Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.cer
File:                     72484EF62E84FA48E7A4A243EFAAF012268DBBB4.cer (raw, json)
Hash identifier:          6+pbLkRvwyg5ZAHKn20XHwuVGAVr//Fs7w0SBPYaUVc=
Subject key identifier:   72:48:4E:F6:2E:84:FA:48:E7:A4:A2:43:EF:AA:F0:12:26:8D:BB:B4
Authority key identifier: 18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
Certificate issuer:       /CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Certificate serial:       5E36958AC749598D06A4B3C008131844633B647B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 24 Feb 2024 00:51:21 +0000
Certificate not after:    Sat 22 Feb 2025 00:56:21 +0000
Subordinate resources:    IP: 2a07:2487::/32

Validation:               Failed, certificate revoked on Sun 25 Feb 2024 18:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:36:95:8a:c7:49:59:8d:06:a4:b3:c0:08:13:18:44:63:3b:64:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
        Validity
            Not Before: Feb 24 00:51:21 2024 GMT
            Not After : Feb 22 00:56:21 2025 GMT
        Subject: CN=72484EF62E84FA48E7A4A243EFAAF012268DBBB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:af:72:ca:b2:ba:47:04:86:de:9f:c7:fd:
                    bc:7d:cc:00:b2:d1:05:ba:04:b9:4f:0b:8f:0e:34:
                    dd:6c:6e:c7:43:ba:41:55:c2:b7:71:8d:07:8e:94:
                    c7:1e:58:d8:f8:bd:84:14:7b:e3:10:bf:09:21:47:
                    28:a7:8b:fb:4a:8d:7b:83:3b:00:35:89:93:0f:29:
                    42:22:90:dc:f0:6b:38:cb:a5:da:7a:2a:59:9f:41:
                    7b:c1:fb:5e:bb:ac:4c:6f:f6:fc:a4:1f:e2:84:aa:
                    ae:e2:c8:e2:6e:f0:7c:a8:f9:c0:63:8d:4d:8e:91:
                    74:20:1c:2d:3d:c6:ef:91:75:ef:96:84:f4:fe:ba:
                    2a:a5:69:a7:d2:7e:3b:f6:13:38:4f:b7:c9:43:9d:
                    64:84:04:4c:f9:e3:20:9a:b2:4f:01:d3:7d:f0:81:
                    a6:ca:df:f9:6e:17:3d:23:b9:3d:36:16:97:bd:91:
                    f3:9b:0e:44:98:e8:53:6a:63:50:fa:f2:26:7d:74:
                    99:22:6f:b8:f3:42:a3:51:22:4c:a7:6c:2a:f7:9a:
                    3d:60:f8:1d:42:0f:6e:30:77:d0:e6:5a:0d:ce:77:
                    74:b5:16:09:80:78:cf:a6:d0:42:ad:69:92:90:10:
                    a0:b0:2b:6f:8f:c9:8b:61:e3:59:64:93:ce:db:f9:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:48:4E:F6:2E:84:FA:48:E7:A4:A2:43:EF:AA:F0:12:26:8D:BB:B4
            X509v3 Authority Key Identifier:
                keyid:18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2487::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:fe:d5:03:0e:ac:73:3f:50:18:9d:09:ab:44:7b:a3:31:cb:
