Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
File:                     vpapQJ2ZXnArISyT9tTJmp2ybko.cer (raw, json)
Hash identifier:          B+G/+rrlS2l/qOCRVI5p4HEMGBaUPnuulqg98J9JX/Q=
Subject key identifier:   BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857243D59E4471CD1D5676706013395580
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:35:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 205069
                          IP: 195.244.64.0/19

Validation:               Failed, certificate revoked on Wed 27 Sep 2023 13:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:43:d5:9e:44:71:cd:1d:56:76:70:60:13:39:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:35:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c4:ea:07:f4:bf:6a:e6:20:48:a0:7d:e9:05:
                    5f:62:b4:cf:2a:26:05:1f:a0:e0:bc:03:65:ca:77:
                    9c:be:5b:4b:b5:d9:dc:c3:b1:1c:4e:b1:9a:0f:da:
                    27:33:ce:35:31:fc:d1:60:45:3b:79:0e:e0:e1:1b:
                    52:b8:1c:ce:2b:42:8f:b1:e1:64:2b:4e:8b:cf:ce:
                    1e:af:da:1d:09:6f:c9:54:38:a6:fb:8e:15:4b:3b:
                    78:79:86:84:46:e3:7a:e1:3f:5e:e8:b6:25:d8:a4:
                    4c:b7:99:15:cc:b4:e8:7b:3e:b2:cf:98:57:57:4e:
                    20:2f:e6:c4:83:47:7d:6d:fb:ed:ec:7f:bc:ed:b5:
                    ca:49:e3:02:5e:40:06:75:1d:f4:66:7f:da:e1:ed:
                    08:62:9d:be:cf:a1:87:14:ce:a5:5e:80:b8:81:9e:
                    0b:13:20:3b:47:18:d9:61:f0:6b:6c:00:ab:ff:4d:
                    4c:cc:1b:27:6d:74:e9:84:41:65:36:77:69:5e:b2:
                    e7:bb:f4:ee:3c:a1:ab:53:92:7d:f4:37:e7:90:17:
                    91:76:5b:2c:20:83:01:a0:dd:df:ba:5f:27:bc:e2:
                    59:00:7b:3f:09:06:70:06:4c:86:39:e0:b4:aa:44:
                    92:07:c4:89:68:ac:b7:34:d6:1a:bf:96:21:4e:0e:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.244.64.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205069

    Signature Algorithm: sha256WithRSAEncryption
         43:6a:2c:fb:4b:1b:34:a3:8e:78:18:77:a0:cb:cf:b1:21:b5:
         77:27:fe:09:4a:f5:6e:d6:ef:03:0a:af:d0:ec:47:c7:e7:32:
         5f:d2:b6:a8:8b:7c:04:ba:93:0f:54:d6:40:93:7a:3d:1d:e6:
         ca:6c:02:5e:68:89:01:c2:e4:aa:0d:d7:9b:fb:37:73:b7:f7:
         b2:37:35:ff:6b:65:fe:74:63:1f:e1:49:3b:f9:aa:fc:15:37:
         52:ac:43:c2:3e:4c:65:e5:14:cd:e9:dc:c3:66:b8:f4:b3:f1:
         a1:fb:53:1d:68:85:7a:1c:52:51:6a:25:e0:0a:ce:45:d1:00:
         10:bd:46:73:13:25:13:57:09:de:b6:d4:8b:dc:4b:ea:6e:07:
         aa:28:18:f4:6c:ac:c6:0d:18:23:d6:1c:ad:a8:d6:5c:50:63:
         d1:bf:2e:f7:4a:83:33:f5:e6:48:96:ca:fb:eb:09:0e:6e:82:
         01:33:ca:6c:bd:13:92:fc:8c:ca:e1:f6:0e:fd:f0:a0:6f:4d:
         fd:50:87:cc:93:93:a9:e6:0c:0c:70:8b:59:a3:cb:e0:c9:49:
         84:9b:5f:85:f8:ce:f0:48:44:98:e1:29:59:b0:97:b8:96:47:
         aa:6f:ae:14:5e:99:d1:e8:15:1d:7a:da:43:d5:bd:f6:1d:a3:
         3a:e8:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:45 2024 by rpki-client on console-fra.rpki-client.org