Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w0XCp7H5s_NOyE8hOAFVfESocCI.cer
File:                     w0XCp7H5s_NOyE8hOAFVfESocCI.cer (raw, json)
Hash identifier:          cr46BNuPHtWe1qEQWoH2Y6WpjuhQrahfAzYUtJqWV10=
Subject key identifier:   C3:45:C2:A7:B1:F9:B3:F3:4E:C8:4F:21:38:01:55:7C:44:A8:70:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB045F4FFC14DC7510F5B98F91907A7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/74a3a5-2eeb-4768-a0c0-aba19073d072/1/w0XCp7H5s_NOyE8hOAFVfESocCI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/74a3a5-2eeb-4768-a0c0-aba19073d072/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211377

Validation:               Failed, certificate revoked on Tue 21 Nov 2023 16:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:45:f4:ff:c1:4d:c7:51:0f:5b:98:f9:19:07:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c345c2a7b1f9b3f34ec84f213801557c44a87022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:aa:3c:56:5f:70:2b:18:64:45:0c:67:58:
                    a1:9d:c3:0f:a0:d2:1f:de:55:3b:2f:c3:fe:e8:a3:
                    7d:9e:af:4d:5c:f5:9a:eb:8d:c1:ca:d4:62:f4:58:
                    2b:3a:b8:e9:14:bf:b3:95:48:e5:d7:83:7c:7f:43:
                    a4:f7:a7:fd:76:f9:be:66:3d:80:c7:26:6f:b7:37:
                    c1:0b:c4:6a:2f:73:0d:e4:00:e6:ed:98:c2:42:b2:
                    63:6d:84:54:63:30:6f:43:db:0d:15:75:a8:be:28:
                    b7:43:dd:69:89:b1:d4:f6:73:5b:af:20:b9:e2:59:
                    27:73:27:25:51:ab:18:fd:2c:8e:0b:2d:17:7f:67:
                    16:8e:73:46:81:71:69:a2:55:ea:15:11:53:a1:26:
                    5b:24:57:79:3b:bd:9e:0e:be:3b:52:28:ae:25:58:
                    60:90:de:24:6b:c3:ff:6c:00:d1:2d:f2:63:68:45:
                    ea:46:45:af:49:04:e6:13:0d:88:05:22:3e:ef:e6:
                    38:b8:fc:8b:d8:d0:2d:7f:43:b2:6e:50:5c:40:b2:
                    a8:dc:3e:8f:82:6b:31:d6:da:a6:57:32:35:4e:8c:
                    34:db:30:9c:b1:b4:57:2c:72:2c:d6:d8:72:8d:bc:
                    43:f6:54:1a:11:b2:3e:9e:a1:73:4a:f0:3b:42:0b:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:45:C2:A7:B1:F9:B3:F3:4E:C8:4F:21:38:01:55:7C:44:A8:70:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74a3a5-2eeb-4768-a0c0-aba19073d072/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74a3a5-2eeb-4768-a0c0-aba19073d072/1/w0XCp7H5s_NOyE8hOAFVfESocCI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211377

    Signature Algorithm: sha256WithRSAEncryption
         95:0e:57:ee:5f:86:aa:79:9a:42:73:40:df:72:d3:be:25:26:
         ee:2e:a0:91:d1:ca:e9:e4:db:06:cf:08:d3:99:0f:09:b7:15:
         eb:54:62:c5:4d:4e:cb:d5:14:c4:64:23:32:fd:d5:5c:61:fe:
         5e:f9:20:f2:85:4c:8b:ff:7c:0b:23:d3:81:34:c7:31:a9:d4:
         80:f1:d2:b7:d1:b8:dc:da:7a:ce:e3:83:89:36:85:09:d2:1f:
         02:12:f9:44:84:38:b1:b5:78:b8:55:c0:79:e0:56:4e:35:56:
         6d:0c:8e:85:df:21:6d:71:3e:27:05:4b:37:1b:e6:f3:04:14:
         9c:16:e8:82:01:e7:62:32:a1:27:5c:7c:d1:ee:cc:81:a4:97:
         19:df:ab:c8:30:4a:61:60:a3:4e:0f:ce:93:61:8c:4d:04:9b:
         f6:73:c7:ad:91:1a:c5:de:e7:f7:55:e6:35:19:76:35:bd:ab:
         f5:7e:00:f4:50:3a:05:31:92:91:b1:aa:19:fd:d7:61:1d:97:
         ce:03:04:d1:3b:17:4a:08:5d:64:4d:c2:40:9a:cd:9c:17:28:
         11:98:64:27:4c:a4:12:a3:10:57:c6:11:55:0f:44:2e:40:e8:
         8b:1f:dc:fb:83:39:65:25:d3:5f:5e:22:87:39:02:1a:44:82:
         9f:cd:1d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:38 2024 by rpki-client on console-ams.rpki-client.org