Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E79FD76484BBAC1B768955A2173762C8B694F46F.cer
File:                     E79FD76484BBAC1B768955A2173762C8B694F46F.cer (raw, json)
Hash identifier:          x7IWA/JUNTcI1U1AJ7d43rlJYvGrhzosuOh0jbfkOxU=
Subject key identifier:   E7:9F:D7:64:84:BB:AC:1B:76:89:55:A2:17:37:62:C8:B6:94:F4:6F
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       58F7BAF223F91B64C72FC0ECCE0C6BCAC50E1979
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/3/E79FD76484BBAC1B768955A2173762C8B694F46F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 07 Aug 2024 08:28:49 +0000
Certificate not after:    Wed 06 Aug 2025 08:33:49 +0000
Subordinate resources:    IP: 2a0b:4e07:1000::/37

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 12:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f7:ba:f2:23:f9:1b:64:c7:2f:c0:ec:ce:0c:6b:ca:c5:0e:19:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Aug  7 08:28:49 2024 GMT
            Not After : Aug  6 08:33:49 2025 GMT
        Subject: CN=E79FD76484BBAC1B768955A2173762C8B694F46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:d8:ca:20:c8:b7:aa:91:ec:fa:7a:ad:2a:
                    17:fe:ec:6c:a8:51:f1:8c:49:27:95:28:cd:30:bc:
                    00:e4:10:45:9e:42:40:ea:0c:fd:b7:29:dc:bc:84:
                    cc:b7:2a:4f:34:cd:43:fe:17:9d:47:86:db:68:71:
                    95:09:ac:c0:8e:a5:43:4d:38:78:9f:f2:b1:32:13:
                    43:99:40:3a:11:88:92:e3:90:b2:6a:07:e7:4b:7e:
                    c5:95:a9:01:5f:b8:65:b1:54:99:b2:9d:3b:68:16:
                    1f:08:aa:96:6e:67:f0:7e:34:38:47:70:c0:b9:a0:
                    0a:85:a5:e4:89:99:11:e0:35:66:18:26:a1:e6:53:
                    2f:31:32:a6:04:83:86:c5:94:48:2f:e8:ac:59:1b:
                    4e:1a:18:b8:ef:8f:99:b0:bf:81:08:b0:8d:aa:83:
                    cc:ef:e4:58:63:e4:21:4b:15:21:e1:1a:5e:57:95:
                    8d:61:47:3f:64:36:b3:4c:3d:a3:26:d2:66:76:a6:
                    00:b5:0a:e4:c6:f7:a7:f7:de:10:f3:46:67:d2:4d:
                    72:ab:b2:6e:e1:a6:03:66:aa:f5:1e:a7:1e:94:67:
                    f0:ab:f4:2e:61:10:e2:5a:af:43:9a:b2:8f:c2:8d:
                    b5:13:06:af:92:48:c6:17:04:7f:56:5e:5b:c2:29:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:9F:D7:64:84:BB:AC:1B:76:89:55:A2:17:37:62:C8:B6:94:F4:6F
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/3/E79FD76484BBAC1B768955A2173762C8B694F46F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         95:b5:0f:27:1f:5a:50:76:ff:4d:3f:9d:f4:54:d5:38:a6:57:
         c3:af:d9:64:ff:3c:36:9b:32:0e:4a:fd:5a:7a:12:12:89:27:
         b3:68:ee:b6:99:9f:10:09:14:13:eb:ad:65:12:f5:08:99:d3:
         42:9d:ae:29:dc:a5:1d:fd:da:19:f4:b9:39:30:b7:ca:31:0d:
         98:38:ef:eb:dd:4a:aa:86:ef:63:04:11:df:92:f2:86:fa:86:
         c3:7c:4e:22:8a:e4:19:6b:21:a3:a1:ff:85:b8:1d:ba:66:b3:
         ed:0a:bf:c4:ea:c7:af:b8:57:4d:39:b9:10:98:88:cc:97:ca:
         cc:a3:46:e2:d1:e7:89:1b:ce:38:c2:bc:e1:12:74:cb:f8:b3:
         99:01:8d:7a:a2:9d:61:03:e6:64:25:e2:98:c9:38:23:4a:94:
         4b:73:e0:6f:a0:9a:47:d2:e4:55:6d:d2:43:43:53:5a:85:64:
         c7:7e:67:de:28:9d:95:6a:eb:1a:1c:c1:46:7a:fd:d3:49:99:
         93:11:65:03:f0:83:49:51:6b:07:e4:c0:63:31:83:8d:69:6e:
         98:9d:12:c8:38:1a:40:32:cc:c5:c0:65:4a:5c:4c:be:6a:45:
         ca:bb:f9:20:e3:25:16:2a:88:29:8a:d9:40:15:d2:c5:ab:7b:
         b3:fc:ea:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 15:05:26 2024 by rpki-client on console-ams.rpki-client.org