Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tLWHIRAJB7808Nk_pUlz_S9N9wc.cer
File:                     tLWHIRAJB7808Nk_pUlz_S9N9wc.cer (raw, json)
Hash identifier:          2oVlXKCNTk3GtDDNk1YKva9a5JS0EejuVoYvY1Bw3G8=
Subject key identifier:   B4:B5:87:21:10:09:07:BF:34:F0:D9:3F:A5:49:73:FD:2F:4D:F7:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D645CCFEE5EE8F043D128553462E19
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/tLWHIRAJB7808Nk_pUlz_S9N9wc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:46 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 62453
                          IP: 94.103.48.0/20

Validation:               Failed, certificate revoked on Wed 15 Mar 2023 12:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:45:cc:fe:e5:ee:8f:04:3d:12:85:53:46:2e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b4b58721100907bf34f0d93fa54973fd2f4df707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:60:be:75:1f:66:e4:5e:3e:6b:3e:e3:af:
                    75:12:ea:2e:69:e7:21:5b:41:71:a2:54:4a:04:b5:
                    76:b4:09:7f:0b:ef:92:3f:2f:70:ba:5c:10:f3:c3:
                    fa:84:ce:bc:1c:5a:30:c6:85:4e:84:f4:90:d1:3f:
                    c6:23:7e:d1:fe:f3:43:6e:25:9f:48:e7:38:7e:a3:
                    df:13:36:94:eb:54:59:d3:01:cd:4c:26:a5:e4:ca:
                    e5:a2:2b:33:e8:58:be:e8:a2:5c:c9:df:2e:0d:c2:
                    31:fb:6e:49:4b:eb:ac:38:ec:b5:65:cb:a2:f1:68:
                    e6:33:99:e4:33:28:7e:67:64:f9:47:ed:61:8d:dc:
                    14:2b:9b:3b:a0:31:e6:02:f3:87:36:88:6a:fb:a5:
                    5e:8b:24:c3:6a:f9:37:b2:c5:de:fe:7b:63:76:24:
                    2e:a0:5b:70:e3:51:cd:81:57:e2:ff:c1:94:e2:df:
                    12:bf:25:53:59:c4:5e:21:fd:4a:e2:82:b4:31:d4:
                    c6:9c:42:ae:2f:b4:46:5d:6f:b7:97:4c:05:63:ae:
                    d7:a6:c2:bf:8d:7a:e1:5e:40:c2:cd:33:1d:07:37:
                    15:50:8e:95:f8:3e:44:33:90:26:8b:75:74:78:e9:
                    1b:1d:a2:6b:69:12:e1:e9:07:6f:2c:37:78:c3:6f:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B5:87:21:10:09:07:BF:34:F0:D9:3F:A5:49:73:FD:2F:4D:F7:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/tLWHIRAJB7808Nk_pUlz_S9N9wc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.48.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62453

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:79:e2:43:1a:9a:32:16:38:1f:89:89:71:4f:93:01:63:
         f6:1b:58:45:df:21:55:64:9f:d5:45:a1:56:49:f3:ab:69:a6:
         05:c2:a2:ce:90:a8:2e:4a:82:8d:ac:a7:92:06:46:e7:34:19:
         b6:31:29:d4:5e:ac:21:be:bb:93:7d:e7:4d:df:e8:d9:eb:64:
         5e:17:6a:f0:de:1b:f8:e3:25:a0:96:b2:8a:26:8b:cf:f9:63:
         36:09:c3:06:05:84:19:b4:ed:63:9b:c0:9e:69:92:0f:4e:a8:
         6f:ab:4d:fe:d0:27:b9:0e:15:2c:52:a6:77:a4:90:b0:2e:4f:
         ab:0f:e9:37:7e:5b:08:46:09:38:f2:9e:b9:5c:5d:c2:70:ec:
         21:cc:50:bd:bf:fc:d8:09:72:53:60:47:5f:9f:fe:f3:7c:d5:
         0e:f6:b5:61:89:26:b4:30:fe:36:46:49:bc:f4:7d:1f:7d:c9:
         57:04:7f:ff:89:90:44:ee:27:80:c8:15:4c:de:24:0d:a1:5f:
         c6:e2:20:ff:1e:f9:ab:5e:68:97:10:6d:44:9b:51:4e:52:00:
         89:be:4c:c1:4f:5b:42:a0:fc:79:43:55:49:4e:b7:23:cf:81:
         fe:15:1f:4f:42:da:61:7c:01:20:0b:19:ad:f1:d6:c1:61:a5:
         39:32:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:22 2024 by rpki-client on console-fra.rpki-client.org