Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer
File:                     84B73A995F7E469C0FFD988D851B866DACA9AB74.cer (raw, json)
Hash identifier:          Tj8KNlfUPZkZoLZtBxQJgeWlmZ8Xf1lyk/Y9zzvefl0=
Subject key identifier:   84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       192C05A73773DB2417310CA00E998C311A0DD7F2
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 20 Aug 2024 19:34:37 +0000
Certificate not after:    Tue 19 Aug 2025 19:39:37 +0000
Subordinate resources:    IP: 2a07:54c1:d000::/36

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 20:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2c:05:a7:37:73:db:24:17:31:0c:a0:0e:99:8c:31:1a:0d:d7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 19:34:37 2024 GMT
            Not After : Aug 19 19:39:37 2025 GMT
        Subject: CN=84B73A995F7E469C0FFD988D851B866DACA9AB74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f0:f9:c0:5c:18:d4:1f:91:18:99:a2:3e:11:
                    4f:5a:55:c3:6c:38:7d:77:e9:7c:62:c8:54:0a:a4:
                    70:df:b5:7e:80:e3:a1:18:c3:d1:6e:a1:82:92:d4:
                    d8:d5:95:1d:95:5b:41:1a:fb:a4:f1:d7:60:fe:c7:
                    89:d1:4c:b7:75:dc:0a:75:b7:89:cd:84:c6:f9:de:
                    ee:9c:66:05:72:9a:c6:e3:a6:10:92:d5:10:70:4c:
                    40:2b:61:7d:c0:13:36:3a:5f:51:e1:a8:d2:b7:de:
                    1a:f0:4f:62:fe:64:d9:38:a1:bb:d3:a1:df:71:0c:
                    96:26:53:41:fe:61:16:b6:cc:1c:42:3d:9a:52:8f:
                    73:70:c9:dc:4a:88:1a:ec:53:d9:5d:5d:46:7d:df:
                    6c:4d:4c:fc:3e:2b:7b:dc:4d:02:5d:4f:e1:03:4a:
                    27:25:66:be:9f:9c:f4:7a:f4:5e:3e:21:a9:29:63:
                    9c:8e:f4:b7:cf:0b:6a:73:45:92:c2:cd:0b:c0:be:
                    58:e5:76:aa:91:09:cf:c7:2c:25:5a:9d:3f:4e:0e:
                    1d:da:5b:59:3f:b2:2f:a2:35:7e:eb:32:b6:ac:d7:
                    f0:c1:a5:a7:d5:13:33:a5:e2:b8:ab:5f:32:65:b5:
                    39:12:e7:ec:3c:d4:01:3b:e6:17:90:97:8c:90:e9:
                    b0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:8e:89:28:58:8f:4b:c1:39:c5:c7:36:a9:b9:66:ed:36:96:
         b1:70:a1:18:f2:37:2f:59:b6:8f:68:b3:f2:21:c9:fb:e0:75:
         33:9b:90:6e:bf:4b:90:1b:6b:11:c8:69:32:eb:ca:6f:ed:22:
         42:f2:8c:21:17:14:54:4c:2a:75:48:45:90:9d:0d:28:4b:ca:
         3d:6f:7f:58:66:39:1b:4b:cf:e3:b3:c6:65:39:72:83:55:6e:
         6f:f3:0f:5a:6a:81:74:54:07:69:8e:89:f9:59:72:1a:14:e7:
         f0:62:b2:fc:68:f8:d5:80:9a:30:fb:d4:4e:5f:58:cb:6e:7c:
         7f:f7:ab:b3:36:c4:54:30:c2:e3:c2:34:17:9a:37:8d:59:52:
         d6:ad:8a:ba:00:75:4b:54:4a:5e:bb:7d:a0:e7:4b:ba:50:15:
         5f:0d:c6:b6:f1:f1:8a:00:1b:69:8d:22:c0:4f:07:c8:8b:e4:
         98:49:a2:8a:6d:fe:51:54:0f:5d:4f:11:6e:18:0e:59:25:4b:
         13:7b:3b:3c:e0:f2:02:c0:26:39:7c:78:0c:0f:ee:dc:2d:19:
         f0:00:58:5c:67:36:81:db:f0:ad:2d:7d:67:ad:84:d9:00:c8:
         2a:6c:38:7a:df:b7:1e:91:98:47:95:03:12:42:15:14:e9:01:
         d7:69:0b:1a
-----BEGIN CERTIFICATE-----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