Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v9rnfvi9dqOSwXxNxid0hqSfgZ4.cer
File:                     v9rnfvi9dqOSwXxNxid0hqSfgZ4.cer (raw, json)
Hash identifier:          JgzI2EgD60u1n5zsgD65AVSVMang5+G2DdYd0tZ1XYw=
Subject key identifier:   BF:DA:E7:7E:F8:BD:76:A3:92:C1:7C:4D:C6:27:74:86:A4:9F:81:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A93F8B5C9E6B9ED90F59B77E493264599
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://0.sb/repo/sb/12/BFDAE77EF8BD76A392C17C4DC6277486A49F819E.mft
caRepository:             rsync://0.sb/repo/sb/12/
Notify URL:               https://0.sb/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 13:54:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.23.196.0/24

Validation:               Failed, certificate revoked on Thu 14 Dec 2023 12:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:93:f8:b5:c9:e6:b9:ed:90:f5:9b:77:e4:93:26:45:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 14 13:54:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bfdae77ef8bd76a392c17c4dc6277486a49f819e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e7:1e:93:0e:dd:4a:42:4a:6d:63:74:07:33:
                    95:a5:8a:bd:cc:d3:8f:fc:91:f8:a5:81:ac:4a:cf:
                    44:2b:19:37:17:63:ca:a2:75:93:fd:f0:03:0c:05:
                    5d:71:bb:bd:6a:3e:a4:e9:4a:aa:b8:3c:a7:23:96:
                    f5:6d:ce:98:2a:42:7a:69:3f:92:26:69:bc:3f:ab:
                    0f:7f:ad:6a:ff:bc:24:b4:b3:cf:79:0c:18:a1:77:
                    72:76:6f:a4:64:9b:42:f4:40:07:08:00:7d:83:a9:
                    c6:33:2a:34:47:7e:f3:2a:b1:5a:79:62:50:d1:94:
                    9b:94:34:11:b7:97:45:49:d4:da:5a:14:a2:db:d5:
                    e3:0f:32:44:84:36:d4:76:5f:ae:05:0d:55:94:bc:
                    09:b1:ca:e2:5f:e1:66:f5:be:86:db:a6:17:43:71:
                    07:c2:08:24:29:01:1a:6b:f2:8e:78:9f:77:b2:25:
                    37:2b:12:0e:d2:43:0d:88:90:8a:cb:88:bf:be:2b:
                    47:47:58:0f:6d:3a:29:82:98:7f:bc:9b:98:4d:de:
                    a5:11:b6:00:52:18:55:62:81:0d:fc:82:4a:f9:a2:
                    59:91:57:5c:f7:aa:8e:61:8c:55:51:ce:cb:9e:20:
                    a9:ba:74:c7:58:29:68:02:8e:bf:66:3e:08:0f:7e:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DA:E7:7E:F8:BD:76:A3:92:C1:7C:4D:C6:27:74:86:A4:9F:81:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://0.sb/repo/sb/12/
                RPKI Manifest - URI:rsync://0.sb/repo/sb/12/BFDAE77EF8BD76A392C17C4DC6277486A49F819E.mft
                RPKI Notify - URI:https://0.sb/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b4:e5:0a:84:84:19:55:a7:83:e8:0d:8c:7f:8f:a9:20:52:
         c3:9b:d8:44:41:bf:3a:fb:0a:45:c4:46:20:0a:2a:02:f3:41:
         9d:6b:98:78:43:fe:f3:c8:c9:d7:21:04:e6:22:7a:8b:f4:77:
         bc:36:fe:61:99:6f:14:17:ae:75:9f:b4:89:1c:ce:bf:de:43:
         43:b6:88:db:13:77:27:05:58:ac:7b:93:8e:10:70:8a:a1:a2:
         b5:6e:a1:bb:fc:3d:a3:da:1f:1b:23:71:e8:cc:9d:59:e2:76:
         88:9d:d5:de:76:af:23:06:78:c5:b9:db:87:59:e5:7c:f1:c4:
         3d:a3:1b:6e:c9:20:5f:16:b6:ec:14:38:2a:cd:8a:1d:dd:bc:
         af:91:dc:f1:91:d6:cd:3d:b3:20:72:bf:74:ed:55:ee:4d:1e:
         2f:c5:66:a6:5b:b7:ce:17:f2:77:22:77:0c:2c:68:56:dc:66:
         bd:5f:60:30:ba:a3:56:76:ec:21:47:07:1c:5f:0a:20:2a:a6:
         f9:34:ae:5a:8b:f4:ad:35:fe:d0:5b:57:df:50:a7:88:d4:8a:
         de:1f:e9:40:58:60:f5:59:57:6d:ab:51:fa:7f:92:45:40:b3:
         16:b3:b7:a8:1b:ed:74:0e:b8:8b:da:f5:f7:e8:ed:87:7d:2f:
         89:1f:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:26 2024 by rpki-client on console-ams.rpki-client.org