Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sd6W1TXVlUoW9n2JIB_4BioVGrU.cer
File:                     sd6W1TXVlUoW9n2JIB_4BioVGrU.cer (raw, json)
Hash identifier:          YLcefMbd5ufKn6fXcIrI2/dbDMgPOkD8jP+S6/CGU/4=
Subject key identifier:   B1:DE:96:D5:35:D5:95:4A:16:F6:7D:89:20:1F:F8:06:2A:15:1A:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B85CCF8FF694B879ECEAC06F43206A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/sd6W1TXVlUoW9n2JIB_4BioVGrU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:30:20 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 210446
                          IP: 193.9.49.0/24
                          IP: 2a12:4880::/29

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 06:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:5c:cf:8f:f6:94:b8:79:ec:ea:c0:6f:43:20:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:30:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b1de96d535d5954a16f67d89201ff8062a151ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:bd:52:0e:02:05:92:fa:9d:11:dc:4f:22:
                    17:ad:8d:17:46:c2:08:4e:92:8f:2d:95:08:ba:65:
                    78:26:87:1d:cf:39:0a:0b:01:aa:a0:83:82:73:23:
                    2f:8d:63:98:d5:88:d5:07:78:11:61:48:ab:49:d3:
                    c5:2c:b2:f1:44:5b:24:92:c8:09:31:dc:4f:71:e9:
                    ce:5b:5c:49:da:46:cd:c1:c0:7b:c1:56:1b:f4:4a:
                    fc:e1:5b:28:d1:7a:d4:5d:39:b7:22:f7:f1:3e:d0:
                    00:2a:cd:8d:84:0f:99:a8:8c:d5:2c:ee:63:9a:5e:
                    9c:9c:55:ef:24:40:31:01:ff:37:29:a2:52:89:c7:
                    0e:63:ef:8c:97:78:c8:06:5a:59:a0:a2:09:e3:5a:
                    aa:85:21:37:23:fc:34:a6:02:ec:be:0a:fe:17:ce:
                    30:8c:2c:4c:9e:9a:b1:46:ee:15:6c:a5:ed:00:fd:
                    46:57:66:4c:c5:00:b9:8d:0a:68:91:62:c4:30:a2:
                    b4:f4:15:bd:82:7a:68:44:21:44:79:83:37:9e:26:
                    7d:3e:b6:a0:bd:6f:66:12:77:7b:bf:3a:57:9a:c7:
                    6d:99:dd:18:1f:14:14:0a:b9:02:69:03:77:d4:9b:
                    36:40:0a:ff:62:6c:a1:3a:66:53:d8:90:6b:50:40:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DE:96:D5:35:D5:95:4A:16:F6:7D:89:20:1F:F8:06:2A:15:1A:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/sd6W1TXVlUoW9n2JIB_4BioVGrU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.9.49.0/24
                IPv6:
                  2a12:4880::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210446

    Signature Algorithm: sha256WithRSAEncryption
         75:72:3f:09:a9:c7:47:7e:03:eb:5a:42:db:61:7d:1f:72:47:
         cb:13:5f:0f:b3:a1:b7:60:cd:be:3d:36:28:f5:70:e1:a5:d5:
         3b:dc:20:51:43:e6:58:38:71:32:44:3d:01:48:10:9c:9f:70:
         d5:67:13:7c:e4:11:ab:4c:ef:6a:97:84:c2:71:9a:58:38:76:
         fc:89:3c:7f:e5:3b:89:4e:d2:7d:83:9b:0c:3f:2f:43:73:94:
         cd:b0:a5:56:87:fa:4e:32:be:d5:3d:79:fd:51:69:9a:e2:47:
         12:72:40:f2:4f:f4:48:a8:8c:6c:8a:3e:2c:73:4e:c2:4d:eb:
         6c:c7:2c:5f:62:49:82:99:dc:ce:fb:af:33:30:db:36:5b:1f:
         f6:90:e3:01:d3:7f:ba:68:7c:a4:4c:7f:eb:ed:ae:e4:65:7a:
         2d:3d:43:55:3d:e9:4b:19:65:c5:94:83:00:cd:5d:45:c4:87:
         41:bd:17:de:49:8b:54:3e:f9:88:3a:b4:5b:a6:6f:a9:6d:59:
         d3:14:44:99:da:9a:e5:10:e8:17:57:34:2f:20:a2:bf:76:41:
         88:c8:55:e5:61:6e:11:8d:95:29:4e:0d:1d:c6:a9:9f:5d:f9:
         6e:dd:cb:cc:e8:ad:fa:9d:fe:25:b9:0d:b8:34:18:8d:cc:7e:
         d8:b9:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:54 2024 by rpki-client on console-ams.rpki-client.org