Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tQA3WwkslZktZAS6VipXFUJwfzw.cer
File:                     tQA3WwkslZktZAS6VipXFUJwfzw.cer (raw, json)
Hash identifier:          NYfckNCyD59IXK2ACTwS6qHtZDNaK6ZNdTFb9T6XE4Q=
Subject key identifier:   B5:00:37:5B:09:2C:95:99:2D:64:04:BA:56:2A:57:15:42:70:7F:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DB2C4E039B3226002C8CDC91AEDC566
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.kitten.network/repo/MythicalKitten/4/B500375B092C95992D6404BA562A571542707F3C.mft
caRepository:             rsync://rpki.kitten.network/repo/MythicalKitten/4
Notify URL:               https://rpki.kitten.network/rrdp/notification.xml
Certificate not before:   Sun 01 Jan 2023 14:18:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 50224

Validation:               Failed, certificate revoked on Fri 21 Apr 2023 03:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:b2:c4:e0:39:b3:22:60:02:c8:cd:c9:1a:ed:c5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:18:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b500375b092c95992d6404ba562a571542707f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:b8:00:74:1e:6d:42:a7:8f:ca:b7:84:54:
                    4f:28:bd:7d:45:56:6f:61:d6:d7:51:5e:c5:87:ef:
                    33:af:46:75:20:71:28:af:07:1d:5c:64:fb:70:f5:
                    6d:18:41:83:39:ea:e7:f8:03:40:eb:66:a0:ba:05:
                    ed:43:b6:93:b1:28:ad:8f:71:b2:79:ca:b2:e9:55:
                    d3:50:6a:e3:02:0d:92:8e:aa:e1:81:e6:4e:7b:b4:
                    b1:89:ba:ce:9e:c0:e7:48:34:1c:0f:6f:cf:73:34:
                    21:ed:18:f1:09:5f:b2:81:c3:97:3b:63:a7:02:b1:
                    b0:57:b8:aa:1d:c9:93:c4:e5:27:a3:55:75:21:3b:
                    95:08:b5:32:9c:fd:12:8f:33:1f:55:83:af:6e:de:
                    23:4e:66:6c:c9:34:63:74:91:4e:bd:db:9e:9b:e2:
                    7f:44:10:b1:d6:9b:84:c0:85:8f:7f:48:fe:66:29:
                    47:ac:52:25:65:05:58:a8:ef:7c:0c:ed:3f:8e:b6:
                    83:bb:0b:04:a8:e6:e7:69:e6:98:da:35:1d:15:c8:
                    a9:9d:48:95:a0:36:34:35:12:53:c5:a7:ee:0a:0a:
                    2c:01:d6:6f:1d:e0:7a:8b:e8:4c:49:d7:6a:b8:54:
                    59:9c:cb:a4:9a:8b:72:8a:95:9d:e3:f8:9e:7a:b4:
                    11:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:00:37:5B:09:2C:95:99:2D:64:04:BA:56:2A:57:15:42:70:7F:3C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.kitten.network/repo/MythicalKitten/4
                RPKI Manifest - URI:rsync://rpki.kitten.network/repo/MythicalKitten/4/B500375B092C95992D6404BA562A571542707F3C.mft
                RPKI Notify - URI:https://rpki.kitten.network/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50224

    Signature Algorithm: sha256WithRSAEncryption
         63:b5:f2:87:2c:3f:25:95:68:4e:78:a1:9e:d8:5c:9f:00:99:
         17:8e:95:c8:10:97:ba:20:02:06:40:9f:5c:e9:1d:28:06:d1:
         c5:41:01:a3:84:d6:7b:47:c5:22:a6:e3:f8:d1:af:24:3f:47:
         7f:97:58:3b:3e:25:16:58:69:e4:49:62:b4:90:8f:04:29:d8:
         f7:0a:29:d6:e4:16:89:1e:8a:f0:56:06:c0:90:8d:73:23:2d:
         e9:94:29:b9:8b:4b:47:fe:c1:27:9f:26:de:02:d8:17:db:b4:
         e0:88:2f:60:e9:97:17:b7:ad:b1:78:a2:c9:39:51:4c:1f:4b:
         ae:06:e7:3a:7a:dd:e9:f0:a6:f9:33:a3:e1:82:13:2f:f7:3b:
         e5:7a:5d:ff:81:91:99:a0:75:ad:c8:f7:96:6e:97:bc:34:fd:
         f8:af:b6:c2:9a:c1:7a:97:22:b5:32:9d:9d:be:63:fd:55:7a:
         33:82:6e:58:71:a0:f7:9e:cf:c3:aa:4f:89:b4:a6:31:a6:44:
         20:12:2f:41:02:8b:f6:38:c5:83:17:40:d1:1a:36:65:04:56:
         6d:56:43:12:93:7d:2e:4e:54:f6:fc:dd:bc:b6:29:73:ee:a1:
         98:0f:8b:40:fe:9a:45:6a:05:93:c0:b5:23:14:03:60:72:01:
         ca:c4:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:22 2024 by rpki-client on console-fra.rpki-client.org