Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wC6BYCKOxnvXVvshowK7lGfxEyc.cer
File:                     wC6BYCKOxnvXVvshowK7lGfxEyc.cer (raw, json)
Hash identifier:          OHKU6I7o8nWF+IGflLUY9jepzm8zwgMqNQ3bbVG/PXQ=
Subject key identifier:   C0:2E:81:60:22:8E:C6:7B:D7:56:FB:21:A3:02:BB:94:67:F1:13:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187C5A6B6D1C862A7E9D0AB6462E7E6153A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0b/a34a70-9ed1-45ec-b28a-0220fff35b93/1/wC6BYCKOxnvXVvshowK7lGfxEyc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0b/a34a70-9ed1-45ec-b28a-0220fff35b93/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Apr 2023 02:17:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 198924

Validation:               Failed, certificate revoked on Wed 10 May 2023 02:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c5:a6:b6:d1:c8:62:a7:e9:d0:ab:64:62:e7:e6:15:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 28 02:17:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c02e8160228ec67bd756fb21a302bb9467f11327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:70:bf:8f:f8:e3:78:37:af:33:73:65:57:d1:
                    f6:72:e5:3c:dd:e7:64:16:ad:6b:e8:26:ca:f5:8d:
                    6d:90:55:16:76:e9:97:e3:03:36:be:03:18:c7:32:
                    27:9f:34:96:67:ec:79:9e:69:aa:81:90:07:07:43:
                    b7:6a:c5:02:ae:bb:89:23:af:af:11:4b:5d:cb:6a:
                    0f:b4:1a:c5:c6:54:24:b1:ee:6a:69:84:c8:f7:c7:
                    71:65:2e:77:bd:28:7c:bc:a2:ba:f7:4d:04:e1:e8:
                    14:ed:f8:02:44:4a:91:55:ee:bf:7e:9e:31:50:78:
                    8b:60:bd:c3:27:b8:d2:0b:1b:1d:92:46:08:a5:53:
                    4d:6c:27:15:64:4e:ab:6a:89:f7:67:4d:64:bd:16:
                    a6:83:18:34:9e:8b:06:d8:18:00:2e:62:ed:e2:e6:
                    be:4b:33:57:06:c9:22:72:cc:c8:10:a4:37:13:0f:
                    6e:af:57:1e:bf:53:4e:79:2b:2f:bf:d9:37:76:8f:
                    dd:50:0b:63:31:ed:37:45:e5:52:92:71:81:4c:9b:
                    34:7e:fa:df:06:eb:83:64:53:a9:9d:6b:93:94:ef:
                    e9:eb:60:a8:54:7a:6f:94:88:48:3e:a9:a1:81:33:
                    de:0d:a6:1b:3e:0e:f6:a5:f9:cd:3f:6f:da:7d:1d:
                    05:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2E:81:60:22:8E:C6:7B:D7:56:FB:21:A3:02:BB:94:67:F1:13:27
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a34a70-9ed1-45ec-b28a-0220fff35b93/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a34a70-9ed1-45ec-b28a-0220fff35b93/1/wC6BYCKOxnvXVvshowK7lGfxEyc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198924

    Signature Algorithm: sha256WithRSAEncryption
         68:26:f6:7f:16:13:dc:d9:37:98:cf:91:b1:36:4e:66:04:6a:
         c9:ad:c8:89:ae:35:10:c8:1b:1b:d4:29:67:46:54:d4:4d:e6:
         66:59:0a:30:18:84:b7:4c:11:c1:1e:07:21:1f:61:2d:ae:b4:
         0a:d8:71:40:38:76:4f:45:86:77:6b:8b:6a:3d:2e:33:e1:3c:
         e8:74:42:58:ff:ed:07:d9:a0:22:b6:c4:38:37:c6:29:c4:7e:
         3d:5c:fd:c1:1d:9c:21:67:ec:35:10:a4:69:ae:60:19:49:24:
         32:ac:73:eb:b4:48:2d:7d:2b:6c:94:e0:8c:97:23:0d:e2:41:
         f1:50:3c:78:43:03:8d:00:f0:ca:c3:5c:1c:cd:62:01:9a:19:
         7f:9f:04:2c:67:1a:4d:e6:07:c7:c2:fd:ed:48:3d:3c:6c:53:
         f3:13:a4:fb:63:04:9b:b5:5d:86:a1:77:ce:04:9b:62:66:7b:
         f0:75:97:03:83:bc:61:0a:fa:da:4c:0e:89:ab:ba:24:fe:0b:
         22:2f:b1:98:d7:90:9a:6e:d8:af:f4:39:06:68:3b:6b:6a:a9:
         60:60:17:de:79:2f:f7:8f:56:0e:83:86:44:aa:ac:20:e1:81:
         f1:ff:a7:a4:d6:4c:a5:08:98:fb:f5:84:e3:e6:1c:f5:64:12:
         c3:d3:42:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:49 2024 by rpki-client on console-fra.rpki-client.org