Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sGVk4GWqD-y7du6N8pBsBLgkQTU.cer
File:                     sGVk4GWqD-y7du6N8pBsBLgkQTU.cer (raw, json)
Hash identifier:          t7HM6e4yJU8QhwLNQp8+1QmtlWu/lI9+64LbOvaKnzo=
Subject key identifier:   B0:65:64:E0:65:AA:0F:EC:BB:76:EE:8D:F2:90:6C:04:B8:24:41:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56E02922A1FFDEA18E94FA7E588B9E2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/sGVk4GWqD-y7du6N8pBsBLgkQTU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:29:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.21.51.0/24

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 14:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:02:92:2a:1f:fd:ea:18:e9:4f:a7:e5:88:b9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:29:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b06564e065aa0fecbb76ee8df2906c04b8244135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:41:14:01:15:91:ff:dc:cd:68:1a:65:ed:
                    f4:fa:c4:78:33:2b:91:91:47:cf:25:4a:7f:e5:91:
                    8b:97:24:b0:bc:3d:7d:2c:ac:c3:ec:34:f8:81:cd:
                    c3:dc:8b:f8:13:96:d8:68:0a:fd:46:0d:15:08:c2:
                    a8:4f:87:d7:ef:a7:f4:cb:f8:b9:79:87:cf:50:94:
                    df:cc:46:a2:8a:60:bd:de:e7:20:4c:a0:1f:19:47:
                    75:16:0d:87:4d:f6:8b:e0:3a:a7:23:70:b7:57:59:
                    8c:92:2c:7f:a7:20:10:fc:7c:12:7c:9c:57:92:af:
                    ce:54:4a:3b:2e:2c:80:9e:04:ab:0d:48:60:17:21:
                    1a:03:3c:24:2e:48:80:4b:eb:73:a8:89:ba:a5:ee:
                    40:d0:ad:1b:0a:b1:e4:e6:3e:67:4d:78:ce:b2:c9:
                    9a:7f:5d:cb:96:8d:6b:a6:f1:88:65:c1:ee:af:43:
                    70:fc:e0:81:65:87:33:a4:50:64:b9:50:59:aa:33:
                    35:f4:e7:c8:8e:1e:8f:47:5d:00:40:b6:6a:ce:a8:
                    6f:44:16:c6:41:b9:10:59:2b:71:b7:8f:2d:a5:cf:
                    6c:62:aa:41:24:11:35:ab:dd:d0:12:ae:27:3d:d9:
                    97:11:37:88:17:18:a6:ac:ff:8d:62:30:1f:de:f9:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:65:64:E0:65:AA:0F:EC:BB:76:EE:8D:F2:90:6C:04:B8:24:41:35
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/sGVk4GWqD-y7du6N8pBsBLgkQTU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.21.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:f7:70:83:20:a0:63:1e:18:1b:1f:e9:5a:4d:e7:84:8a:
         db:02:d4:f5:5c:64:03:16:c4:f7:f5:fe:ea:07:b7:27:1b:13:
         7a:4b:4f:16:5d:12:9f:af:f6:4e:15:20:31:bd:e4:84:a4:21:
         80:b8:4b:0d:57:ac:2b:aa:a6:3f:fa:44:48:a7:50:4e:43:15:
         7c:db:02:20:d4:ad:ae:f5:15:26:1b:dd:8b:29:09:d9:b7:02:
         90:c7:04:35:16:a1:de:4b:d9:9b:a7:ed:c2:2a:21:c5:5a:8c:
         ac:9b:11:0f:a3:e6:84:09:b9:49:21:45:40:5c:d3:14:48:42:
         6f:f8:fa:70:d1:90:3f:8f:ec:2c:ff:ae:5e:56:55:1c:fe:4b:
         37:86:68:92:88:11:8f:a1:cc:1a:d8:de:a3:d3:36:81:25:53:
         2d:80:b8:60:3a:f1:f5:2e:8e:6f:bf:ba:17:93:d2:7e:cd:c6:
         ee:d8:f3:0d:49:9b:85:fe:bc:19:16:36:db:ba:61:b7:b3:4e:
         0a:a5:54:fa:28:f5:6f:79:63:ac:c9:84:0f:5c:99:83:c2:c9:
         81:8b:e0:37:95:c2:ed:7a:0f:77:0d:2a:09:49:f3:9e:bf:2e:
         a8:c2:1b:62:8a:6d:7e:0c:2a:e6:33:b4:e0:80:59:b6:89:f9:
         be:90:46:f7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzFbgKSKh/96hjpT6fliLniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDY1NjRlMDY1YWEwZmVjYmI3NmVlOGRmMjkwNmMwNGI4MjQ0MTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztVBFAEVkf/czWgaZe30+sR4MyuR
kUfPJUp/5ZGLlySwvD19LKzD7DT4gc3D3Iv4E5bYaAr9Rg0VCMKoT4fX76f0y/i5
eYfPUJTfzEaiimC93ucgTKAfGUd1Fg2HTfaL4DqnI3C3V1mMkix/pyAQ/HwSfJxX
kq/OVEo7LiyAngSrDUhgFyEaAzwkLkiAS+tzqIm6pe5A0K0bCrHk5j5nTXjOssma
f13Llo1rpvGIZcHur0Nw/OCBZYczpFBkuVBZqjM19OfIjh6PR10AQLZqzqhvRBbG
QbkQWStxt48tpc9sYqpBJBE1q93QEq4nPdmXETeIFximrP+NYjAf3vloTQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLBlZOBlqg/su3bujfKQbAS4JEE1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzA0NzMy
NS1hOThjLTQzY2YtYThlZi1kMmE4NTc2Njc5MGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvMDQ3MzI1
LWE5OGMtNDNjZi1hOGVmLWQyYTg1NzY2NzkwZC8xL3NHVms0R1dxRC15N2R1Nk44
cEJzQkxna1FUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuRUzMA0GCSqGSIb3DQEBCwUAA4IBAQBKvfdw
gyCgYx4YGx/pWk3nhIrbAtT1XGQDFsT39f7qB7cnGxN6S08WXRKfr/ZOFSAxveSE
pCGAuEsNV6wrqqY/+kRIp1BOQxV82wIg1K2u9RUmG92LKQnZtwKQxwQ1FqHeS9mb
p+3CKiHFWoysmxEPo+aECblJIUVAXNMUSEJv+Ppw0ZA/j+ws/65eVlUc/ks3hmiS
iBGPocwa2N6j0zaBJVMtgLhgOvH1Lo5vv7oXk9J+zcbu2PMNSZuF/rwZFjbbumG3
s04KpVT6KPVveWOsyYQPXJmDwsmBi+A3lcLteg93DSoJSfOevy6owhtiim1+DCrm
M7TggFm2ifm+kEb3
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:11 2024 by rpki-client on console-fra.rpki-client.org