Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/weiWo3qDmfrr9AA1vw9KlZz6W_I.cer
File:                     weiWo3qDmfrr9AA1vw9KlZz6W_I.cer (raw, json)
Hash identifier:          YX2Ce4yPTHFeFIaCWwHKyqAd6kWFZGU7wqyItfG8ipA=
Subject key identifier:   C1:E8:96:A3:7A:83:99:FA:EB:F4:00:35:BF:0F:4A:95:9C:FA:5B:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701BCE383B84655F820637AF17893EA8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/weiWo3qDmfrr9AA1vw9KlZz6W_I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:32:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 85.208.16.0/22

Validation:               Failed, certificate revoked on Fri 21 Apr 2023 06:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1b:ce:38:3b:84:65:5f:82:06:37:af:17:89:3e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:32:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1e896a37a8399faebf40035bf0f4a959cfa5bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:08:2b:d3:af:4a:fe:71:da:39:82:16:a2:60:
                    bd:a5:a6:35:9d:c8:54:5d:be:a6:40:07:6f:29:c2:
                    56:11:42:4c:59:be:2a:cb:94:38:e3:ad:61:95:67:
                    17:cc:3d:1e:ad:b2:a6:38:72:d7:8c:82:23:d2:72:
                    7d:e1:c0:ad:07:7e:ea:60:bc:01:cb:2e:a4:2b:e1:
                    4f:b5:30:f5:28:f6:56:df:83:76:7f:a5:db:b1:56:
                    bd:12:b7:ba:e4:b3:67:ea:9d:bc:77:e7:89:b3:ca:
                    86:86:ff:a0:a6:31:7a:a6:6e:ed:25:d9:25:fb:fc:
                    08:90:40:43:c4:32:0e:a9:95:15:87:12:65:af:fe:
                    4b:0b:b6:7b:02:50:7d:2b:5d:5b:f3:b6:e4:05:57:
                    d5:b4:54:9d:78:f6:90:52:3e:f3:8a:ba:e5:6d:1d:
                    fa:b3:88:1f:16:07:46:26:22:6d:ab:1d:d5:ad:11:
                    77:b4:43:24:ca:c3:55:cd:4e:9c:2c:2c:ce:e5:cc:
                    be:be:f0:25:5a:60:fc:e9:8a:4b:d6:69:79:6d:05:
                    f0:59:7a:fe:8e:80:77:d6:65:dc:ff:5e:28:c0:a9:
                    a0:2b:5f:56:bc:53:2e:dc:4b:41:f4:d3:cd:b8:2e:
                    fe:d8:f3:84:01:a1:48:11:52:6f:41:1a:aa:dc:17:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E8:96:A3:7A:83:99:FA:EB:F4:00:35:BF:0F:4A:95:9C:FA:5B:F2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/weiWo3qDmfrr9AA1vw9KlZz6W_I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:09:0d:d1:88:0a:54:22:1a:db:80:87:85:bb:13:03:93:ff:
         51:17:c5:85:e6:0e:0f:ad:da:a2:7d:0c:57:54:69:77:b9:cf:
         b1:c5:1d:42:3a:0b:3a:0e:2e:a4:f0:b3:bd:e5:b4:97:92:e1:
         b0:c4:80:c8:53:41:a7:55:41:8d:3b:99:1c:4e:17:66:91:00:
         e8:13:65:a9:53:91:1e:fb:78:4c:d4:0e:2e:12:bc:91:00:4b:
         8e:3f:4a:b0:d3:28:31:2e:7b:7a:a5:aa:64:5e:77:75:fa:50:
         a8:0d:0d:dd:30:ed:b0:a7:69:3a:b5:af:69:b7:f1:3b:67:cc:
         fe:b2:7b:16:f0:4b:38:44:ba:58:ca:c7:8f:8e:b5:0f:c9:b5:
         03:12:11:51:cf:9b:e8:d4:3a:e5:80:8a:2e:ca:0d:c5:7a:a4:
         15:c6:00:3f:43:e4:9e:2b:6d:2f:fa:fd:93:65:e3:c9:1b:ed:
         58:08:aa:93:bb:74:61:72:45:63:62:98:82:02:39:e9:26:8a:
         88:4f:be:ea:2a:b1:26:5b:24:78:19:c6:3b:cc:e7:31:50:af:
         75:5c:2f:59:bc:de:69:c7:d6:ae:fc:1f:e0:5e:a2:9c:1b:93:
         2b:b0:de:01:71:6c:98:6e:b5:d5:1d:8a:8c:91:48:33:ee:cc:
         29:46:77:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:50 2024 by rpki-client on console-ams.rpki-client.org