Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/EF9F2D6EC712DCE081DA9CED1F956372EA648756.cer
File:                     EF9F2D6EC712DCE081DA9CED1F956372EA648756.cer (raw, json)
Hash identifier:          Z08hNdFNyAalyyhkLEYP7bMwGn6GqMK5zMY8ywjMiFc=
Subject key identifier:   EF:9F:2D:6E:C7:12:DC:E0:81:DA:9C:ED:1F:95:63:72:EA:64:87:56
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       1806434B04ECFADA61BCF8169C303273763B06EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/EF9F2D6EC712DCE081DA9CED1F956372EA648756.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 26 Jun 2024 01:34:24 +0000
Certificate not after:    Wed 25 Jun 2025 01:39:24 +0000
Subordinate resources:    IP: 2a0f:85c1:331::/48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 00:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:06:43:4b:04:ec:fa:da:61:bc:f8:16:9c:30:32:73:76:3b:06:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: Jun 26 01:34:24 2024 GMT
            Not After : Jun 25 01:39:24 2025 GMT
        Subject: CN=EF9F2D6EC712DCE081DA9CED1F956372EA648756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5c:97:d9:b4:c0:7c:cd:57:27:19:95:20:e4:
                    d7:0a:ef:20:9d:25:93:48:e8:ed:9b:38:97:5b:cc:
                    88:df:61:de:d6:09:1c:d4:f2:36:5e:cb:8d:5d:ff:
                    63:ef:48:6b:4a:c2:a7:b9:0e:d6:f1:b5:01:df:6c:
                    97:df:c2:20:4c:7a:dd:69:c7:e0:47:16:0c:d4:1c:
                    ae:f1:34:24:fc:3e:46:ab:38:a4:94:02:74:01:e3:
                    d3:35:7e:0a:80:e7:42:a7:fd:e7:ff:59:d0:c9:26:
                    85:a5:70:51:6e:af:43:04:b0:8f:cd:5a:25:d9:4d:
                    a5:54:a1:87:56:13:de:7c:ab:9a:86:ac:ce:5b:3d:
                    c1:9f:52:83:82:ed:62:50:e1:90:05:9b:24:fd:cf:
                    91:dd:c8:9d:0c:03:80:b4:23:40:20:dd:12:ea:a2:
                    50:1c:13:e4:50:47:b2:df:a3:34:a8:ba:5c:2b:1f:
                    fa:fa:29:e8:bd:2b:56:35:b6:e0:9b:2a:3e:c4:db:
                    20:16:99:53:db:5e:68:de:af:24:ba:88:b1:6e:ec:
                    e0:d6:46:2b:57:c2:0c:7e:9d:77:ca:6f:88:d4:d6:
                    38:93:af:04:f1:d3:ab:df:b3:03:bb:b4:a1:3f:a3:
                    71:76:b0:19:79:0e:9e:07:46:37:dc:6f:b8:44:f8:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:9F:2D:6E:C7:12:DC:E0:81:DA:9C:ED:1F:95:63:72:EA:64:87:56
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/EF9F2D6EC712DCE081DA9CED1F956372EA648756.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:331::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:66:67:93:e9:12:8d:05:a5:4e:e4:3d:eb:3e:81:c3:0e:6e:
         a1:39:7c:45:c7:dd:e9:08:e6:17:d3:5d:47:43:e9:49:2c:98:
         c0:13:e4:4f:b0:3e:ca:95:38:b7:49:af:26:68:ea:1f:06:0f:
         09:bd:57:df:6b:a3:8a:b0:73:e4:0e:fe:46:2e:42:fd:46:98:
         24:7f:d0:52:8b:7c:1b:fc:55:30:33:6c:97:ff:10:60:8c:4d:
         21:9b:5e:b9:62:54:91:55:c6:c9:a0:75:50:70:53:fc:4b:21:
         43:a1:cf:ee:86:17:15:9a:cf:63:69:f2:07:1b:bf:db:84:7d:
         d5:1b:f0:8a:a5:92:4e:6a:45:91:2b:74:de:34:69:4a:38:d0:
         e5:fb:54:fa:76:a6:9d:17:47:1e:27:6a:76:5b:9c:df:c4:ff:
         c1:00:87:9b:23:e2:16:d4:84:ce:c3:7d:15:44:42:cf:dc:ca:
         ed:03:2f:63:d8:f1:cb:b4:39:b1:d8:b9:35:57:59:9b:d8:de:
         49:b6:9d:59:04:25:2a:57:32:0b:4a:28:b9:0c:be:aa:20:d7:
         b7:a4:82:4c:6e:73:ea:8c:25:6f:1b:c7:c7:6a:56:0d:57:f4:
         56:49:e5:71:24:73:de:51:ab:b2:c2:a0:8d:de:f6:c0:ef:92:
         e5:e3:23:9b
-----BEGIN CERTIFICATE-----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