Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/svEdg2GwUhGNhR1KeAe80keEz_U.cer
File:                     svEdg2GwUhGNhR1KeAe80keEz_U.cer (raw, json)
Hash identifier:          o5s0qOkPE2wNmm+Bm6TVPI9rf+7BLFMO/RZbCdEsS5E=
Subject key identifier:   B2:F1:1D:83:61:B0:52:11:8D:85:1D:4A:78:07:BC:D2:47:84:CF:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFB79D68F8D3F8199B98925DA711EBB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/svEdg2GwUhGNhR1KeAe80keEz_U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:32 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 58345
                          IP: 5.134.32.0/20
                          IP: 185.102.204.0/22
                          IP: 185.103.148.0/22
                          IP: 193.108.206.0/23
                          IP: 193.108.230.0/23
                          IP: 2a03:e080::/32

Validation:               Failed, certificate revoked on Mon 15 May 2023 11:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:79:d6:8f:8d:3f:81:99:b9:89:25:da:71:1e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b2f11d8361b052118d851d4a7807bcd24784cff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:93:28:ef:9a:74:a9:b2:f3:cd:70:fc:93:
                    31:34:1d:4b:0e:3e:3c:36:4c:de:2a:f7:f1:41:98:
                    2c:ce:d2:77:5a:28:a7:96:b9:f0:f4:31:75:0b:26:
                    f5:a9:da:14:31:cb:24:f5:13:c8:1a:1c:0c:12:5c:
                    7c:49:f5:d3:96:d9:ca:71:3c:b3:b6:ad:50:94:a2:
                    cd:f9:5b:10:89:a4:e2:5a:f4:4d:9d:21:13:66:45:
                    f5:1c:b5:13:12:87:aa:a7:cf:6b:9e:33:4d:d3:92:
                    78:1c:7b:b2:70:f1:6b:c3:1d:71:bc:2b:f9:5f:4e:
                    85:32:a1:43:ee:7d:fa:7f:b7:2d:73:09:ad:17:36:
                    82:06:98:28:8d:6d:c2:5b:04:c7:82:7a:44:32:8c:
                    c5:be:78:08:da:18:71:e1:79:95:32:b1:d4:2a:0a:
                    03:8b:1a:50:a0:a1:68:a3:0e:b9:d4:3e:f5:40:ed:
                    18:06:10:e2:41:43:04:4f:64:fc:d1:2a:7d:57:b5:
                    00:98:ab:1a:32:e2:e6:a6:bc:b9:68:cd:7a:da:9e:
                    b1:2e:6d:a3:d6:45:d5:2b:8a:13:fe:8c:82:02:a7:
                    aa:44:ab:cb:de:4e:fa:78:1e:1f:5f:04:3f:7c:25:
                    16:4f:fc:89:40:d5:ca:10:45:31:41:ca:95:6f:d7:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F1:1D:83:61:B0:52:11:8D:85:1D:4A:78:07:BC:D2:47:84:CF:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/svEdg2GwUhGNhR1KeAe80keEz_U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.134.32.0/20
                  185.102.204.0/22
                  185.103.148.0/22
                  193.108.206.0/23
                  193.108.230.0/23
                IPv6:
                  2a03:e080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58345

    Signature Algorithm: sha256WithRSAEncryption
         a3:17:a3:a7:21:4a:b1:28:5f:19:ce:2a:88:d2:bf:75:17:d8:
         f9:b2:d3:f5:96:d2:ed:b6:10:b5:14:92:ed:b3:a3:00:98:1e:
         7a:1f:91:2e:40:1e:24:1d:7e:bd:98:05:9e:f0:c9:78:f6:b9:
         b8:85:41:b6:8f:c1:10:c3:07:ae:41:7c:bb:f3:0e:18:7a:26:
         56:b8:e8:a8:70:98:d1:8f:be:c0:43:3f:86:64:03:a4:88:94:
         65:e1:06:6e:9c:e0:58:f0:74:8a:93:67:29:c1:5d:e2:2e:12:
         ca:0d:b3:de:47:f5:fb:01:6b:4c:a3:6f:db:1d:cf:0b:f2:92:
         e6:d5:df:c9:ef:b5:11:67:a4:3f:6c:16:20:fe:fb:c3:16:82:
         30:6f:2e:44:66:e3:f5:c4:0d:e0:3c:42:00:ef:64:e1:cb:e1:
         c2:94:2b:74:a4:b5:d2:88:71:20:f8:ed:b8:2c:f8:43:d1:43:
         41:d2:61:3a:1f:ca:85:53:19:a0:07:50:02:7a:b7:8f:ee:05:
         c1:3b:34:d5:c5:76:f6:f4:a3:d9:82:e9:2d:dd:d6:4c:5f:e2:
         b6:aa:07:b5:33:49:f8:be:5f:17:cd:e9:60:f0:f2:c9:b9:85:
         bb:2c:30:b0:59:5b:9a:1f:04:94:51:58:3c:f6:9a:3f:d2:dc:
         53:05:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:18 2024 by rpki-client on console-fra.rpki-client.org