         8c:3d:d2:3b:f5:29:6b:0a:91:8d:c5:93:ad:73:91:df:91:39:
         2f:f0:b4:ac:05:fb:d2:f5:b3:57:c8:83:b6:56:83:39:9c:5b:
         86:3a:70:58:6c:d6:9a:e4:50:ee:2a:0d:8f:3b:26:99:12:0f:
         ad:f7:72:05:90:f6:42:7b:2d:d9:e1:6a:14:6e:cb:ce:ae:3a:
         74:73:97:30:6f:f4:7b:ad:4b:a1:f1:5c:34:61:6c:4d:30:4b:
         ce:b3:12:3c:da:5c:4b:4f:72:34:1b:e2:be:55:99:68:66:f0:
         2a:17:83:ab:1a:a5:46:bc:70:ac:24:25:a2:a7:36:2e:c0:36:
         21:20:3b:39:ba:95:c5:47:38:b8:f6:c0:b9:f5:7a:01:1b:fb:
         a7:b8:1e:41:27:20:6c:a9:bd:12:60:d6:10:c7:50:7c:73:f6:
         e0:5c:38:64:4f:f1:a1:42:62:93:57:fc:ae:cd:54:f9:e4:cb:
         8b:c0:40:38:70:45:ef:1e:71:77:ef:f8:ff:00:67:cd:ce:11:
         87:5a:5b:51:38:5a:19:c8:a0:12:34:57:01:ad:63:98:8b:27:
         07:04:17:10:70:fe:9d:fc:f6:ab:49:88:1e:7d:4a:c5:dd:3d:
         22:e0:ca:06
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUXjaVisdJWY0GpLPACBMYRGM7ZHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThmZWM4MjQzMTA0N2VjZGFjMTlkYjNiZDkzYzFjM2Zl
NzkxOTdkMzAeFw0yNDAyMjQwMDUxMjFaFw0yNTAyMjIwMDU2MjFaMDMxMTAvBgNV
BAMTKDcyNDg0RUY2MkU4NEZBNDhFN0E0QTI0M0VGQUFGMDEyMjY4REJCQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlK9yyrK6RwSG3p/H/bx9zACy
0QW6BLlPC48ONN1sbsdDukFVwrdxjQeOlMceWNj4vYQUe+MQvwkhRyini/tKjXuD
OwA1iZMPKUIikNzwazjLpdp6KlmfQXvB+167rExv9vykH+KEqq7iyOJu8Hyo+cBj
jU2OkXQgHC09xu+Rde+WhPT+uiqlaafSfjv2EzhPt8lDnWSEBEz54yCask8B033w
gabK3/luFz0juT02Fpe9kfObDkSY6FNqY1D68iZ9dJkib7jzQqNRIkynbCr3mj1g
+B1CD24wd9DmWg3Od3S1FgmAeM+m0EKtaZKQEKCwK2+PyYth41lkk87b+ahnAgMB
AAGjggLiMIIC3jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRySE72LoT6SOek
okPvqvASJo27tDAfBgNVHSMEGDAWgBQY/sgkMQR+zawZ2zvZPBw/55GX0zAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTFjODI2OS00NTFlLTRk
MGQtOTNlNC1kMTExZWM4ZGRjZWUvMC8xOEZFQzgyNDMxMDQ3RUNEQUMxOURCM0JE
OTNDMUMzRkU3OTE5N0QzLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvR1A3SUpE
RUVmczJzR2RzNzJUd2NQLWVSbDlNLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvZTNmMDY0YzItYTQ1ZC00YWIyLWIxZGItY2Y0NTM3ZGI2ZjdhLzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9lM2YwNjRjMi1hNDVkLTRhYjItYjFkYi1jZjQ1MzdkYjZmN2Ev
MS83MjQ4NEVGNjJFODRGQTQ4RTdBNEEyNDNFRkFBRjAxMjI2OERCQkI0Lm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAqBySHMA0GCSqGSIb3DQEBCwUAA4IBAQCn/tUD
DqxzP1AYnQmrRHujMcuMPdI79SlrCpGNxZOtc5HfkTkv8LSsBfvS9bNXyIO2VoM5
nFuGOnBYbNaa5FDuKg2POyaZEg+t93IFkPZCey3Z4WoUbsvOrjp0c5cwb/R7rUuh
8Vw0YWxNMEvOsxI82lxLT3I0G+K+VZloZvAqF4OrGqVGvHCsJCWipzYuwDYhIDs5
upXFRzi49sC59XoBG/unuB5BJyBsqb0SYNYQx1B8c/bgXDhkT/GhQmKTV/yuzVT5
5MuLwEA4cEXvHnF37/j/AGfNzhGHWltROFoZyKASNFcBrWOYiycHBBcQcP6d/Par
SYgefUrF3T0i4MoG
-----END CERTIFICATE-----