Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/44F360A54D64D4E0EDBA5F7E5F3FAD4DDE016B5B.cer
File:                     44F360A54D64D4E0EDBA5F7E5F3FAD4DDE016B5B.cer (raw, json)
Hash identifier:          7ENpBO8EJdQ8tADu7xfAppJM7F2dQ2K+ClhCOoVF+xw=
Subject key identifier:   44:F3:60:A5:4D:64:D4:E0:ED:BA:5F:7E:5F:3F:AD:4D:DE:01:6B:5B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       6DA15C20CB360ED85AC1EFBBDDF841C18904CF08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/522a88b8-4771-498f-b44c-36ae2f0ce5c4/0/44F360A54D64D4E0EDBA5F7E5F3FAD4DDE016B5B.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/522a88b8-4771-498f-b44c-36ae2f0ce5c4/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 06 May 2024 19:16:04 +0000
Certificate not after:    Mon 05 May 2025 19:21:04 +0000
Subordinate resources:    IP: 2a14:7581:7000::/36

Validation:               Failed, certificate revoked on Sat 18 May 2024 00:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a1:5c:20:cb:36:0e:d8:5a:c1:ef:bb:dd:f8:41:c1:89:04:cf:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: May  6 19:16:04 2024 GMT
            Not After : May  5 19:21:04 2025 GMT
        Subject: CN=44F360A54D64D4E0EDBA5F7E5F3FAD4DDE016B5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:0c:d6:60:a0:c5:d8:95:c6:2e:66:96:8a:
                    c3:2e:02:e3:67:8f:aa:55:a5:47:df:53:c3:89:51:
                    2b:c2:cc:88:8b:9a:2d:5e:d4:83:b5:b5:0f:01:c0:
                    85:e2:1b:77:6e:8c:ce:1b:6c:4f:f8:f5:49:18:11:
                    1c:ca:3e:33:ca:93:c9:67:76:ba:fe:08:1b:2f:08:
                    9a:3a:b3:03:6b:c0:8d:26:b5:be:20:ba:e6:2d:1a:
                    76:af:d8:3e:eb:11:2c:ff:a5:7a:a8:8f:71:86:7f:
                    57:52:a7:11:78:8a:0a:5d:d3:de:60:8f:f6:81:07:
                    30:b0:de:5a:28:3f:e5:14:0a:02:8f:f3:6c:19:38:
                    12:e7:03:b2:7b:18:cf:a0:bb:0a:a2:b4:33:7c:fe:
                    24:ab:ee:42:5f:9d:10:ea:62:69:fc:b8:5b:d2:c8:
                    d3:9a:dc:5f:16:2e:73:0b:ef:cb:28:97:28:11:24:
                    b5:3f:07:95:d4:e2:3f:1a:e4:0b:24:f2:1c:45:2a:
                    12:ae:13:98:5b:c6:c3:7e:ce:72:0b:3e:ff:e3:f6:
                    34:db:d5:e6:0d:1a:8a:98:eb:7f:18:5e:ba:8d:07:
                    7c:ab:0a:b0:df:58:4f:99:46:a4:34:a7:aa:f4:ea:
                    a1:e5:a0:a8:5e:23:ef:04:a6:a0:9b:48:e0:ec:77:
                    04:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:F3:60:A5:4D:64:D4:E0:ED:BA:5F:7E:5F:3F:AD:4D:DE:01:6B:5B
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/522a88b8-4771-498f-b44c-36ae2f0ce5c4/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/522a88b8-4771-498f-b44c-36ae2f0ce5c4/0/44F360A54D64D4E0EDBA5F7E5F3FAD4DDE016B5B.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:eb:2f:34:9d:ad:a2:93:d1:66:cf:af:87:88:0e:44:09:
         84:ff:ff:62:43:de:34:5e:02:9e:9e:1a:06:da:ac:53:8c:ab:
         52:e6:e7:d6:4d:90:1a:35:06:4f:f9:76:66:d3:bd:bd:0a:b5:
         16:a7:59:86:71:a7:1d:f1:cf:a0:1e:ca:db:8c:75:c1:14:de:
         29:13:0b:70:e3:bd:6a:7c:ad:4c:cf:c8:97:2a:69:26:2c:e1:
         82:d2:39:de:e6:4b:7e:27:16:ce:3b:42:22:ee:7e:1d:b6:8e:
         bb:f3:56:16:91:2d:70:44:fe:91:64:72:9b:b4:aa:78:c4:d7:
         57:dc:13:18:37:a1:88:c7:16:b5:9f:b1:4d:b6:f3:d4:41:f7:
         1b:1f:57:f8:81:f9:32:09:27:9f:c5:38:03:93:d1:cd:9c:71:
         f5:69:d2:ed:8d:cb:f3:0f:51:ff:e6:4e:bd:53:51:31:89:97:
         96:69:d9:fc:3e:67:9a:40:f1:ea:bd:20:f6:6d:98:f8:e2:af:
         c7:98:a1:9c:ef:7b:a2:df:5f:30:94:c6:a3:b8:f4:e7:b5:a7:
         f1:7f:95:a4:25:b5:c2:e1:62:2c:aa:46:a6:2a:28:c5:0c:ef:
         ab:c2:b6:04:c6:0b:f8:a1:9c:27:92:67:f8:f7:a6:3f:07:76:
         39:14:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:19:30 2024 by rpki-client on console-ams.rpki-client.org