Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vJOgE8zUbCTYD5Bi8JjAfSL1E-0.cer
File:                     vJOgE8zUbCTYD5Bi8JjAfSL1E-0.cer (raw, json)
Hash identifier:          AsAhvQlntH9ajaSsTGTuRnZVf9BHgpHUm85yYC1hYPg=
Subject key identifier:   BC:93:A0:13:CC:D4:6C:24:D8:0F:90:62:F0:98:C0:7D:22:F5:13:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFB230912E6C089E21521F48F9A5340
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/26/75c6c8-0e64-4ebd-92e9-79df99ecf08c/1/vJOgE8zUbCTYD5Bi8JjAfSL1E-0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/26/75c6c8-0e64-4ebd-92e9-79df99ecf08c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 57417
                          IP: 185.130.48.0/22
                          IP: 2a06:d7c0::/29

Validation:               Failed, certificate revoked on Wed 12 Jul 2023 11:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:23:09:12:e6:c0:89:e2:15:21:f4:8f:9a:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc93a013ccd46c24d80f9062f098c07d22f513ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:7e:5c:0c:4f:0a:17:31:d8:01:ab:4a:10:
                    84:68:b2:a4:a9:76:db:cb:09:31:96:20:f4:8d:45:
                    78:da:8a:90:39:1b:3f:11:6e:77:9a:bb:40:a4:b2:
                    4d:14:28:de:19:5f:19:cd:ba:78:33:a3:e7:2a:b3:
                    97:fd:63:f8:f7:81:d4:e8:81:e3:e8:9f:3b:e7:4f:
                    47:64:21:25:3f:01:27:ab:00:aa:6f:e7:d3:49:66:
                    3f:f1:c8:d4:5b:70:80:33:51:d0:c4:13:11:a8:e9:
                    ea:f0:5d:a2:8a:08:2c:9e:8e:0a:3b:85:7a:4e:28:
                    37:18:67:aa:d5:34:01:22:21:45:e4:b6:ee:f3:9a:
                    b7:7a:37:e8:37:39:56:50:13:c4:86:fa:54:14:69:
                    b4:43:2e:a8:97:35:d0:60:d8:0c:56:91:52:02:b0:
                    d7:75:20:be:15:50:7a:1d:3b:d6:90:4c:27:86:d3:
                    eb:5a:bb:56:70:d9:11:94:e1:89:d8:55:1d:4d:55:
                    ab:9a:25:d4:f1:d6:02:44:57:ad:b1:8f:0f:10:cd:
                    ad:e6:0a:c9:d3:de:75:f2:45:31:93:5c:28:f5:66:
                    f5:60:72:9f:5e:98:65:63:9b:2c:a2:b4:44:ab:df:
                    a9:18:73:43:d0:0e:6c:e3:fb:c6:f6:a8:6d:3a:73:
                    31:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:93:A0:13:CC:D4:6C:24:D8:0F:90:62:F0:98:C0:7D:22:F5:13:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/75c6c8-0e64-4ebd-92e9-79df99ecf08c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/75c6c8-0e64-4ebd-92e9-79df99ecf08c/1/vJOgE8zUbCTYD5Bi8JjAfSL1E-0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.48.0/22
                IPv6:
                  2a06:d7c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57417

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:d8:0e:e7:5c:e9:5a:a4:d6:2b:b4:26:99:5a:77:14:16:
         d0:ce:75:89:68:32:54:84:53:68:24:1c:32:96:a8:8d:5e:3b:
         93:da:ef:98:65:39:03:0f:5a:ba:09:93:a7:d9:0d:2d:00:2f:
         ee:a6:d8:6a:cd:bf:e3:e0:14:4c:68:4c:e2:8e:ae:ec:03:7a:
         00:db:8f:bf:24:b7:f8:dc:61:75:8b:7c:96:7c:4a:8d:aa:fc:
         d9:97:d4:84:ca:81:3d:90:a7:ce:0c:9c:b4:cf:91:c4:44:20:
         42:d4:3d:1d:31:34:07:ac:56:86:cd:dc:8d:01:28:b2:bb:e8:
         a7:0a:b7:b8:bb:9f:cb:21:23:5e:66:e1:66:c0:86:1e:b1:de:
         b6:ba:52:a8:70:ba:f4:6f:6a:74:e6:c4:af:7d:b5:20:19:8c:
         6a:0e:5f:dd:f7:93:fb:97:f4:22:20:3d:60:3a:45:c8:00:4f:
         c0:c8:0b:c3:fd:e2:3b:fc:71:5e:31:52:0c:cd:3c:76:7b:41:
         cc:26:33:66:00:f6:87:f5:5d:6c:45:26:6a:0c:57:c4:5d:8b:
         30:44:b9:1a:f4:92:91:76:e1:4f:4f:bc:87:d7:ac:06:19:66:
         49:96:59:14:d4:a8:a7:dc:2a:b1:79:1e:de:fa:94:89:64:d7:
         41:00:b3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:28 2024 by rpki-client on console-ams.rpki-client.org