Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sJ0vZdcijebul4Tti2reZV9e53g.cer
File:                     sJ0vZdcijebul4Tti2reZV9e53g.cer (raw, json)
Hash identifier:          ZwRAQ9waA6ShHKxj9RvK3BRm3yvbZVesy3AmJdN0M10=
Subject key identifier:   B0:9D:2F:65:D7:22:8D:E6:EE:97:84:ED:8B:6A:DE:65:5F:5E:E7:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56E1949C1262EFAE673FCB9AB3D4D1E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/sJ0vZdcijebul4Tti2reZV9e53g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:29:36 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 45.91.151.0/24

Validation:               Failed, certificate revoked on Wed 28 Feb 2024 09:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:19:49:c1:26:2e:fa:e6:73:fc:b9:ab:3d:4d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:29:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b09d2f65d7228de6ee9784ed8b6ade655f5ee778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:64:55:77:57:ba:7e:aa:5c:04:b4:c0:d7:
                    16:a7:ca:8c:ad:9c:81:32:7e:57:f9:b9:e8:65:a7:
                    6f:85:62:4f:2a:09:0b:ca:c7:ce:85:46:2a:68:85:
                    91:f2:ac:7e:0e:fb:e3:83:89:cd:ea:95:ff:5f:57:
                    0b:93:45:39:b9:2c:b7:1e:f2:ac:b9:28:d0:da:d7:
                    59:f4:7c:61:e7:9e:c6:7a:31:1d:77:3f:95:1d:0b:
                    10:63:46:df:9b:94:d1:03:8c:fc:c5:33:1d:15:0e:
                    8d:19:81:b9:ac:66:39:83:8b:e1:80:06:32:9d:31:
                    48:68:f2:c4:ac:32:7f:41:1e:ef:6c:5b:82:7f:53:
                    3a:e1:7a:36:b6:00:3d:a0:7a:46:e6:fa:d8:e0:6e:
                    6c:1e:9e:64:2d:96:9d:95:26:4d:98:a3:f9:e1:40:
                    1f:68:ce:41:3a:af:06:2e:68:b0:0f:71:34:28:3c:
                    b7:96:00:46:df:26:71:ff:ec:99:d4:42:c4:92:38:
                    94:53:75:cf:53:e6:ac:11:e4:77:47:95:32:c0:5e:
                    c5:be:0f:c9:75:75:df:10:1b:d1:00:87:ba:25:6e:
                    1d:71:77:57:dc:5c:22:3e:24:64:13:4b:e9:6a:a2:
                    55:39:d8:1f:7a:23:46:d0:77:76:55:b3:cb:39:22:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9D:2F:65:D7:22:8D:E6:EE:97:84:ED:8B:6A:DE:65:5F:5E:E7:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/sJ0vZdcijebul4Tti2reZV9e53g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:51:78:80:9f:66:c8:52:f1:d2:8d:52:03:db:0a:5d:ab:10:
         e2:ad:88:d3:76:76:6a:84:6f:1c:d8:05:7f:74:47:4d:da:92:
         28:c0:8d:a7:63:1e:71:d0:e2:f0:70:d3:10:3e:a7:92:66:ed:
         f1:20:76:57:39:87:d0:09:48:6c:e5:44:3d:07:8a:03:d3:f6:
         3f:05:c9:89:7e:16:f0:63:c3:2d:f9:c5:c8:3f:0f:4d:c3:a6:
         b8:fd:6f:36:8f:e1:31:39:de:b1:18:d1:64:5b:3f:46:4b:f3:
         48:99:8b:8f:4a:90:28:76:d0:48:07:67:6a:f5:d9:78:d0:fc:
         c0:9a:9e:37:be:81:b5:24:e8:75:43:53:f7:8f:45:56:66:7d:
         41:f4:5b:38:6f:f2:9b:ae:2a:83:b6:9e:ad:ce:1d:18:b2:4a:
         cf:15:81:53:b2:0e:3f:cd:c2:38:78:16:7e:83:10:96:f9:de:
         5a:5e:55:9e:89:0c:04:f6:c1:3c:bd:66:b7:cf:8c:16:44:44:
         19:df:f2:00:db:1a:4c:45:b5:8f:7f:24:8e:b9:59:dd:81:93:
         5f:3b:11:84:3a:de:8a:1c:f9:b5:a2:c8:ad:a8:7f:c4:d5:ab:
         cf:e2:ec:34:2a:ef:72:fe:88:b1:ae:39:36:3b:39:bc:a4:ea:
         cb:19:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:49 2024 by rpki-client on console-ams.rpki-client.org