ7iDm3We0bXfBep5eVg6c7EXa
gfERV6Lr+4C6egO31i3lFbM0QiVRS7fXwEZYkhFdtL+/zQOIhtsnzlu6aQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFKTwpaDxaTqXQtf6r0+P0X6BzCq2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlL2YyODky
Mi1mYzdmLTRmYzYtOTJhOS04NzFjM2U5YjFjNGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvZjI4OTIy
LWZjN2YtNGZjNi05MmE5LTg3MWMzZTliMWM0Yy8xL3BQQ2xvUEZwT3BkQzFfcXZU
NF9SZm9ITUtyWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKg0PQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMAmKgCAwMOezANBgkqhkiG9w0BAQsFAAOCAQEAecapAiDC3zuU/cG9FFTgv6HR
ebopEv/h2JlfkX2h4kyc8tFzAxapJ/2lI88sRchbRRN8czBGlfrINedl6zy2B201
VEbss9hcVnVvsdFA3FfLgF2P8+OSeJuCTyDswLUyHe+4vwm83CmLLXnXChECAr50
D1lYrArwf21BVY8OKWP9zI/K7ebcJYVXpIqXuw5nLtB1Z73X1FZPPUKuC3M3tB1n
8E/oPhSfzXBoz+0PyMyV0u9OHZ9yD0HYly1WHZe1C1ansHhCKfzy6VEfLI5lNUB8
3kznE6xxsdOukzbFKyendwCJ/i1Je0g/t3w4/rBeJhYOgX9eEdpMcriQZ9XQMw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:45 2024 by rpki-client on console-fra.rpki-client.org