Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wB4BpACXWXXOhrFfWaZSqA3DUJw.cer
File:                     wB4BpACXWXXOhrFfWaZSqA3DUJw.cer (raw, json)
Hash identifier:          uFVpyBgJ0++1m8p2NfPvOLCg6ZYFWumjDaiHhzA/v2g=
Subject key identifier:   C0:1E:01:A4:00:97:59:75:CE:86:B1:5F:59:A6:52:A8:0D:C3:50:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4C6AF9AFAB95191233EB657A95428
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/wB4BpACXWXXOhrFfWaZSqA3DUJw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:44 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 39082
                          IP: 195.60.178.0/23

Validation:               Failed, certificate revoked on Tue 13 Jun 2023 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:c6:af:9a:fa:b9:51:91:23:3e:b6:57:a9:54:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c01e01a400975975ce86b15f59a652a80dc3509c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:e8:ec:a2:9e:f5:85:52:35:aa:28:87:2b:
                    9a:4b:36:fb:89:e3:07:2b:d5:70:e5:2d:d6:22:d0:
                    7c:23:81:a2:7e:23:5b:0f:bf:ef:6a:e6:a5:fc:02:
                    71:39:e0:94:26:2d:22:06:3a:10:df:1c:fd:0a:b4:
                    65:38:a4:1c:33:8d:e1:ee:57:70:7f:ed:0a:0f:64:
                    33:30:bb:3f:aa:9c:b8:2c:1f:cc:28:a4:31:8a:45:
                    32:ba:4f:5c:05:d1:75:87:9e:d8:a1:70:bf:92:1d:
                    93:27:bd:8c:ae:15:4d:e0:83:0b:43:58:86:c4:a0:
                    e2:cb:71:4b:ab:92:f5:f4:6d:ae:b5:fc:c8:2c:7f:
                    f8:ed:2b:40:72:cd:7d:8c:fb:61:96:1e:47:93:79:
                    b1:bd:77:e8:30:52:f6:c9:af:66:4d:e9:09:3f:98:
                    72:c2:95:f5:33:38:29:2f:fa:e1:c3:5e:d1:92:8a:
                    33:98:16:cb:da:a3:a4:e6:82:cf:c1:c3:54:66:7a:
                    2b:bc:fa:02:a3:5b:fc:68:3f:52:36:03:5a:04:ee:
                    cc:6f:1b:4d:39:0d:ae:0f:1a:39:59:50:eb:ff:3b:
                    5a:b7:75:1e:1d:d7:fb:08:db:ed:ad:20:f5:dc:74:
                    45:d9:ce:83:b9:15:9a:18:85:ab:85:56:94:7d:20:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1E:01:A4:00:97:59:75:CE:86:B1:5F:59:A6:52:A8:0D:C3:50:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c4091f-0478-416c-bfee-79aa8a4bdaaa/1/wB4BpACXWXXOhrFfWaZSqA3DUJw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.60.178.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39082

    Signature Algorithm: sha256WithRSAEncryption
         0a:c3:a6:53:f7:3b:2f:a7:87:0b:c6:f5:bf:f1:d9:a7:d9:3e:
         0f:a2:4d:91:18:32:d8:92:20:02:fd:10:1d:27:93:0c:37:26:
         3b:46:ce:7d:03:38:f6:e0:ff:1d:c3:4b:07:47:1e:a3:81:8b:
         70:6a:e0:1e:43:59:09:d7:35:84:00:e2:f0:d6:b6:c2:a2:12:
         d0:92:c8:22:ad:a8:bf:2f:cf:f8:bb:3e:f2:78:31:9a:02:3e:
         9e:33:2b:68:6b:c4:18:57:40:ec:c2:45:fb:94:7b:68:e9:e3:
         05:bb:55:ac:44:99:2c:d6:af:0f:7f:9b:0b:ea:8d:8e:ae:f3:
         06:fe:dd:06:cd:61:02:75:bd:ea:00:e7:a6:72:94:e6:8c:10:
         82:dd:0d:a8:30:68:90:6c:fc:2e:c6:5e:67:4d:ac:3b:50:ef:
         59:37:85:95:8d:41:ad:5d:3f:09:87:89:7e:b8:42:1f:e8:08:
         99:12:08:f3:ca:67:c0:b8:b2:2b:f6:88:50:78:03:f8:d4:fa:
         d9:04:a5:5e:f1:de:9e:73:ed:eb:06:a1:df:d5:7a:2c:45:58:
         32:cd:44:b0:b5:72:8d:21:52:ab:bf:e5:2c:15:64:9b:40:a8:
         07:36:86:ea:7a:46:fc:ea:b9:55:63:65:49:b1:2f:47:aa:a5:
         85:f6:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:48 2024 by rpki-client on console-fra.rpki-client.org