Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z0y98HeV3oRwlwtYsUHq279wMcA.cer
File:                     z0y98HeV3oRwlwtYsUHq279wMcA.cer (raw, json)
Hash identifier:          avICeo4wmxLFM4Fkjs+FSy3pMoAWOHWQmhGz/EOQ81g=
Subject key identifier:   CF:4C:BD:F0:77:95:DE:84:70:97:0B:58:B1:41:EA:DB:BF:70:31:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF5149DAE2AB154E3C85690D9AD59DF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/1f0de9-d3df-40f7-b1d2-2af376edb5d8/1/z0y98HeV3oRwlwtYsUHq279wMcA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/1f0de9-d3df-40f7-b1d2-2af376edb5d8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:32:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.144.13.0/24

Validation:               Failed, certificate revoked on Wed 09 Aug 2023 08:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f5:14:9d:ae:2a:b1:54:e3:c8:56:90:d9:ad:59:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cf4cbdf07795de8470970b58b141eadbbf7031c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:9f:5f:7c:4f:e2:c8:7c:ab:94:8d:4a:96:
                    ec:4b:24:d1:36:91:33:56:48:92:ab:5e:e8:e0:96:
                    67:f1:81:e4:2f:35:73:0d:49:a8:01:fb:0e:41:65:
                    25:17:bd:e5:e7:d5:18:75:69:86:bc:29:b6:fa:47:
                    56:17:b6:6a:a2:4f:26:dd:03:00:88:81:fe:72:70:
                    8e:46:05:66:af:33:17:bb:90:ae:4b:06:bb:81:37:
                    11:1b:30:7e:1c:7c:f9:36:0b:e3:76:a0:1b:b8:2c:
                    ed:95:f1:1a:f9:94:9e:55:ce:16:f7:5b:57:b6:1a:
                    26:df:46:60:73:e7:8e:98:22:11:69:3f:56:d3:f8:
                    82:34:02:fa:f1:37:e3:06:c8:cc:4a:56:9a:98:73:
                    31:be:fb:9b:3e:a7:ce:66:31:f7:4e:81:2f:f6:22:
                    b5:a8:e6:2a:a8:90:e2:ea:96:32:0e:9d:41:70:59:
                    47:d7:39:47:b4:65:f8:95:93:83:28:94:37:d8:5e:
                    25:90:06:26:8c:bd:b7:3c:2d:01:db:4c:9b:a5:2e:
                    ca:3f:c9:40:d1:36:71:c4:6c:49:14:c8:76:58:dc:
                    8c:11:77:6d:e8:e4:81:af:08:95:29:4f:ad:d3:aa:
                    6e:bd:15:00:28:1a:33:6c:54:47:cd:4f:97:1a:f9:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4C:BD:F0:77:95:DE:84:70:97:0B:58:B1:41:EA:DB:BF:70:31:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1f0de9-d3df-40f7-b1d2-2af376edb5d8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1f0de9-d3df-40f7-b1d2-2af376edb5d8/1/z0y98HeV3oRwlwtYsUHq279wMcA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.144.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:0b:eb:87:ec:2a:46:23:0b:55:4c:07:1b:01:77:69:b8:dc:
         13:97:a5:a9:f4:73:ef:10:85:47:57:5d:49:bc:4d:d9:2d:64:
         ed:da:e3:d8:8d:77:82:38:22:55:b0:cc:ea:1b:30:50:71:9e:
         2d:11:a8:c7:1e:a7:ff:c4:15:88:79:f7:20:aa:23:90:4d:c7:
         fc:16:eb:07:ed:dd:1a:81:f6:97:9e:c6:2f:f6:7b:50:90:6d:
         93:fa:b2:47:7d:47:21:aa:c4:41:00:56:5a:04:85:7d:19:79:
         9b:e7:6a:3f:9a:1a:0d:2a:62:1b:ff:6e:d6:06:f8:5d:76:19:
         c8:6a:c8:1f:28:0b:71:f3:25:e7:c7:c7:8c:74:d7:1d:60:e9:
         bd:96:60:93:20:7e:db:83:e4:c4:a0:c3:15:f9:c3:80:df:14:
         7f:e0:c9:cf:19:5b:24:b6:b4:16:c2:fc:2f:c0:10:3b:ef:57:
         01:95:61:36:1f:67:9c:50:2c:55:cb:ac:cc:a7:80:c4:da:80:
         10:b6:d2:22:b2:90:b1:33:a0:12:67:c0:66:86:b7:92:aa:ca:
         9e:ed:b4:d0:41:a8:2e:06:37:1c:b0:3d:0a:db:45:a3:7e:b6:
         87:4e:b8:02:bc:5e:ea:b1:fb:40:61:0e:70:3d:87:bd:6a:fc:
         23:7e:1b:6b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVq9RSdriqxVOPIVpDZrVnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjRjYmRmMDc3OTVkZTg0NzA5NzBiNThiMTQxZWFkYmJmNzAzMWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuemfX3xP4sh8q5SNSpbsSyTRNpEz
VkiSq17o4JZn8YHkLzVzDUmoAfsOQWUlF73l59UYdWmGvCm2+kdWF7Zqok8m3QMA
iIH+cnCORgVmrzMXu5CuSwa7gTcRGzB+HHz5NgvjdqAbuCztlfEa+ZSeVc4W91tX
thom30Zgc+eOmCIRaT9W0/iCNAL68TfjBsjMSlaamHMxvvubPqfOZjH3ToEv9iK1
qOYqqJDi6pYyDp1BcFlH1zlHtGX4lZODKJQ32F4lkAYmjL23PC0B20ybpS7KP8lA
0TZxxGxJFMh2WNyMEXdt6OSBrwiVKU+t06puvRUAKBozbFRHzU+XGvk+5wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFM9MvfB3ld6EcJcLWLFB6tu/cDHAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzFmMGRl
OS1kM2RmLTQwZjctYjFkMi0yYWYzNzZlZGI1ZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMWYwZGU5
LWQzZGYtNDBmNy1iMWQyLTJhZjM3NmVkYjVkOC8xL3oweTk4SGVWM29Sd2x3dFlz
VUhxMjc5d01jQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuZANMA0GCSqGSIb3DQEBCwUAA4IBAQBxC+uH
7CpGIwtVTAcbAXdpuNwTl6Wp9HPvEIVHV11JvE3ZLWTt2uPYjXeCOCJVsMzqGzBQ
cZ4tEajHHqf/xBWIefcgqiOQTcf8FusH7d0agfaXnsYv9ntQkG2T+rJHfUchqsRB
AFZaBIV9GXmb52o/mhoNKmIb/27WBvhddhnIasgfKAtx8yXnx8eMdNcdYOm9lmCT
IH7bg+TEoMMV+cOA3xR/4MnPGVsktrQWwvwvwBA771cBlWE2H2ecUCxVy6zMp4DE
2oAQttIispCxM6ASZ8BmhreSqsqe7bTQQaguBjccsD0K20WjfraHTrgCvF7qsftA
YQ5wPYe9avwjfhtr
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:13 2024 by rpki-client on console-fra.rpki-client.org