Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rb7r8DqT8o_emHgiwEqQTn42eVk.cer
File:                     rb7r8DqT8o_emHgiwEqQTn42eVk.cer (raw, json)
Hash identifier:          ltddS3G+iY8Tqaq6JyTkAqtKsMtSiKIwEs1xrju8DN8=
Subject key identifier:   AD:BE:EB:F0:3A:93:F2:8F:DE:98:78:22:C0:4A:90:4E:7E:36:79:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC34902006E87488EA278F5E620E35098
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/rb7r8DqT8o_emHgiwEqQTn42eVk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:50 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 209581
                          IP: 83.136.176.0/22
                          IP: 83.229.33.0/24
                          IP: 83.229.38.0/24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 09:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:02:00:6e:87:48:8e:a2:78:f5:e6:20:e3:50:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=adbeebf03a93f28fde987822c04a904e7e367959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:19:a3:78:a0:c5:d8:0f:9d:ee:6b:66:67:
                    a1:f6:fb:3f:87:6c:fa:e1:2b:55:6e:9c:81:af:4f:
                    ff:ad:fd:dd:51:32:69:53:1e:ff:9d:f8:ea:4b:5e:
                    5c:3e:a6:6d:01:db:2d:2d:7b:82:24:8b:ee:d6:69:
                    d1:87:99:c6:03:f4:4e:68:12:e6:9d:82:ee:68:dd:
                    00:9d:16:d3:c9:04:cf:94:db:f3:65:b9:d8:2c:d7:
                    1a:15:be:ff:e3:77:30:36:28:27:60:29:96:4d:bb:
                    60:39:9b:20:06:d2:3d:d7:13:89:98:3c:04:98:11:
                    ef:27:de:07:45:8f:9c:69:4a:f5:f9:b1:98:cc:64:
                    2f:89:90:a0:0a:29:4a:a6:4a:fc:93:c6:23:55:fd:
                    ba:af:58:6d:9e:15:c7:5f:fa:33:df:86:0c:00:80:
                    05:6e:3f:bf:99:5c:6c:27:88:19:8d:40:b2:4c:9e:
                    2a:1a:4a:71:c0:f7:a5:f0:80:6a:47:b6:6f:7e:7d:
                    dc:ff:6b:ca:51:40:fe:ea:1b:95:ba:34:2e:af:61:
                    06:bf:be:55:1a:c4:61:93:e1:01:50:32:c3:51:09:
                    80:41:70:94:43:e1:bb:4b:e7:9f:e3:ac:ab:39:cd:
                    79:c4:0e:e2:e1:c7:3e:fb:74:2a:7b:41:3e:65:0f:
                    f9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BE:EB:F0:3A:93:F2:8F:DE:98:78:22:C0:4A:90:4E:7E:36:79:59
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/rb7r8DqT8o_emHgiwEqQTn42eVk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.176.0/22
                  83.229.33.0/24
                  83.229.38.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209581

    Signature Algorithm: sha256WithRSAEncryption
         ad:f2:4f:2c:ba:04:19:9a:65:35:1e:15:8e:51:15:0c:bd:b6:
         ec:8a:eb:ba:a4:a7:e1:00:74:68:21:21:d0:07:bf:c1:e6:62:
         3c:f5:1c:e8:cf:77:c2:0d:c2:42:e9:53:a6:cd:9f:d0:e2:53:
         21:ec:56:af:c7:a5:30:d8:a2:70:d1:24:3a:cb:93:6a:53:ec:
         12:00:ee:44:f4:a1:90:3d:54:e4:f8:1e:d2:cc:7e:c1:a1:04:
         06:06:b1:e7:41:50:c7:d6:40:93:74:b5:74:bd:95:29:ec:68:
         50:1e:ac:ca:54:05:0e:a2:87:31:89:e4:69:f4:93:7d:90:49:
         20:7e:bc:f8:90:1c:d2:28:74:61:bc:03:d7:ea:dc:f3:ca:b4:
         d7:ab:24:e6:39:14:da:c2:a7:de:0d:3b:14:05:d3:d7:6c:ce:
         90:61:46:2d:f7:12:36:db:87:17:de:69:fb:c8:42:71:b0:e6:
         aa:45:46:d2:7d:ff:37:ab:99:b6:40:32:e8:92:02:30:79:3b:
         30:4a:48:69:5f:b1:b0:a3:82:48:1f:ca:cc:39:78:f0:fe:e0:
         98:a2:4f:41:76:b6:71:8d:78:b7:b4:8c:3d:08:2d:e7:01:11:
         03:ba:12:e7:ef:de:40:c9:64:0f:f7:e7:a8:87:d0:6a:fb:08:
         2d:08:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:40 2024 by rpki-client on console-ams.rpki-client.org