Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zADbTlXBsFE03_WeUilcEK1PHX8.cer
File:                     zADbTlXBsFE03_WeUilcEK1PHX8.cer (raw, json)
Hash identifier:          jWAZ5PoMg66SisZYvH0weLeLKpbj7h9vMEHDSTUuSTo=
Subject key identifier:   CC:00:DB:4E:55:C1:B0:51:34:DF:F5:9E:52:29:5C:10:AD:4F:1D:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1AD8AF808928F83F239508A9EA4F2E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/0dc9cc-d433-49c6-8953-73cc27928b91/1/zADbTlXBsFE03_WeUilcEK1PHX8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/0dc9cc-d433-49c6-8953-73cc27928b91/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:32:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 5.183.212.0/22
                          IP: 2a0e:2200::/29

Validation:               Failed, certificate revoked on Fri 30 Jun 2023 14:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1a:d8:af:80:89:28:f8:3f:23:95:08:a9:ea:4f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:32:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cc00db4e55c1b05134dff59e52295c10ad4f1d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:72:e4:fc:78:f7:19:06:6d:9d:60:8c:ca:69:
                    8b:33:e6:66:83:ec:67:cd:30:ae:a6:d3:b2:52:cc:
                    7c:b5:0a:da:f9:37:c8:d3:97:42:5a:d2:ed:50:bb:
                    75:ee:9a:a6:e1:99:a3:07:7a:5d:0f:19:6b:9b:4e:
                    e0:6b:5d:3b:0a:78:a1:dc:66:67:d8:d2:18:32:c4:
                    9f:85:73:c9:73:24:2b:ba:a7:71:7d:04:15:4e:69:
                    1d:2a:7a:a1:93:e1:68:08:9f:d3:c6:6b:fa:b0:7e:
                    e9:7d:09:a0:0b:92:21:f4:13:05:b5:0f:44:50:70:
                    3a:23:b8:93:3d:17:e4:3c:fe:5e:2a:95:5e:46:08:
                    3c:3c:69:98:6d:9c:e2:42:0c:65:7e:49:e6:e7:c7:
                    a5:98:61:07:bc:fa:e3:87:d2:62:15:c6:37:22:6c:
                    02:b8:ee:3e:0d:44:9d:88:15:9e:e8:e8:fa:0b:5d:
                    49:e9:fb:90:e5:3c:a4:4c:fd:57:aa:8a:03:89:ca:
                    37:e4:d8:a2:48:7f:0b:2d:80:e4:fd:17:b1:39:24:
                    6a:c2:fe:e0:8b:2c:e3:41:e3:d8:69:a9:3e:77:a2:
                    31:1e:62:60:72:22:47:41:3b:b6:f3:8f:a6:b2:4b:
                    98:a6:bb:2a:e8:76:d1:f6:84:4d:75:61:b8:1b:e3:
                    49:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:00:DB:4E:55:C1:B0:51:34:DF:F5:9E:52:29:5C:10:AD:4F:1D:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0dc9cc-d433-49c6-8953-73cc27928b91/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0dc9cc-d433-49c6-8953-73cc27928b91/1/zADbTlXBsFE03_WeUilcEK1PHX8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.212.0/22
                IPv6:
                  2a0e:2200::/29

    Signature Algorithm: sha256WithRSAEncryption
         22:fc:da:40:7e:3c:62:02:16:03:8a:7a:d0:80:32:6c:5a:c3:
         a5:3f:23:d3:00:e0:d3:67:95:a3:ea:19:d9:c6:0e:b7:0c:28:
         d0:fe:5d:68:03:11:95:74:59:25:04:4f:0e:a4:40:4d:3a:9d:
         f2:cb:80:ff:20:03:6e:be:a2:ec:3e:33:bf:0e:fb:d1:2e:44:
         c5:1b:63:50:4c:a0:de:16:eb:ac:1b:a5:21:d6:d7:07:ad:f9:
         7e:4d:70:32:a5:14:d4:1b:fa:1a:20:34:a7:eb:08:a4:b4:36:
         3b:d2:17:90:e1:9e:f0:53:d8:6d:86:7f:9e:94:a5:e8:f6:9e:
         78:88:3e:5a:b8:b6:ae:10:47:89:bd:fe:4f:2b:0b:28:05:b4:
         41:e6:30:99:72:71:0c:e1:78:dc:fe:60:39:db:a1:ab:a8:1e:
         b4:d4:1e:de:ad:77:4b:94:16:83:25:c3:76:ab:8d:09:7b:d3:
         53:06:f1:77:2a:23:20:a6:5f:70:77:f9:fb:50:30:bf:43:99:
         b1:0b:d9:10:9b:ba:b9:6b:41:5f:32:7c:41:5d:3d:aa:33:f1:
         cf:cf:ee:5b:38:34:b3:d2:55:8a:59:bb:17:21:9f:42:15:64:
         18:d2:7f:af:c9:a3:1f:09:c5:5e:c6:88:67:7e:da:31:51:97:
         2e:aa:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:37 2024 by rpki-client on console-ams.rpki-client.org