Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wP-vjMrjY52XSN3cuDPNCIk4qQE.cer
File:                     wP-vjMrjY52XSN3cuDPNCIk4qQE.cer (raw, json)
Hash identifier:          pafF4Sb9XLQ5eaFV6/eodwHM754Uffq2kn6KTOStAQw=
Subject key identifier:   C0:FF:AF:8C:CA:E3:63:9D:97:48:DD:DC:B8:33:CD:08:89:38:A9:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01867E9DB09482168445DB54F82D10230F08
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/wP-vjMrjY52XSN3cuDPNCIk4qQE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 23 Feb 2023 14:11:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.163.6.0/24

Validation:               Failed, certificate revoked on Wed 16 Aug 2023 08:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7e:9d:b0:94:82:16:84:45:db:54:f8:2d:10:23:0f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 23 14:11:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0ffaf8ccae3639d9748dddcb833cd088938a901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:75:9f:35:2c:7a:5d:86:93:09:74:ee:22:
                    b3:11:f4:82:5c:5f:81:9e:34:65:08:74:27:3a:04:
                    b4:22:cd:a1:03:75:cf:c5:f0:1f:05:83:66:2d:55:
                    89:23:10:24:96:0d:2e:36:66:b5:a5:fa:7c:79:70:
                    a4:11:cb:c4:09:c1:49:2e:d0:66:b7:44:c3:86:55:
                    65:6f:5b:5a:10:09:75:5b:f4:26:e8:4a:78:3c:22:
                    92:45:f8:87:24:4b:f0:b2:04:f2:d0:47:ff:7e:79:
                    a5:cf:d7:a6:1a:07:7f:4a:fb:c5:ca:6a:f0:bc:0a:
                    6d:29:65:46:db:6a:83:39:0c:ad:ab:7b:19:45:8e:
                    e4:93:5e:cb:ff:e8:9c:7d:1d:6b:c4:84:90:4a:2f:
                    0d:1d:fe:39:32:58:bc:fc:a7:9e:a3:39:2c:cf:63:
                    a3:fb:7d:bf:31:64:cc:6a:51:df:87:0c:58:b8:06:
                    b7:6e:84:5d:dc:cd:71:32:8e:b5:31:ff:d7:7f:84:
                    7f:71:9a:2f:56:55:0b:cb:f0:64:9b:86:32:ed:27:
                    ef:e0:d6:38:e6:58:bb:58:f9:d7:f3:cc:33:05:e4:
                    74:68:30:50:f4:ba:8a:1d:7c:be:4a:8e:93:80:41:
                    7d:fc:ba:50:14:b2:75:a9:dd:51:0a:36:8e:6e:89:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FF:AF:8C:CA:E3:63:9D:97:48:DD:DC:B8:33:CD:08:89:38:A9:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/wP-vjMrjY52XSN3cuDPNCIk4qQE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:bb:1e:70:2f:d1:f6:a9:2f:79:fd:a8:c8:33:90:a3:61:76:
         1d:00:b0:c3:f1:63:33:10:50:0b:70:3a:39:0c:88:f0:44:03:
         46:fa:b4:37:6b:47:54:eb:08:44:2f:d4:c9:9a:da:8f:ae:0f:
         10:84:34:ab:2a:92:33:48:11:2d:e5:5e:a2:50:e2:70:0b:0f:
         1a:f4:c0:58:ba:e3:3e:ea:af:59:42:81:ce:b0:ba:2c:99:75:
         3c:52:fa:5a:65:32:6c:cb:eb:73:33:79:7c:50:d4:23:18:7e:
         6f:97:f2:0d:26:2b:a1:8a:c7:f2:66:89:23:74:2a:d4:3d:91:
         98:be:dc:8f:21:b2:ab:9c:e8:cb:16:a6:a5:4b:5e:20:48:0a:
         b8:ae:4e:b4:6c:f8:bc:1a:8c:fb:5b:89:cb:3a:be:0c:8f:92:
         b2:fd:0b:7f:09:69:47:c0:41:69:0e:8c:55:07:fc:3a:a6:c7:
         b4:84:65:79:85:78:d0:35:92:c8:9a:d1:b7:9b:94:09:e0:67:
         c5:fe:ef:de:c7:cd:f0:18:69:74:35:f2:80:bc:a9:e6:01:52:
         96:c7:92:85:06:8d:fc:40:da:4d:ab:f0:3b:37:e4:32:da:fa:
         86:0c:9f:ff:da:ab:8f:49:ec:83:23:6f:5e:6b:81:b2:96:90:
         cc:ab:0e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:45 2024 by rpki-client on console-ams.rpki-client.org