Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t9TebWJoY0eOlbzmg6h_Cq9JtdA.cer
File:                     t9TebWJoY0eOlbzmg6h_Cq9JtdA.cer (raw, json)
Hash identifier:          c3YL22z9BVDTLQwMcriOnmXawZyznDt5IQ8ErqdpZxA=
Subject key identifier:   B7:D4:DE:6D:62:68:63:47:8E:95:BC:E6:83:A8:7F:0A:AF:49:B5:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D1C8196AF6B31FA0B41D8284F96D0CDDA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/t9TebWJoY0eOlbzmg6h_Cq9JtdA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 18 Jan 2024 12:17:51 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 58202
                          AS: 215745
                          AS: 215791
                          IP: 2a14:7580::/29

Validation:               Failed, certificate revoked on Sat 20 Jan 2024 02:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:1c:81:96:af:6b:31:fa:0b:41:d8:28:4f:96:d0:cd:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 18 12:17:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b7d4de6d626863478e95bce683a87f0aaf49b5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e0:3b:18:2e:72:c9:d7:12:c1:8e:02:e2:3b:
                    be:ea:9c:a9:d0:4e:88:40:be:7f:23:a0:f2:17:83:
                    87:f5:a6:86:fa:c8:e3:84:31:49:cf:50:25:6c:12:
                    f0:c0:2f:85:37:0d:a9:d5:d3:cc:1d:f4:f6:1f:f1:
                    10:ad:9d:e8:8d:0e:72:90:74:0f:59:e4:10:15:ff:
                    42:35:26:87:9d:fc:23:b2:b3:fe:ee:bd:8a:16:70:
                    70:59:c0:e8:2a:a5:ea:82:e2:dc:fd:9c:a4:a7:70:
                    02:b5:25:04:2f:3a:e7:a4:6b:7a:8c:5c:de:73:72:
                    d5:ce:76:b7:7e:20:ed:66:fc:76:1d:0f:7f:2b:50:
                    01:59:e7:40:13:cd:63:4f:f5:4e:e3:5d:ff:69:1d:
                    e2:01:39:9f:fd:7d:d5:f1:04:10:4e:f2:f6:15:14:
                    0d:00:bb:58:56:d7:8e:bb:de:25:93:ae:e6:36:90:
                    b7:e8:14:31:ea:7b:17:a6:f3:82:70:3f:72:55:20:
                    ba:ad:78:d8:37:94:61:5e:c4:45:a9:24:a4:00:f0:
                    b2:2b:47:4c:21:1f:0f:2c:73:56:8c:63:ee:a4:c2:
                    4b:f4:8b:cd:39:8f:eb:3d:bc:a9:c0:cf:62:27:89:
                    e3:0a:e1:55:32:07:f3:ff:de:e1:be:ba:53:b5:18:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D4:DE:6D:62:68:63:47:8E:95:BC:E6:83:A8:7F:0A:AF:49:B5:D0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/t9TebWJoY0eOlbzmg6h_Cq9JtdA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58202
                  215745
                  215791

    Signature Algorithm: sha256WithRSAEncryption
         16:5f:d6:d4:92:4f:a9:cb:c9:5d:cd:28:77:32:06:4b:6b:88:
         83:89:7f:1f:e9:54:a5:a9:1b:40:22:11:47:cc:f8:6a:c1:79:
         b8:61:b1:3a:88:b1:9b:cc:41:37:38:66:bd:fe:0a:16:2c:cd:
         6b:21:b9:21:2b:9c:5d:30:4f:8b:b9:3f:62:c2:23:22:e9:85:
         a3:51:89:05:04:5a:18:52:90:38:23:df:37:1b:82:32:88:b7:
         8d:0a:bd:6c:f9:ce:f1:f4:2b:e3:48:3b:f5:39:fb:92:8b:85:
         b8:76:0c:69:c0:0d:f7:78:8d:b4:1f:62:3f:ab:b4:f3:75:5e:
         f8:06:79:d2:32:69:d7:34:a4:0b:cc:4c:5b:d6:5a:48:c0:d2:
         25:d4:38:10:f8:f8:d3:f5:a0:87:fd:fa:d7:19:37:97:47:3b:
         9b:ba:b4:75:ac:3d:da:de:1f:b3:5c:dd:64:f3:f4:dc:28:3d:
         64:01:1d:57:50:84:b6:cc:a0:4d:09:35:bb:63:07:de:d7:c3:
         28:57:41:a3:87:04:a9:d2:3a:56:8c:01:11:19:8f:8c:d2:34:
         62:69:b1:72:d9:43:8d:97:1f:a9:bc:5a:e5:08:3f:4e:1f:a7:
         70:0e:bb:08:85:cb:9e:1b:f3:b5:9a:d3:bd:97:21:87:00:22:
         6f:0c:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:00 2024 by rpki-client on console-ams.rpki-client.org