Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/840049AF6C891FE141FA36BC081C1877706BB812.cer
File:                     840049AF6C891FE141FA36BC081C1877706BB812.cer (raw, json)
Hash identifier:          KNubxl5KiLXnXO5Je0XVzodScLO86fTrXb5SY8svNPE=
Subject key identifier:   84:00:49:AF:6C:89:1F:E1:41:FA:36:BC:08:1C:18:77:70:6B:B8:12
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       01F92FE0A94C92493DEB7B08840CBD6FFE69A41F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/840049AF6C891FE141FA36BC081C1877706BB812.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Wed 16 Aug 2023 09:02:36 +0000
Certificate not after:    Wed 14 Aug 2024 09:07:36 +0000
Subordinate resources:    IP: 2.56.254.0/24
                          IP: 2.59.148.0/23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f9:2f:e0:a9:4c:92:49:3d:eb:7b:08:84:0c:bd:6f:fe:69:a4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Aug 16 09:02:36 2023 GMT
            Not After : Aug 14 09:07:36 2024 GMT
        Subject: CN=840049AF6C891FE141FA36BC081C1877706BB812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:de:7c:74:a7:5b:92:fe:e1:f2:18:54:1f:
                    14:58:7f:a0:71:95:97:36:bb:0f:64:4f:69:a3:d5:
                    1f:c5:29:30:72:b9:90:13:c8:6c:f2:85:b1:04:33:
                    95:65:26:b1:43:69:d0:39:49:52:ef:01:ca:75:67:
                    55:7f:37:bc:2c:08:2b:f6:1b:3d:00:a0:3d:e6:a8:
                    88:fe:c2:83:48:8b:2b:53:21:51:b2:a0:1a:03:40:
                    23:60:ca:2c:98:21:bb:9c:67:7c:9e:e5:f9:4f:eb:
                    1c:45:4e:52:d1:5f:3e:7d:3a:77:3e:f7:9b:e2:81:
                    33:e7:61:db:25:29:69:74:42:a6:92:a1:0d:56:10:
                    e7:30:9a:00:79:07:16:3b:de:aa:ff:25:1c:2f:a4:
                    8f:06:d1:b1:98:88:1a:89:86:a9:cb:e3:c1:9e:bb:
                    ce:e1:fb:7c:36:d7:09:7a:80:b2:7c:ee:6e:a7:18:
                    cb:fe:a8:d6:dd:9a:c2:75:75:e6:42:9d:de:ea:f3:
                    1e:3a:a0:8b:60:e6:c4:27:38:da:57:84:c5:bd:28:
                    93:8d:ca:40:ad:cc:71:0e:0e:b8:1b:f3:a1:2f:9d:
                    e7:e1:48:7d:cc:fe:be:25:e8:c1:8a:80:87:0c:3c:
                    9b:ea:4f:c2:0e:02:71:d8:f8:ad:4f:5d:28:92:df:
                    1c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:00:49:AF:6C:89:1F:E1:41:FA:36:BC:08:1C:18:77:70:6B:B8:12
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/840049AF6C891FE141FA36BC081C1877706BB812.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.254.0/24
                  2.59.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:5b:9b:2e:d2:51:f1:6c:b8:88:6d:c6:1a:f6:ae:eb:86:f1:
         fb:69:bc:1d:47:28:4f:89:9f:84:6a:d9:1d:99:a9:8b:c6:bd:
         b9:74:ee:f3:42:2f:d8:c5:77:c6:3c:a9:8a:12:fa:b7:6e:17:
