Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pXYJTAPg28-_oRv3FIqxagBnPvk.cer
File:                     pXYJTAPg28-_oRv3FIqxagBnPvk.cer (raw, json)
Hash identifier:          LzPwK6R44Tvr++tb35NqqFf6yH6prU2MbpWyhRdk6jE=
Subject key identifier:   A5:76:09:4C:03:E0:DB:CF:BF:A1:1B:F7:14:8A:B1:6A:00:67:3E:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185965FB5BF07DF631723767D5C730ED891
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/pXYJTAPg28-_oRv3FIqxagBnPvk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 09 Jan 2023 11:52:12 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 57567
                          IP: 185.86.44.0/22

Validation:               Failed, certificate revoked on Wed 25 Jan 2023 07:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:96:5f:b5:bf:07:df:63:17:23:76:7d:5c:73:0e:d8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  9 11:52:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a576094c03e0dbcfbfa11bf7148ab16a00673ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:c5:e3:9b:6d:e3:ca:7c:e8:e1:88:e1:d2:
                    4b:20:76:36:5d:62:57:05:d1:ea:3b:af:3c:ea:87:
                    fb:4f:da:91:37:91:ee:1d:61:01:24:05:89:63:24:
                    0f:1e:4c:8c:2a:f6:8e:38:9b:9e:36:da:d2:6d:8b:
                    3e:a2:10:8a:30:ca:fc:5f:32:4f:ff:00:a0:4f:45:
                    c9:b6:c7:3b:26:41:fa:48:24:af:1a:fa:15:e9:fe:
                    a2:95:88:b7:d8:a9:8a:27:48:15:70:d1:11:34:00:
                    6c:c5:0f:cd:b3:55:7e:9d:6a:4b:b2:82:4a:db:0d:
                    c3:a1:72:c3:1a:58:e4:0f:bf:7f:c2:8d:2a:37:d5:
                    42:39:20:b9:72:3a:4c:30:8d:97:f7:23:6c:e8:b8:
                    4b:79:e7:21:c1:46:2f:c2:45:d8:09:89:f9:50:a6:
                    4b:b4:6e:41:47:74:c4:4f:18:86:24:64:68:9a:ef:
                    6b:ce:93:21:5c:28:99:d2:ce:b3:66:df:c8:d3:b4:
                    65:03:ca:94:66:1e:c0:9e:85:41:40:7e:63:d6:94:
                    3f:a1:8f:2c:54:3a:ec:27:bb:a3:5d:dd:6d:28:1d:
                    85:ea:3e:e6:d4:f7:90:a3:2b:de:a7:cf:55:c8:15:
                    b0:ee:1b:b6:87:79:e3:d9:6e:93:d1:ec:68:ba:fd:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:76:09:4C:03:E0:DB:CF:BF:A1:1B:F7:14:8A:B1:6A:00:67:3E:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/pXYJTAPg28-_oRv3FIqxagBnPvk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.86.44.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57567

    Signature Algorithm: sha256WithRSAEncryption
         1a:4e:a2:5c:4f:d4:ba:c5:d6:41:8c:67:15:7a:cc:02:2c:9d:
         ef:f9:c4:ab:c2:82:1d:88:a3:78:20:ea:ba:04:0d:f8:12:51:
         b5:30:89:84:29:b5:53:b7:d8:1b:9e:13:b7:38:24:32:bf:4e:
         de:4b:ce:05:87:f7:b8:a3:48:30:c5:b5:26:65:7f:64:36:66:
         93:0d:36:37:12:46:4a:64:f1:32:d2:46:d4:f6:a3:ed:08:4f:
         28:7a:10:49:f2:38:3b:35:8a:70:8e:fc:7e:bc:f8:dc:6d:f3:
         8c:36:14:eb:d3:59:62:98:a9:50:02:b0:d4:ba:d7:b2:40:bd:
         28:2f:d0:2f:37:b4:4c:a3:7a:26:b6:9a:ac:ff:18:3a:07:3b:
         9f:8a:27:32:99:59:96:d3:db:24:8e:21:52:52:d3:93:d0:80:
         1d:f5:65:4f:3e:a1:52:5e:ff:a0:e5:7a:d8:05:74:79:40:ba:
         eb:5b:71:70:13:a3:86:56:38:e5:9b:f3:be:d4:23:b5:f1:75:
         c9:20:1f:ad:66:c2:16:bf:be:1c:b6:b1:70:ae:02:0a:10:37:
         f6:ec:09:b3:f8:49:4e:0b:80:93:8f:6c:03:16:1b:9c:7d:dc:
         85:c5:df:3a:b0:bc:8f:04:82:65:b5:4a:c3:b9:11:36:24:5d:
         1c:df:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:01 2024 by rpki-client on console-ams.rpki-client.org