Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/waEcoFnkTUEON4YetgQKom5oeQM.cer
File:                     waEcoFnkTUEON4YetgQKom5oeQM.cer (raw, json)
Hash identifier:          xgwASiGJzdQEtwiyKJ/1L0UKaTSYjVkyqxgUbpjlPzY=
Subject key identifier:   C1:A1:1C:A0:59:E4:4D:41:0E:37:86:1E:B6:04:0A:A2:6E:68:79:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187C779BCC88A412563FD0C7425ADE6F47B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/waEcoFnkTUEON4YetgQKom5oeQM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Apr 2023 10:47:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.169.218.0/23
                          IP: 2a13:ba00::/29

Validation:               Failed, certificate revoked on Fri 08 Sep 2023 13:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c7:79:bc:c8:8a:41:25:63:fd:0c:74:25:ad:e6:f4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 28 10:47:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1a11ca059e44d410e37861eb6040aa26e687903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:3d:76:6a:c3:b1:e2:99:36:1a:50:74:56:
                    f1:50:98:15:20:4b:45:42:3a:e5:0f:b4:98:60:61:
                    f1:b1:cc:0c:16:00:68:2b:c5:f0:b8:53:52:87:23:
                    25:e8:0c:85:87:30:85:8a:6f:56:fb:2e:f7:7f:6f:
                    6c:f8:ba:16:4c:94:61:29:fd:8b:c0:ef:d1:20:e8:
                    e7:c0:ca:6f:b8:81:0f:71:7f:c7:12:39:1d:15:69:
                    04:ad:52:8c:8a:95:0d:13:52:c7:41:ab:d4:f4:2c:
                    de:79:42:0c:02:7a:12:4e:f8:ac:f8:2c:e2:ab:26:
                    58:ae:f8:d6:9f:1a:03:a8:a9:e0:34:48:fb:0f:c0:
                    1e:f4:10:16:a7:f0:9e:dc:f9:f0:e9:a4:e6:af:6b:
                    0c:da:33:5d:41:01:cc:c1:67:3b:25:f6:3d:82:0c:
                    fd:12:69:4c:63:4c:7b:57:83:a9:94:01:3c:91:f8:
                    0d:d9:2a:22:8e:24:2b:57:50:cc:32:9d:26:db:fa:
                    da:e6:b7:21:73:49:f3:1d:03:d8:e4:04:33:e9:f8:
                    81:28:ae:8d:6e:ca:fd:3b:19:c5:9b:e4:18:05:18:
                    3f:cb:6a:6e:73:06:2d:10:f2:95:06:c3:79:d7:54:
                    cd:bd:12:49:f7:0d:68:98:6b:20:c0:58:af:c2:e2:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A1:1C:A0:59:E4:4D:41:0E:37:86:1E:B6:04:0A:A2:6E:68:79:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/waEcoFnkTUEON4YetgQKom5oeQM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.218.0/23
                IPv6:
                  2a13:ba00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a3:d1:84:7e:a9:9f:90:99:98:0a:10:d4:85:47:c2:c8:ff:8c:
         36:ab:45:d6:6b:ff:9f:e1:da:71:6b:b1:11:d5:af:84:b4:a4:
         90:b0:1e:4c:fd:a5:80:96:ff:02:92:84:d7:8a:1d:87:cc:2c:
         4e:18:94:03:28:a9:76:17:a3:94:0a:d7:96:47:04:29:4e:c0:
         34:ee:26:f3:32:f4:65:e2:66:e5:1d:8f:54:37:17:79:c4:db:
         73:99:55:fd:02:7c:23:0b:a7:b4:e8:97:ae:f0:1b:21:1c:77:
         c1:60:33:e0:d5:28:bc:d6:c9:4f:15:63:31:6f:ef:79:61:ef:
         43:69:0f:78:fe:73:fe:ab:92:19:40:cb:db:b6:26:b1:c9:67:
         d8:4a:a1:e7:4b:05:5e:a4:34:54:cd:c7:34:05:da:1c:78:93:
         1b:a7:25:fd:81:50:54:a3:8f:df:4e:0e:be:ce:eb:67:71:73:
         50:f4:20:07:92:1c:79:9d:45:4e:3b:51:02:4e:58:40:c0:bf:
         2e:ea:c7:cc:e3:76:7f:e8:d5:56:0e:76:b0:49:0b:60:7c:f6:
         5d:b7:57:94:e5:da:a5:f2:47:84:90:af:bf:ab:37:80:77:f7:
         36:c0:97:79:18:ea:c1:63:45:0b:60:78:c6:07:48:c8:6d:c4:
         a0:74:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:49 2024 by rpki-client on console-ams.rpki-client.org