         53:5d:fa:98:e7:0e:5b:75:6b:04:04:be:d9:35:6b:16:16:a0:
         48:df:2b:1a:79:1b:84:26:00:3f:c2:ff:9e:91:71:f0:42:fc:
         13:bd:15:ac:40:7c:5a:17:ed:e1:9d:c2:76:42:28:aa:d7:51:
         15:62:9e:03:1e:ba:c3:55:4d:49:90:a5:95:1f:eb:a2:59:26:
         93:5c:93:f2:72:f3:1b:25:b1:82:51:5f:f5:b6:a9:26:44:d7:
         0b:df:51:47:37:80:3d:72:cf:3a:d9:8b:16:89:19:3b:98:60:
         1e:b6:26:36:06:68:10:65:ac:1a:2c:ca:7a:2a:4d:b2:b4:02:
         1e:cc:e7:98:a7:97:72:91:be:79:e1:b7:f6:72:bf:af:e2:e1:
         10:09:a4:41:0d:8a:12:39:af:66:67:64:c5:ca:88:7e:54:29:
         e7:62:ca:26:85:24:ce:74:4c:4e:94:12:6b:91:e6:6b:ad:80:
         13:66:bc:24:60:55:50:51:f7:54:e0:bc:38:ec:85:00:02:f1:
         a4:eb:72:b2
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUAfkv4KlMkkk963sIhAy9b/5ppB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA4MTYwOTAyMzZaFw0yNDA4MTQwOTA3MzZaMDMxMTAvBgNV
BAMTKDg0MDA0OUFGNkM4OTFGRTE0MUZBMzZCQzA4MUMxODc3NzA2QkI4MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWSt58dKdbkv7h8hhUHxRYf6Bx
lZc2uw9kT2mj1R/FKTByuZATyGzyhbEEM5VlJrFDadA5SVLvAcp1Z1V/N7wsCCv2
Gz0AoD3mqIj+woNIiytTIVGyoBoDQCNgyiyYIbucZ3ye5flP6xxFTlLRXz59Onc+
95vigTPnYdslKWl0QqaSoQ1WEOcwmgB5BxY73qr/JRwvpI8G0bGYiBqJhqnL48Ge
u87h+3w21wl6gLJ87m6nGMv+qNbdmsJ1deZCnd7q8x46oItg5sQnONpXhMW9KJON
ykCtzHEODrgb86EvnefhSH3M/r4l6MGKgIcMPJvqT8IOAnHY+K1PXSiS3xxvAgMB
AAGjggLUMIIC0DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSEAEmvbIkf4UH6
NrwIHBh3cGu4EjAfBgNVHSMEGDAWgBSrLcwWnJXysU3zHdJKH2cDTqd3nDAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mZTM3MDhhMC02N2Q1LTRh
YzItYWJjNC1hMzMyNTkwYjk5YWYvNC9BQjJEQ0MxNjlDOTVGMkIxNERGMzFERDI0
QTFGNjcwMzRFQTc3NzlDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcXkzTUZw
eVY4ckZOOHgzU1NoOW5BMDZuZDV3LmNlcjCCASwGCCsGAQUFBwELBIIBHjCCARow
VgYIKwYBBQUHMAWGSnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzMw
MzI3YjllLTIyN2EtNGViZC04MjViLTNiOTgwOTVkYzkyNy0wLzAvMIGCBggrBgEF
BQcwCoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUt
MjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC84NDAwNDlBRjZDODkxRkUx
NDFGQTM2QkMwODFDMTg3NzcwNkJCODEyLm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6
Ly9tYWdlbGxhbi5pcHhvLmNvbS9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAME
AAI4/gMEAQI7lDANBgkqhkiG9w0BAQsFAAOCAQEAAFubLtJR8Wy4iG3GGvau64bx
+2m8HUcoT4mfhGrZHZmpi8a9uXTu80Iv2MV3xjypihL6t24XU136mOcOW3VrBAS+
2TVrFhagSN8rGnkbhCYAP8L/npFx8EL8E70VrEB8Whft4Z3CdkIoqtdRFWKeAx66
w1VNSZCllR/rolkmk1yT8nLzGyWxglFf9bapJkTXC99RRzeAPXLPOtmLFokZO5hg
HrYmNgZoEGWsGizKeipNsrQCHsznmKeXcpG+eeG39nK/r+LhEAmkQQ2KEjmvZmdk
xcqIflQp52LKJoUkznRMTpQSa5Hma62AE2a8JGBVUFH3VOC8OOyFAALxpOtysg==
Generated at Wed Aug 16 11:07:49 2023 by rpki-client on console-fra.rpki-client.org