Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xMu3_waecN4N9WxLdIFFrrLQGtI.cer
File:                     xMu3_waecN4N9WxLdIFFrrLQGtI.cer (raw, json)
Hash identifier:          0rIM/k6DzTcgIuelfrXgG0q4+P0cJyou35MG0J257Z4=
Subject key identifier:   C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857089D0FAE6DB14D83DBB732259BFFA39
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/xMu3_waecN4N9WxLdIFFrrLQGtI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:32:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 210829
                          IP: 146.255.190.0/24
                          IP: 2a11:ad80::/29

Validation:               Failed, certificate revoked on Fri 29 Dec 2023 08:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:89:d0:fa:e6:db:14:d8:3d:bb:73:22:59:bf:fa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:32:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c4cbb7ff069e70de0df56c4b748145aeb2d01ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:37:54:64:3c:76:ad:28:6f:5d:4d:a5:2e:
                    75:22:d1:19:ba:5d:77:a0:19:a0:c0:c0:59:93:a7:
                    8d:4c:15:f0:17:b2:32:27:1b:8a:3b:f3:be:f4:57:
                    d8:f9:0b:87:a5:f8:b1:a9:58:ad:14:51:0d:da:4a:
                    25:81:39:5a:7f:be:72:96:d6:d7:df:78:f7:1e:f7:
                    ef:30:69:93:e6:04:97:2d:34:02:98:ad:75:9e:f4:
                    6f:4c:51:7a:81:38:37:97:6b:c5:95:5d:f0:87:76:
                    f1:ea:fe:bb:c2:db:f1:58:99:10:88:f8:c8:ad:dd:
                    7b:30:e1:df:77:99:60:13:c1:23:4a:48:b3:8c:80:
                    10:3d:b5:5e:d2:34:93:36:43:9e:c9:f1:e3:a4:55:
                    02:97:07:3b:fb:d4:5d:cf:e2:85:3a:1f:9f:f5:15:
                    85:e1:bd:f4:b4:da:db:0f:e3:6b:35:5a:fb:cc:c2:
                    c6:5f:be:e0:5a:4f:5c:9b:2d:56:c8:ee:65:0f:c3:
                    09:b7:77:a5:b3:a0:ff:73:af:ba:39:0a:98:59:d3:
                    25:0e:5f:48:43:12:ec:05:e7:8d:6f:d7:ec:97:37:
                    51:30:ec:10:37:f0:1d:5f:10:fd:f2:d2:dd:4a:32:
                    69:ed:a6:34:f8:3f:80:22:3d:e3:53:c9:22:58:73:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/xMu3_waecN4N9WxLdIFFrrLQGtI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.255.190.0/24
                IPv6:
                  2a11:ad80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210829

    Signature Algorithm: sha256WithRSAEncryption
         8d:98:e5:a4:cd:e9:ba:ce:01:60:0f:ca:1f:f3:ef:68:e1:75:
         dc:0d:af:63:73:d6:2d:77:57:78:38:45:2f:e5:02:7c:d9:37:
         20:dc:7a:b1:41:50:83:16:47:2f:ea:2b:20:d5:71:ee:54:b8:
         a3:ff:54:e2:f8:91:65:df:12:21:5c:4e:fe:c9:ab:18:d6:55:
         b8:0f:3a:56:47:95:ca:6c:db:07:39:e1:72:99:f8:51:43:9c:
         4c:a8:ed:0c:26:af:b1:ac:6a:08:40:94:12:40:60:8a:2d:31:
         0c:c1:c7:39:cd:68:ba:e7:fb:6e:6e:c3:ee:e9:70:a8:4a:46:
         6f:33:da:40:1d:29:57:36:3b:5b:3e:ed:ca:07:17:3b:95:1b:
         4a:c6:c6:b5:7a:fe:5c:45:da:1b:a9:3a:23:6f:bc:23:04:d0:
         85:c2:f7:89:be:3e:41:5c:e6:a6:5a:8f:4c:2d:cf:26:a7:31:
         62:c7:5d:27:85:04:66:12:e5:13:05:72:a8:1e:b4:63:bd:85:
         7d:e9:9e:85:7f:ae:41:f9:4d:d1:6d:da:c6:fc:98:01:4e:ba:
         05:cc:8f:db:fd:73:71:9b:da:38:8e:e2:25:15:ab:e7:fc:24:
         3a:be:c1:ec:37:e0:14:4c:44:e4:00:98:0a:04:cf:bf:3f:01:
         1b:8a:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:05 2024 by rpki-client on console-ams.rpki-client.org