Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wngi4iv_oxK4cdCrk6no6xxEzuo.cer
File:                     wngi4iv_oxK4cdCrk6no6xxEzuo.cer (raw, json)
Hash identifier:          2qROQpethxtJG/isn3uOuomptY6kqOKxVBZFH2LFy4Q=
Subject key identifier:   C2:78:22:E2:2B:FF:A3:12:B8:71:D0:AB:93:A9:E8:EB:1C:44:CE:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED3EFF4FDB5E56148D8136855CCBC87
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/wngi4iv_oxK4cdCrk6no6xxEzuo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 50137
                          IP: 193.104.150.0/24

Validation:               Failed, certificate revoked on Tue 24 Oct 2023 13:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:ef:f4:fd:b5:e5:61:48:d8:13:68:55:cc:bc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c27822e22bffa312b871d0ab93a9e8eb1c44ceea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:36:8f:82:78:81:db:5a:65:35:9c:56:56:
                    ad:aa:c1:03:9d:b8:24:5c:ef:5f:91:b5:16:03:39:
                    ee:ca:a9:94:cf:20:5f:4c:f1:cf:53:d8:26:a6:c9:
                    f3:f8:76:35:b2:3c:6b:09:ab:cf:21:dc:f6:c0:b0:
                    85:84:fb:74:77:08:b3:0e:7a:78:cc:7b:fe:92:c1:
                    f5:33:b4:68:65:47:03:03:9b:ab:5a:21:35:83:f2:
                    21:ae:35:fb:88:54:dd:4e:6f:14:b9:f9:b2:a0:db:
                    c8:c8:cd:30:3f:3c:b3:ed:ea:13:be:ab:f5:e8:9c:
                    40:c2:76:72:71:0c:73:23:82:83:a4:bb:3b:32:2c:
                    0f:52:07:98:c4:bc:66:89:2a:6e:5d:a2:9e:33:a6:
                    7e:54:c6:e0:7d:18:5f:d2:ae:d4:4c:f2:0f:41:a6:
                    78:0f:27:90:3a:3b:ce:e3:b7:8a:b7:a3:b8:58:e3:
                    77:5f:75:6b:18:6d:b0:00:e2:34:17:0e:9d:65:37:
                    51:ac:32:54:c2:c2:68:de:6c:12:25:f2:d1:b6:b0:
                    0c:c8:0d:ae:64:53:34:36:33:4f:6d:4f:fe:d1:7f:
                    2f:c8:70:64:0c:f1:04:1f:2b:c5:21:ba:4f:e4:9d:
                    d7:ea:7c:84:e9:c6:d0:35:cc:e4:01:a4:14:9c:2d:
                    0f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:78:22:E2:2B:FF:A3:12:B8:71:D0:AB:93:A9:E8:EB:1C:44:CE:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/wngi4iv_oxK4cdCrk6no6xxEzuo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.150.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50137

    Signature Algorithm: sha256WithRSAEncryption
         9d:62:45:91:ca:1b:ea:c0:25:3e:7c:10:df:5e:1a:ca:f1:c6:
         f7:44:1c:6f:50:53:af:f5:f0:e4:33:12:02:21:71:1d:82:74:
         47:d0:5a:19:16:b1:da:9d:69:ad:12:28:97:86:90:27:4f:af:
         4f:43:27:08:88:53:46:05:7e:93:86:66:0f:29:58:a6:e0:f8:
         72:a5:d0:22:69:0e:ab:5b:b0:af:98:74:13:03:9b:bd:9b:85:
         6a:9c:01:c4:bf:02:b7:da:3f:93:43:dc:13:64:ad:6c:27:19:
         7c:3d:a9:7e:cc:d3:e1:de:a7:b3:53:8f:67:61:42:43:5b:6f:
         0b:75:d3:1c:1d:e6:13:7a:63:14:17:54:1a:d8:61:8a:ce:5c:
         cb:19:22:ed:1a:23:5e:62:1f:12:ba:86:55:f8:b4:4c:ef:7b:
         1f:5c:5b:55:d4:c2:41:50:e7:93:b2:b2:bf:6c:ec:87:ff:2a:
         46:23:64:16:50:e0:a4:05:c9:de:94:0e:ee:c0:87:d0:0c:00:
         61:4a:40:fd:4a:15:2e:22:42:45:0b:c4:e6:21:e5:f7:c6:6f:
         69:92:f5:16:21:9b:50:84:99:0a:fe:e0:ea:b6:14:74:8c:9b:
         18:a0:3a:af:c0:31:3f:b1:7e:19:8e:58:f8:80:27:32:8b:6e:
         6d:a2:79:35
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYVu0+/0/bXlYUjYE2hVzLyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjc4MjJlMjJiZmZhMzEyYjg3MWQwYWI5M2E5ZThlYjFjNDRjZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrM2j4J4gdtaZTWcVlatqsEDnbgk
XO9fkbUWAznuyqmUzyBfTPHPU9gmpsnz+HY1sjxrCavPIdz2wLCFhPt0dwizDnp4
zHv+ksH1M7RoZUcDA5urWiE1g/IhrjX7iFTdTm8UufmyoNvIyM0wPzyz7eoTvqv1
6JxAwnZycQxzI4KDpLs7MiwPUgeYxLxmiSpuXaKeM6Z+VMbgfRhf0q7UTPIPQaZ4
DyeQOjvO47eKt6O4WON3X3VrGG2wAOI0Fw6dZTdRrDJUwsJo3mwSJfLRtrAMyA2u
ZFM0NjNPbU/+0X8vyHBkDPEEHyvFIbpP5J3X6nyE6cbQNczkAaQUnC0PCQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFMJ4IuIr/6MSuHHQq5Op6OscRM7qMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzcwNDA4
ZS05ZDQ0LTQ3ODMtOWJmZi1hMWQxNzZmZWRiODYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvNzA0MDhl
LTlkNDQtNDc4My05YmZmLWExZDE3NmZlZGI4Ni8xL3duZ2k0aXZfb3hLNGNkQ3Jr
Nm5vNnh4RXp1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwWiWMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDD2TANBgkqhkiG9w0BAQsFAAOCAQEAnWJFkcob6sAlPnwQ314ayvHG90Qcb1BT
r/Xw5DMSAiFxHYJ0R9BaGRax2p1prRIol4aQJ0+vT0MnCIhTRgV+k4ZmDylYpuD4
cqXQImkOq1uwr5h0EwObvZuFapwBxL8Ct9o/k0PcE2StbCcZfD2pfszT4d6ns1OP
Z2FCQ1tvC3XTHB3mE3pjFBdUGthhis5cyxki7RojXmIfErqGVfi0TO97H1xbVdTC
QVDnk7Kyv2zsh/8qRiNkFlDgpAXJ3pQO7sCH0AwAYUpA/UoVLiJCRQvE5iHl98Zv
aZL1FiGbUISZCv7g6rYUdIybGKA6r8AxP7F+GY5Y+IAnMotubaJ5NQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:54 2024 by rpki-client on console-fra.rpki-client.org