Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ies-0-IvCOduP2MexHyGxy6xGU.cer
File:                     2ies-0-IvCOduP2MexHyGxy6xGU.cer (raw, json)
Hash identifier:          rFO+46i0Q47W+uXW5PGus1XFZ9nCxlCYbgZ1/2Cm1PI=
Subject key identifier:   DA:27:AC:FB:4F:88:BC:23:9D:B8:FD:8C:7B:11:F2:1B:1C:BA:C4:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF76044E7FCE945E394E738636E284E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/181/DA27ACFB4F88BC239DB8FD8C7B11F21B1CBAC465.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/181
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:34:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 5.253.227.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f7:60:44:e7:fc:e9:45:e3:94:e7:38:63:6e:28:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:34:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=da27acfb4f88bc239db8fd8c7b11f21b1cbac465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:d3:5b:75:05:d9:51:c7:0b:7b:0f:b2:c1:
                    14:ea:c7:71:87:97:e6:70:c9:d3:ae:c8:85:d6:16:
                    d1:99:52:36:f4:0c:0f:20:e3:fa:35:98:76:f0:51:
                    24:dd:61:0a:42:05:46:26:60:9c:9c:79:fb:fb:ec:
                    7f:e9:95:4b:4c:74:6f:ad:62:41:ca:1f:be:85:0c:
                    44:cd:fc:37:ed:fa:75:b2:33:d2:a4:11:7b:d8:ce:
                    64:e7:89:fe:fa:cb:56:a7:af:e8:5c:d1:e5:4e:dd:
                    66:c9:c9:be:18:56:7b:df:d3:67:fb:61:6e:1d:68:
                    4b:11:86:dd:76:97:a8:7f:51:47:49:79:8f:30:f7:
                    2c:59:57:cc:c6:b2:bb:e4:09:b1:e2:16:0b:76:d9:
                    08:80:a8:2a:fd:2b:27:90:69:19:40:31:48:c3:1f:
                    9b:fc:6c:79:be:2f:40:96:0e:cd:f5:4d:4b:16:dd:
                    3a:07:60:c1:a4:c6:70:79:84:f1:d2:d6:99:81:55:
                    c3:7d:1d:17:f9:a5:62:de:60:24:4e:33:d5:fc:24:
                    79:3b:14:ec:22:3d:e8:79:2c:4c:30:72:71:44:7f:
                    ea:29:72:a5:01:85:c2:dc:ea:53:2b:e1:cf:88:ee:
                    e8:33:e8:ac:ef:1e:86:40:8b:d6:ad:d1:67:14:4a:
                    73:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:27:AC:FB:4F:88:BC:23:9D:B8:FD:8C:7B:11:F2:1B:1C:BA:C4:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/181
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/181/DA27ACFB4F88BC239DB8FD8C7B11F21B1CBAC465.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:a9:de:38:cd:aa:95:2e:4f:34:93:a4:ca:43:c4:75:e4:
         bf:ad:1e:82:57:ca:5b:a4:42:52:fe:92:8f:38:ee:99:f7:59:
         54:68:ac:d6:15:06:8e:77:49:58:eb:c4:ef:70:57:b4:48:c5:
         59:a7:f0:db:49:29:2b:4f:d8:88:5f:41:35:a4:8d:fd:af:8e:
         ef:7e:28:2b:9e:02:4d:67:6f:4a:6f:df:2e:45:62:ed:d1:79:
         1c:0e:b5:79:e9:e4:ce:0f:8e:95:0c:27:4d:1a:92:86:76:29:
         1f:ad:84:e3:5d:c7:96:f4:37:d7:b8:64:02:2d:86:05:7e:ba:
         1b:ba:a8:8c:15:6a:ad:e7:e5:95:23:3f:7d:c9:b1:79:2b:ad:
         bf:e8:67:2a:d8:40:30:44:c5:aa:79:2d:2c:db:98:67:fe:71:
         25:8b:d5:69:10:70:37:5a:cb:3e:fd:2f:10:7b:ef:e8:a1:c0:
         8b:ca:f5:21:9b:ae:04:ee:ab:6d:fc:24:08:9c:2e:6d:2e:11:
         04:80:16:50:04:b8:d0:03:ea:b7:95:f2:b1:f3:42:d7:d7:8b:
         7f:55:3d:db:93:48:1d:01:c0:7e:84:7b:66:98:01:62:d2:b4:
         aa:c4:60:a6:4c:55:6b:5a:13:76:3b:e5:48:66:93:38:0f:1e:
         6a:01:2c:77
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAYVq92BE5/zpReOU5zhjbihOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzNDM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTI3YWNmYjRmODhiYzIzOWRiOGZkOGM3YjExZjIxYjFjYmFjNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzjTW3UF2VHHC3sPssEU6sdxh5fm
cMnTrsiF1hbRmVI29AwPIOP6NZh28FEk3WEKQgVGJmCcnHn7++x/6ZVLTHRvrWJB
yh++hQxEzfw37fp1sjPSpBF72M5k54n++stWp6/oXNHlTt1mycm+GFZ739Nn+2Fu
HWhLEYbddpeof1FHSXmPMPcsWVfMxrK75Amx4hYLdtkIgKgq/SsnkGkZQDFIwx+b
/Gx5vi9Alg7N9U1LFt06B2DBpMZweYTx0taZgVXDfR0X+aVi3mAkTjPV/CR5OxTs
Ij3oeSxMMHJxRH/qKXKlAYXC3OpTK+HPiO7oM+is7x6GQIvWrdFnFEpzowIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFNonrPtPiLwjnbj9jHsR8hscusRlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEABggrBgEFBQcBCwSB8zCB8DA/BggrBgEFBQcwBYYzcnN5
bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTgx
MGwGCCsGAQUFBzAKhmByc3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBv
L1RlcnJhVHJhbnNpdC8xODEvREEyN0FDRkI0Rjg4QkMyMzlEQjhGRDhDN0IxMUYy
MUIxQ0JBQzQ2NS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBK
hkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28z
VlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAX94zANBgkqhkiG9w0B
AQsFAAOCAQEANFup3jjNqpUuTzSTpMpDxHXkv60eglfKW6RCUv6SjzjumfdZVGis
1hUGjndJWOvE73BXtEjFWafw20kpK0/YiF9BNaSN/a+O734oK54CTWdvSm/fLkVi
7dF5HA61eenkzg+OlQwnTRqShnYpH62E413HlvQ317hkAi2GBX66G7qojBVqrefl
lSM/fcmxeSutv+hnKthAMETFqnktLNuYZ/5xJYvVaRBwN1rLPv0vEHvv6KHAi8r1
IZuuBO6rbfwkCJwubS4RBIAWUAS40APqt5XysfNC19eLf1U925NIHQHAfoR7ZpgB
YtK0qsRgpkxVa1oTdjvlSGaTOA8eagEsdw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:43 2023 by rpki-client on console.sobornost.net