Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v346xtcojtiUa8pTiaUFeRnpcdw.cer
File:                     v346xtcojtiUa8pTiaUFeRnpcdw.cer (raw, json)
Hash identifier:          PubhkeHctpfXrpqSC+V4TSxATRKgkx2J3j1aBG7qRpQ=
Subject key identifier:   BF:7E:3A:C6:D7:28:8E:D8:94:6B:CA:53:89:A5:05:79:19:E9:71:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1ACBEC41E44F8C3DCDC058EFF1257F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/v346xtcojtiUa8pTiaUFeRnpcdw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:32:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 206576
                          IP: 185.182.200.0/22
                          IP: 2a0a:f480::/29

Validation:               Failed, certificate revoked on Fri 27 Oct 2023 08:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1a:cb:ec:41:e4:4f:8c:3d:cd:c0:58:ef:f1:25:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:32:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bf7e3ac6d7288ed8946bca5389a5057919e971dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:14:d2:aa:39:b2:c3:ce:23:e2:87:5e:e3:6f:
                    a8:03:d8:52:12:84:fa:68:3d:68:33:05:88:fc:21:
                    55:12:cb:2a:32:94:da:99:af:81:62:b7:fc:8d:5b:
                    7e:2b:73:ee:ea:69:5f:b5:1c:f6:18:93:4b:d2:c6:
                    1e:bb:f0:06:6f:67:c1:90:6a:45:85:63:b8:da:9f:
                    98:f4:f1:e2:37:39:27:14:e4:da:b9:0c:36:04:0f:
                    95:75:10:5a:74:0c:b1:8d:cd:66:a7:1c:d9:84:99:
                    3b:84:35:15:a6:c4:f0:f7:6d:38:a3:b4:14:92:cb:
                    6b:16:5a:3d:b9:cb:3c:f3:af:9b:44:00:0c:ba:a0:
                    98:d6:e4:49:94:af:45:60:6e:41:82:4b:09:64:4f:
                    1b:36:7b:d0:7b:ed:8a:76:55:f9:fa:58:b1:88:69:
                    45:64:1e:99:77:e3:18:f3:30:b8:38:f1:6c:80:45:
                    2f:b3:44:4f:ce:23:7d:74:b8:13:9d:a2:5c:5c:df:
                    6c:03:6f:1a:e7:58:59:f3:85:7e:11:00:ea:49:8a:
                    4b:d3:14:54:e6:00:3f:4b:62:9d:7f:e2:4e:24:3e:
                    e4:6b:11:7f:a6:9a:74:b4:a1:ec:a9:7a:36:8b:df:
                    a5:25:fb:80:e3:ef:0b:65:b9:53:dc:99:6b:c5:31:
                    5a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7E:3A:C6:D7:28:8E:D8:94:6B:CA:53:89:A5:05:79:19:E9:71:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/v346xtcojtiUa8pTiaUFeRnpcdw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.200.0/22
                IPv6:
                  2a0a:f480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206576

    Signature Algorithm: sha256WithRSAEncryption
         67:f2:66:a2:0d:29:6a:1f:d5:3b:81:e9:12:10:ba:7f:48:9c:
         be:3f:0e:dc:b8:e4:b7:bf:42:2c:c7:df:b9:97:af:90:7e:5a:
         95:29:d5:73:ef:72:36:8f:88:1e:af:20:42:f7:0c:6e:e0:8f:
         07:69:27:20:90:4f:46:0d:48:27:1c:8a:87:0d:7a:fd:31:90:
         95:c0:8d:cf:b6:74:e9:8a:16:ac:11:e5:8d:b0:18:d0:c5:0f:
         54:12:ff:54:a2:43:fe:3a:42:09:a1:92:98:e1:67:fb:10:06:
         3a:1a:6f:ba:a7:a2:9f:57:70:aa:73:91:09:b0:ac:b0:60:8f:
         6c:53:4e:06:9c:aa:fb:95:22:a3:fb:05:cb:42:34:cc:15:c4:
         23:b6:e2:2e:64:6d:23:b2:48:df:49:22:49:46:91:cd:53:57:
         4d:f6:e9:85:14:71:de:6f:ca:47:6d:aa:62:1e:c6:bf:79:6b:
         c3:45:19:bc:99:66:82:45:a6:f8:fc:63:61:12:ce:12:f2:4f:
         d0:1c:ea:6e:90:0e:8e:26:25:1b:fc:03:c2:ff:91:29:4b:51:
         4b:da:9f:f1:35:c4:28:48:fd:66:8d:84:31:b8:6f:1e:81:f2:
         79:5d:71:39:01:70:ac:bb:41:59:8b:81:6a:b1:9e:b7:6c:e8:
         47:87:c6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:25 2024 by rpki-client on console-ams.rpki-client.org