Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
File:                     wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer (raw, json)
Hash identifier:          dmk2/KydfyNQlhCd1Ae9y3NEGSV7lZ4lEZUL4T5Ai8E=
Subject key identifier:   C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C7876D80DBFDB942DECBAC3889F8A0B73
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 17 Dec 2023 15:48:23 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 212376
                          IP: 185.212.33.0/24
                          IP: 2a13:ef40::/29

Validation:               Failed, certificate revoked on Tue 26 Dec 2023 13:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:78:76:d8:0d:bf:db:94:2d:ec:ba:c3:88:9f:8a:0b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 17 15:48:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:f2:a4:78:52:12:80:be:dc:72:a9:37:6b:
                    f0:4a:be:1c:e8:54:54:89:51:b9:dd:a2:ef:9f:a3:
                    d3:74:52:8c:a9:a9:36:1a:1b:e9:80:25:d1:25:ac:
                    b1:ff:00:47:ff:fb:bd:e0:00:82:ea:4e:ac:e0:22:
                    ec:ab:41:d3:6d:2d:e7:01:18:49:46:ce:84:b2:d0:
                    45:6a:1b:e5:0b:9e:fd:cb:c4:d2:cb:da:a3:3c:04:
                    01:c2:20:32:cf:44:86:c4:c2:77:9e:cf:4e:2f:b7:
                    4a:b8:38:fc:4c:27:fc:01:74:e2:77:39:43:db:a0:
                    43:30:a4:92:c0:d6:9b:6c:06:24:b4:71:f7:e1:18:
                    41:1c:e4:5c:e1:a2:42:26:14:80:76:fd:71:92:8e:
                    e8:82:68:b2:a1:86:95:d2:01:53:ec:2c:23:65:5e:
                    45:f1:a9:0d:ff:99:d0:9c:a6:b6:9c:8a:e7:a9:c0:
                    64:32:e2:b8:72:bb:2f:e2:4f:5d:e7:5e:26:13:b7:
                    6c:4e:8a:f3:e7:b4:f4:3f:98:77:54:28:21:26:2f:
                    f9:09:92:a4:a1:06:5e:99:64:de:79:9b:c4:1a:b3:
                    df:5f:6e:71:fb:a9:76:d7:00:47:ca:08:dd:2a:d8:
                    75:50:d0:cd:d7:ce:05:93:58:28:eb:2b:6e:24:4f:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.33.0/24
                IPv6:
                  2a13:ef40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212376

    Signature Algorithm: sha256WithRSAEncryption
         72:39:3f:04:24:0f:fe:c3:ca:a6:13:b8:c0:80:19:d6:7d:11:
         61:07:e5:bf:25:ab:26:8f:ef:b2:7d:10:2d:00:50:b9:3f:64:
         87:70:33:85:4c:80:92:70:ca:2c:f9:f3:29:57:c9:b0:2f:58:
         30:54:75:91:12:bf:8c:f5:56:f2:22:21:ee:38:b8:a4:5e:b5:
         f7:4a:4c:1c:3d:c5:7d:96:cc:8b:06:19:52:c5:a0:7b:fd:d3:
         64:06:f8:77:82:c8:97:92:86:99:e4:69:df:89:17:c3:25:ef:
         f8:0f:c5:a0:4a:8f:3d:14:8d:8a:ea:48:54:13:bd:98:34:d2:
         74:64:0c:1d:f7:b2:16:4b:37:13:12:f2:11:e2:b7:99:0c:e1:
         d5:40:73:82:82:99:ce:f2:85:2c:7f:8b:73:3e:25:06:8b:f4:
         b2:78:18:ea:02:84:37:90:49:74:0c:0c:5e:73:90:61:35:ff:
         f6:67:69:43:32:13:b7:45:92:00:a2:9f:3a:f8:1e:b8:c7:d2:
         fd:f2:b7:37:b4:2f:92:2b:74:7a:72:c1:4c:62:1c:93:a5:46:
         df:60:86:c6:ac:8a:3b:08:75:b2:59:ef:ea:ab:b6:2f:79:b2:
         f6:e6:9c:5c:e6:ce:e4:72:7a:af:e8:76:9c:0d:a4:5b:61:70:
         75:c0:10:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:55 2024 by rpki-client on console-fra.rpki-client.org