Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sS1uPxuEKTotwPb2IWaJlbcGfkk.cer
File:                     sS1uPxuEKTotwPb2IWaJlbcGfkk.cer (raw, json)
Hash identifier:          wsibaLl4mpr1wpQscPPisHLN0nWy88Ibpr49XIeS02I=
Subject key identifier:   B1:2D:6E:3F:1B:84:29:3A:2D:C0:F6:F6:21:66:89:95:B7:06:7E:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FA49511797E2E2270DAEDBBA7CF075
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/54548b-112b-4128-b6ca-b46307201536/1/sS1uPxuEKTotwPb2IWaJlbcGfkk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/54548b-112b-4128-b6ca-b46307201536/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:35:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.15.192.0/22

Validation:               Failed, certificate revoked on Wed 08 Mar 2023 09:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:49:51:17:97:e2:e2:27:0d:ae:db:ba:7c:f0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:35:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b12d6e3f1b84293a2dc0f6f621668995b7067e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:1f:07:5d:c9:58:0f:c9:e7:44:4e:a9:ec:
                    a2:87:78:1e:d9:0f:f4:d2:4c:fa:57:d4:d1:8c:b2:
                    32:a7:f3:73:91:8d:a0:41:ed:f5:39:f6:bb:05:42:
                    04:c0:00:e4:d3:5d:af:13:05:05:02:15:dd:b2:4b:
                    64:e1:03:a3:1a:c5:57:b2:44:a2:81:fa:37:f3:23:
                    92:11:2f:97:b4:62:6c:23:85:2d:21:87:f0:b6:a5:
                    5b:47:7e:6e:95:b3:ba:07:5f:d7:44:9e:ba:9a:84:
                    f0:66:f6:14:4d:a5:5a:9e:bd:40:85:62:fb:6c:5a:
                    36:2c:da:09:a1:53:98:f6:68:67:35:6a:73:a6:e8:
                    80:1f:60:31:05:35:e6:9a:4f:32:5a:9e:9d:c2:c5:
                    e7:ea:80:c2:6b:b6:a9:dd:f6:f6:09:b9:76:a3:ad:
                    aa:3b:14:06:54:ac:d0:14:71:de:88:d6:85:b9:e6:
                    d0:b6:e8:dc:0a:ee:4f:5c:5a:07:56:0c:49:a1:40:
                    f2:33:f2:85:64:05:6f:d2:37:62:7b:25:9d:f4:29:
                    00:ca:f1:c2:14:6c:02:20:d0:86:02:fc:9b:08:5e:
                    17:b1:6d:39:c1:67:90:95:f4:af:90:46:cf:f3:29:
                    cf:3e:64:ea:52:64:a2:6d:e3:28:23:38:17:04:c4:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2D:6E:3F:1B:84:29:3A:2D:C0:F6:F6:21:66:89:95:B7:06:7E:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/54548b-112b-4128-b6ca-b46307201536/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/54548b-112b-4128-b6ca-b46307201536/1/sS1uPxuEKTotwPb2IWaJlbcGfkk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:97:a3:a7:88:1d:dc:10:8b:a6:5c:5e:f2:b8:1b:15:c5:36:
         81:60:ee:b2:a6:d7:2e:99:a2:9a:f6:3b:a9:79:ae:ee:2a:97:
         07:24:a6:56:19:ee:b9:3d:46:d8:28:d0:13:e3:7f:bf:9b:5e:
         56:86:29:2d:16:8c:68:a2:8b:86:1b:a4:d8:a8:01:f2:18:78:
         0e:6e:34:80:f6:a0:ae:49:cb:71:06:eb:40:be:e3:27:32:03:
         d9:96:c7:6a:47:61:90:94:16:62:46:b4:9a:a8:87:da:4d:a0:
         c6:62:26:69:6a:3b:41:09:d2:9a:a1:ae:c3:0e:72:a5:34:e8:
         75:a3:2d:84:9a:c7:cd:3c:99:f8:fd:d7:b0:e4:1e:6f:8e:05:
         c9:ef:7a:8b:16:85:dc:1c:09:93:cf:57:94:38:3c:df:19:c9:
         78:be:d2:c2:89:63:28:65:cb:d0:12:b2:7d:5c:d3:0e:1d:6e:
         a6:c9:75:63:2d:db:6f:ab:1b:1b:4b:69:3a:6e:94:db:38:c8:
         67:c5:60:5c:26:84:ef:55:96:99:e8:e9:d4:0b:8c:52:d5:75:
         3a:49:d6:68:2d:ad:34:74:0e:4c:78:66:29:2a:c0:e8:ae:61:
         df:46:f1:de:c9:f6:d8:4a:db:f4:ce:da:d7:f5:e9:b0:24:43:
         a5:2b:98:2e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVw+klRF5fi4icNrtu6fPB1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTJkNmUzZjFiODQyOTNhMmRjMGY2ZjYyMTY2ODk5NWI3MDY3ZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMEfB13JWA/J50ROqeyih3ge2Q/0
0kz6V9TRjLIyp/NzkY2gQe31Ofa7BUIEwADk012vEwUFAhXdsktk4QOjGsVXskSi
gfo38yOSES+XtGJsI4UtIYfwtqVbR35ulbO6B1/XRJ66moTwZvYUTaVanr1AhWL7
bFo2LNoJoVOY9mhnNWpzpuiAH2AxBTXmmk8yWp6dwsXn6oDCa7ap3fb2Cbl2o62q
OxQGVKzQFHHeiNaFuebQtujcCu5PXFoHVgxJoUDyM/KFZAVv0jdieyWd9CkAyvHC
FGwCINCGAvybCF4XsW05wWeQlfSvkEbP8ynPPmTqUmSibeMoIzgXBMSMRwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLEtbj8bhCk6LcD29iFmiZW3Bn5JMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzU0NTQ4
Yi0xMTJiLTQxMjgtYjZjYS1iNDYzMDcyMDE1MzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNTQ1NDhi
LTExMmItNDEyOC1iNmNhLWI0NjMwNzIwMTUzNi8xL3NTMXVQeHVFS1RvdHdQYjJJ
V2FKbGJjR2Zray5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLQ/AMA0GCSqGSIb3DQEBCwUAA4IBAQB1l6On
iB3cEIumXF7yuBsVxTaBYO6yptcumaKa9jupea7uKpcHJKZWGe65PUbYKNAT43+/
m15WhiktFoxooouGG6TYqAHyGHgObjSA9qCuSctxButAvuMnMgPZlsdqR2GQlBZi
RrSaqIfaTaDGYiZpajtBCdKaoa7DDnKlNOh1oy2EmsfNPJn4/dew5B5vjgXJ73qL
FoXcHAmTz1eUODzfGcl4vtLCiWMoZcvQErJ9XNMOHW6myXVjLdtvqxsbS2k6bpTb
OMhnxWBcJoTvVZaZ6OnUC4xS1XU6SdZoLa00dA5MeGYpKsDormHfRvHeyfbYStv0
ztrX9emwJEOlK5gu
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:13 2024 by rpki-client on console-fra.rpki-client.org