Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/320B42ABE99FF418DC0BCB5D7F8A42D6088CB862.cer
File:                     320B42ABE99FF418DC0BCB5D7F8A42D6088CB862.cer (raw, json)
Hash identifier:          NpnCwSvDE7YvMdIDC9eET7b+fLzBz1zSSjqO5JeP1RQ=
Subject key identifier:   32:0B:42:AB:E9:9F:F4:18:DC:0B:CB:5D:7F:8A:42:D6:08:8C:B8:62
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       3133F5E8E008B30D3901AD849E64849DAEF9EAB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_2679d66cee43448f99ade4ce1f344574/0/320B42ABE99FF418DC0BCB5D7F8A42D6088CB862.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_2679d66cee43448f99ade4ce1f344574/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sat 06 Jul 2024 20:18:05 +0000
Certificate not after:    Sat 05 Jul 2025 20:23:05 +0000
Subordinate resources:    IP: 2a11:f2c0:ff81::/48

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 17:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:33:f5:e8:e0:08:b3:0d:39:01:ad:84:9e:64:84:9d:ae:f9:ea:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul  6 20:18:05 2024 GMT
            Not After : Jul  5 20:23:05 2025 GMT
        Subject: CN=320B42ABE99FF418DC0BCB5D7F8A42D6088CB862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:50:dc:98:98:14:c2:6b:e1:b3:55:90:87:
                    81:16:cc:cb:92:28:be:0e:0a:71:98:4d:d8:a8:3a:
                    fb:6f:c1:23:15:32:93:3d:a4:7b:6d:dc:3c:9e:9c:
                    ed:0f:98:00:37:63:c1:17:62:bb:3b:24:f0:d4:af:
                    42:54:b3:9f:03:3b:42:d8:1d:24:66:67:ca:c0:50:
                    04:2b:e1:ce:5c:be:ad:f9:87:66:96:84:99:16:16:
                    b5:ff:31:b4:af:7f:f5:f1:db:40:f5:11:36:5c:44:
                    f5:36:7d:a0:85:94:e7:a6:a4:e5:03:f9:7d:a7:91:
                    b9:0b:d0:2f:ae:23:fe:33:a9:15:ec:23:cb:d2:ed:
                    3e:ad:12:61:ff:58:af:d0:8c:2b:9b:80:3f:2f:1e:
                    35:e2:ff:69:e5:59:20:88:07:f9:55:38:00:e2:e4:
                    83:82:33:6b:8f:dd:d5:c8:a5:35:aa:87:c4:48:0c:
                    92:31:44:3c:3f:97:44:9f:bb:c6:ed:62:ff:ff:f0:
                    a1:29:45:80:02:1a:17:60:b8:b1:72:9f:36:38:4d:
                    71:b5:f2:61:45:cf:e3:f0:91:d1:7c:8c:1f:e9:d5:
                    87:af:10:3f:88:9f:9d:a5:a9:d0:52:be:86:bb:a6:
                    e5:ee:e3:4f:c1:ed:95:f1:86:d1:a0:87:55:ca:8a:
                    f0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:0B:42:AB:E9:9F:F4:18:DC:0B:CB:5D:7F:8A:42:D6:08:8C:B8:62
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_2679d66cee43448f99ade4ce1f344574/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_2679d66cee43448f99ade4ce1f344574/0/320B42ABE99FF418DC0BCB5D7F8A42D6088CB862.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ff81::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:0f:d1:aa:e4:17:e9:71:13:88:f6:b1:58:b1:9e:77:ea:65:
         71:04:6e:6a:4e:d4:aa:b0:03:3a:3d:49:0f:25:da:a4:1c:33:
         bc:5e:b7:5c:14:29:19:00:06:31:5c:e9:a0:52:8c:71:51:1c:
         60:ce:80:99:5d:b1:a4:cb:13:af:86:13:ae:c5:6a:c0:97:85:
         6f:bd:8b:9b:ec:92:62:e3:fa:99:52:b6:ca:33:42:3b:e2:04:
         1e:9b:1f:87:c0:56:3c:36:cd:ba:53:2f:25:2d:3c:54:05:43:
         0f:31:ed:9e:24:1e:d2:ba:1a:05:3d:a3:21:b3:92:8a:95:2a:
         bf:64:71:b1:b2:7d:ca:43:8b:e4:2a:c7:84:aa:30:9c:4a:87:
         45:fe:26:2f:ec:da:e5:4d:5c:06:46:39:f1:b9:ec:66:53:26:
         93:4f:d8:75:0f:8b:d7:84:ef:5f:7d:00:02:d1:2b:11:1a:84:
         20:b2:c5:e7:b5:db:13:a2:f5:36:42:e3:bf:e6:32:a1:1e:70:
         10:78:4c:f2:24:38:b5:f5:2f:bf:db:50:b9:14:46:11:ea:a6:
         8b:7c:97:7a:ee:67:22:7a:b9:2a:c8:7a:62:8b:21:f5:eb:de:
         5e:b6:99:96:b5:88:9d:94:78:e2:c5:90:1d:76:c3:f6:1b:00:
         67:43:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 18:51:23 2024 by rpki-client on console-fra.rpki-client.org