Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rJx0wfufmeYR-wOCeEtk1sxpq0I.cer
File:                     rJx0wfufmeYR-wOCeEtk1sxpq0I.cer (raw, json)
Hash identifier:          h3Xzr5Rh/dcUDwmavQUrMxisMonRMc3fPSNjle/2erg=
Subject key identifier:   AC:9C:74:C1:FB:9F:99:E6:11:FB:03:82:78:4B:64:D6:CC:69:AB:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A9414C10F7388F858CD9B56A78B83BBD1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://0.sb/repo/sb/9/AC9C74C1FB9F99E611FB0382784B64D6CC69AB42.mft
caRepository:             rsync://0.sb/repo/sb/9/
Notify URL:               https://0.sb/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 14:25:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.3.15.0/24

Validation:               Failed, certificate revoked on Thu 14 Dec 2023 10:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:94:14:c1:0f:73:88:f8:58:cd:9b:56:a7:8b:83:bb:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 14 14:25:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac9c74c1fb9f99e611fb0382784b64d6cc69ab42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:cc:d8:e7:2a:46:37:42:ed:6d:ff:ef:55:
                    11:d4:3d:01:70:8c:a6:f7:b7:3b:d9:d4:45:98:d3:
                    7c:4a:54:f4:bc:4d:a9:46:e6:fd:3a:08:75:34:a1:
                    59:60:5d:7f:51:5a:24:eb:6c:5e:ed:d3:43:1c:8b:
                    8e:2a:98:22:8a:3c:eb:d8:49:00:b7:6a:62:d1:a9:
                    7b:04:d7:53:2e:0d:f9:35:0f:e9:f3:6b:53:f9:de:
                    98:b6:24:eb:1f:08:4b:e5:ff:52:56:bb:c9:0d:06:
                    11:0e:b8:95:b4:fe:40:34:91:3b:0d:85:96:f2:e0:
                    ef:11:0c:24:49:c4:cf:28:a4:3f:ce:5c:92:8c:f2:
                    2b:35:d1:ae:f1:12:98:1e:56:6f:f4:19:7e:ce:d2:
                    d9:a2:d7:d8:d0:9a:9e:c2:67:06:24:5f:cc:b1:ad:
                    8b:4e:7e:14:50:20:6d:0f:1d:7f:2f:18:86:99:ba:
                    76:7e:c4:50:fd:44:f6:ac:5f:54:e7:ad:f4:57:cf:
                    4e:f3:26:ad:fa:b7:1e:81:39:75:ac:a2:a8:52:65:
                    f4:a2:df:df:5d:9c:56:5b:b0:70:84:c4:bd:58:35:
                    11:f9:3d:6a:9b:62:1a:6d:5e:06:7b:d1:e5:68:3c:
                    3a:d2:e0:15:ce:2e:41:9f:38:48:a6:6e:43:1c:78:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9C:74:C1:FB:9F:99:E6:11:FB:03:82:78:4B:64:D6:CC:69:AB:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://0.sb/repo/sb/9/
                RPKI Manifest - URI:rsync://0.sb/repo/sb/9/AC9C74C1FB9F99E611FB0382784B64D6CC69AB42.mft
                RPKI Notify - URI:https://0.sb/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:58:5b:84:54:13:e7:89:29:93:89:75:78:5f:67:e3:41:3b:
         ef:18:d6:81:34:d5:a7:29:36:83:fc:17:68:b5:0b:b9:71:4c:
         d1:f8:83:70:de:df:7f:07:cd:d8:72:20:9a:cb:ea:e5:74:9b:
         96:7f:98:5d:d9:82:1b:e5:f2:1e:5d:dc:78:20:f9:22:40:8f:
         6f:27:93:06:94:be:17:a0:df:7e:c7:30:b2:a6:c9:95:5f:05:
         16:e2:07:04:49:c7:0d:c4:27:1b:b9:e5:82:ad:08:c0:f1:58:
         c5:2f:8b:e4:f1:52:40:b2:58:e0:ce:9f:61:c1:d9:34:ec:29:
         16:cd:dd:ff:01:9a:0e:01:f1:05:22:05:83:ae:5e:5b:e8:fe:
         fc:b4:17:2c:d4:3e:2d:28:81:4c:69:2b:e6:30:d8:a8:22:6d:
         f7:fd:f9:3d:f7:ec:47:48:0a:34:d1:f6:ca:0c:9f:43:ab:61:
         ac:76:a2:c3:fa:be:91:80:0d:c3:f1:21:01:02:5c:fb:0d:a6:
         f2:e0:e3:0d:96:2e:29:e8:7d:4d:37:16:e3:24:d5:54:6f:63:
         ac:f9:51:fd:d9:bc:5d:f0:b9:8a:d5:11:92:9a:05:16:fc:2b:
         72:63:f9:75:f4:32:0f:8a:c2:72:2f:93:15:88:9a:57:1d:34:
         b4:d4:31:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:36 2024 by rpki-client on console-ams.rpki-client.org