Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/txGzRHdfOZeQ2-Bych4XIxwLX4o.cer
File:                     txGzRHdfOZeQ2-Bych4XIxwLX4o.cer (raw, json)
Hash identifier:          pLrD8++6URiEkcXt7d9IeghTeDK2xDzZt8gSruTigCc=
Subject key identifier:   B7:11:B3:44:77:5F:39:97:90:DB:E0:72:72:1E:17:23:1C:0B:5F:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B86FADF7F7CA871B18CF1EF6077457774
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6d/96bda0-ea3b-483c-a60f-84056d2bd042/1/txGzRHdfOZeQ2-Bych4XIxwLX4o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6d/96bda0-ea3b-483c-a60f-84056d2bd042/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 31 Oct 2023 18:24:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 216061

Validation:               Failed, certificate revoked on Tue 31 Oct 2023 18:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:86:fa:df:7f:7c:a8:71:b1:8c:f1:ef:60:77:45:77:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 31 18:24:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b711b344775f399790dbe072721e17231c0b5f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1e:2e:a4:59:69:b2:df:0f:34:64:33:be:ff:
                    97:67:17:57:09:f3:0b:f8:d9:98:71:5f:84:af:36:
                    f3:59:59:d2:4d:d8:ac:c7:30:70:49:06:2a:2b:46:
                    56:f6:7b:49:0b:53:ce:de:88:c2:b6:16:a3:f0:2c:
                    00:46:23:f9:fe:a5:5d:1c:44:52:a6:83:44:3e:60:
                    bf:33:1e:1e:20:9e:2c:d4:c0:5a:11:28:eb:33:44:
                    f1:eb:54:ae:13:65:59:a0:c6:65:76:8c:8c:ff:e1:
                    8b:86:6a:13:75:cb:0b:e4:ea:11:48:8b:29:e7:97:
                    53:1e:98:14:b9:6e:ad:a8:0f:e1:af:aa:92:30:1a:
                    8d:d8:80:65:19:4f:0a:98:12:4e:ee:bd:d9:80:ba:
                    25:69:31:07:17:45:11:c6:18:5d:88:b6:82:65:93:
                    d2:60:3c:57:73:29:6b:58:c7:da:ab:34:85:96:72:
                    18:f1:b8:aa:87:ac:8d:ef:2f:c1:06:9a:13:83:d6:
                    5f:b2:1d:d4:36:ac:21:f2:b2:89:95:7e:24:ab:98:
                    b3:95:ca:95:82:a4:37:7c:bd:a7:95:21:54:3d:e8:
                    6b:f3:c9:7e:08:1f:54:b0:8e:c6:f6:84:f0:2f:39:
                    15:02:6d:85:ab:0b:bf:5e:8a:08:c5:66:dc:65:dc:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:11:B3:44:77:5F:39:97:90:DB:E0:72:72:1E:17:23:1C:0B:5F:8A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96bda0-ea3b-483c-a60f-84056d2bd042/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96bda0-ea3b-483c-a60f-84056d2bd042/1/txGzRHdfOZeQ2-Bych4XIxwLX4o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216061

    Signature Algorithm: sha256WithRSAEncryption
         2d:b3:7b:5d:86:73:15:01:91:de:f8:1d:5c:e9:81:7a:64:64:
         48:43:2c:49:ef:08:92:a7:20:a2:c5:3a:77:00:eb:d7:36:e0:
         82:b0:93:cb:44:79:34:27:07:d7:a6:01:30:2c:6b:90:85:95:
         cc:b9:1a:f1:b5:e8:57:37:f7:36:88:69:ce:eb:47:a4:e6:5f:
         5a:07:12:fb:76:42:24:45:ee:8c:4f:57:96:a6:9e:90:20:ee:
         8f:6e:e2:ce:3c:5b:49:ca:bd:48:3d:6e:cc:ae:43:04:24:52:
         29:bd:2d:9c:58:2f:f6:7e:12:b8:f4:95:5f:44:86:22:f0:eb:
         33:07:8a:e4:b0:67:bf:a3:ee:6e:48:96:c6:61:43:cb:5c:f1:
         9f:5d:58:f6:6c:d0:ec:3a:5a:20:c4:a7:6a:1b:b9:8f:86:da:
         65:0e:5c:a9:d4:b6:48:4b:ef:6c:e3:8b:bb:08:d0:75:04:fd:
         e5:95:0a:15:50:df:0c:c2:bf:c3:fa:85:27:2a:f6:1e:90:4f:
         9c:32:6f:f0:52:71:63:60:59:b5:ec:31:a7:d9:da:45:4f:9c:
         35:39:66:30:dd:02:5e:47:f5:8b:75:e9:4c:d5:33:df:2b:37:
         53:5c:a4:78:90:69:c9:9e:bb:52:a5:e6:18:61:92:8a:21:a7:
         89:a9:7f:f7
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYuG+t9/fKhxsYzx72B3RXd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMDMxMTgyNDMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzExYjM0NDc3NWYzOTk3OTBkYmUwNzI3MjFlMTcyMzFjMGI1ZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8R4upFlpst8PNGQzvv+XZxdXCfML
+NmYcV+ErzbzWVnSTdisxzBwSQYqK0ZW9ntJC1PO3ojCthaj8CwARiP5/qVdHERS
poNEPmC/Mx4eIJ4s1MBaESjrM0Tx61SuE2VZoMZldoyM/+GLhmoTdcsL5OoRSIsp
55dTHpgUuW6tqA/hr6qSMBqN2IBlGU8KmBJO7r3ZgLolaTEHF0URxhhdiLaCZZPS
YDxXcylrWMfaqzSFlnIY8biqh6yN7y/BBpoTg9Zfsh3UNqwh8rKJlX4kq5izlcqV
gqQ3fL2nlSFUPehr88l+CB9UsI7G9oTwLzkVAm2Fqwu/XooIxWbcZdx0ywIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLcRs0R3XzmXkNvgcnIeFyMcC1+KMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzk2YmRh
MC1lYTNiLTQ4M2MtYTYwZi04NDA1NmQyYmQwNDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvOTZiZGEw
LWVhM2ItNDgzYy1hNjBmLTg0MDU2ZDJiZDA0Mi8xL3R4R3pSSGRmT1plUTItQnlj
aDRYSXh3TFg0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNL/TANBgkqhkiG9w0BAQsFAAOCAQEALbN7XYZzFQGR
3vgdXOmBemRkSEMsSe8IkqcgosU6dwDr1zbggrCTy0R5NCcH16YBMCxrkIWVzLka
8bXoVzf3NohpzutHpOZfWgcS+3ZCJEXujE9XlqaekCDuj27izjxbScq9SD1uzK5D
BCRSKb0tnFgv9n4SuPSVX0SGIvDrMweK5LBnv6PubkiWxmFDy1zxn11Y9mzQ7Dpa
IMSnahu5j4baZQ5cqdS2SEvvbOOLuwjQdQT95ZUKFVDfDMK/w/qFJyr2HpBPnDJv
8FJxY2BZtewxp9naRU+cNTlmMN0CXkf1i3XpTNUz3ys3U1ykeJBpyZ67UqXmGGGS
iiGnial/9w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:11 2024 by rpki-client on console-ams.rpki-client.org