Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zWb9FDVu__nUOFeK_iPYYQFc7qo.cer
File:                     zWb9FDVu__nUOFeK_iPYYQFc7qo.cer (raw, json)
Hash identifier:          OGSVs2wRGHjP0cyK2IdwRezWU+8IXRVakD8kT6szy+E=
Subject key identifier:   CD:66:FD:14:35:6E:FF:F9:D4:38:57:8A:FE:23:D8:61:01:5C:EE:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D5868DC25ECCCD8EA4C5C2CC14DFCC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/4f1193-a321-4586-8885-28e1f1856232/1/zWb9FDVu__nUOFeK_iPYYQFc7qo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/4f1193-a321-4586-8885-28e1f1856232/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:34:57 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211305

Validation:               Failed, certificate revoked on Tue 14 Mar 2023 12:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d5:86:8d:c2:5e:cc:cd:8e:a4:c5:c2:cc:14:df:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cd66fd14356efff9d438578afe23d861015ceeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2e:e4:05:68:f1:14:25:7b:7a:e5:55:cc:87:
                    fb:33:03:1a:1e:20:16:09:86:b4:e4:83:e2:7b:9b:
                    42:10:8b:c0:2d:71:14:45:de:5c:e5:f6:43:65:56:
                    50:3b:6f:86:50:2d:85:aa:5b:0b:55:11:f0:82:79:
                    ae:57:43:a6:88:48:f0:74:b4:24:d6:a0:55:37:59:
                    d7:02:66:e9:62:ad:68:81:7f:19:2d:82:bc:f3:56:
                    2e:24:0e:53:68:92:07:8b:b3:16:55:ff:17:ea:21:
                    3e:51:ef:c9:ef:ac:a6:4b:d3:2e:58:46:1d:47:ef:
                    fe:09:14:7d:85:8f:3e:ed:96:5b:41:0a:ac:b9:6a:
                    0a:fd:8f:df:88:d1:02:af:75:01:23:a5:8c:49:b9:
                    14:a4:f3:cf:8f:ab:a6:25:f7:d3:92:60:56:0f:45:
                    9a:ba:31:eb:22:a2:d1:75:10:0e:73:59:b3:70:2a:
                    3f:85:29:12:aa:4f:9b:4d:de:e9:02:8e:af:17:fb:
                    43:84:2c:d7:df:9c:41:a5:44:a0:51:da:67:33:b2:
                    5f:52:8b:e4:48:f7:6c:a0:94:56:a4:36:21:97:ae:
                    74:21:39:1d:a0:57:5e:8c:d1:2e:3a:c5:2c:3e:59:
                    34:95:f3:5c:d2:1f:57:6e:dc:6a:cf:70:e6:3a:24:
                    a2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:66:FD:14:35:6E:FF:F9:D4:38:57:8A:FE:23:D8:61:01:5C:EE:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4f1193-a321-4586-8885-28e1f1856232/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4f1193-a321-4586-8885-28e1f1856232/1/zWb9FDVu__nUOFeK_iPYYQFc7qo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211305

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:14:cc:e8:83:3b:6a:02:e6:c2:b6:a6:72:d6:c9:1c:37:
         b3:03:40:89:aa:d6:8b:5c:a4:3d:9e:0a:76:7d:5c:ff:e8:f2:
         bc:ec:5a:6f:57:65:3c:32:79:27:95:ef:da:7b:87:8d:55:8a:
         16:7b:d3:d6:1c:74:04:ba:0f:58:1b:46:94:90:c7:fe:5b:6b:
         8b:ed:b8:49:7f:a8:fd:96:3d:f4:d4:bd:39:b3:7d:5a:4b:5d:
         ab:00:97:50:e9:8f:f3:0c:da:bc:c0:f4:31:5f:e8:d2:7e:36:
         4e:4b:9e:53:b1:24:c9:68:dc:a4:43:9f:24:94:fa:63:38:29:
         64:6c:f0:8e:f0:5c:ae:97:e6:ee:91:d6:bd:32:0a:85:7a:e8:
         ec:7b:e6:3a:41:a8:6f:42:02:cc:96:86:bd:85:9e:78:95:a0:
         f6:fc:7c:0f:79:63:df:41:16:b2:27:05:72:fa:ec:22:ae:86:
         1d:0f:55:3a:07:06:38:6d:e7:9c:14:7d:a7:01:f1:a0:5c:63:
         a4:35:70:61:84:b0:30:97:75:b8:f5:d2:73:10:7e:e2:39:f3:
         55:bc:d7:81:40:94:54:70:ca:f9:19:c4:db:6d:ea:33:4c:37:
         eb:c2:7c:57:0a:1b:d7:92:fa:f6:61:3f:e4:08:8e:62:35:59:
         e8:8e:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:18 2024 by rpki-client on console-fra.rpki-client.org