Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SWXdUyDoacsVMlNlGJ8SnKBdsoo.cer
File:                     SWXdUyDoacsVMlNlGJ8SnKBdsoo.cer (raw, json)
Hash identifier:          k6K9x0p/H7GwHNIl6MiRKXLnTWUczOL8t3FkK/bGgRA=
Subject key identifier:   49:65:DD:53:20:E8:69:CB:15:32:53:65:18:9F:12:9C:A0:5D:B2:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DECC93FC1DCBF5D34BFD9DE5CD21F1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/4aae9e-a3a1-4afa-80d9-26b8a7b8c8e7/1/SWXdUyDoacsVMlNlGJ8SnKBdsoo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/4aae9e-a3a1-4afa-80d9-26b8a7b8c8e7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:31:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 91.231.222.0/24

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 09:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:de:cc:93:fc:1d:cb:f5:d3:4b:fd:9d:e5:cd:21:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:31:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4965dd5320e869cb15325365189f129ca05db28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:4f:c1:6d:17:7a:9c:26:28:31:19:50:aa:
                    d3:b0:90:60:9a:6b:f6:d9:36:3a:46:80:30:78:20:
                    b4:f7:bd:a1:65:5f:79:ae:4d:b5:5a:e3:95:ff:29:
                    23:b7:1c:5f:bd:e4:12:32:0b:40:01:29:40:7e:0d:
                    9c:6f:b3:d6:79:05:aa:3c:37:3f:f1:03:89:4b:be:
                    7d:3d:d5:e0:21:9e:e3:f4:54:59:7c:17:82:6f:18:
                    12:e4:37:47:af:e7:e1:16:8f:74:a9:bc:5d:13:f8:
                    21:73:5e:3b:67:ae:6f:03:f6:73:67:6d:a0:8b:89:
                    fb:39:ce:e7:6b:4d:7f:bf:79:60:d1:4c:da:3a:9d:
                    08:0e:a5:2d:a4:29:f6:09:d9:ff:99:5d:17:d7:c7:
                    62:18:6f:db:0e:98:eb:df:d9:ef:42:fe:27:33:11:
                    af:67:b8:fd:7d:7a:0f:64:ee:69:c1:13:6b:53:4d:
                    30:57:d3:38:36:c3:01:fc:ed:c5:39:f7:ee:73:fc:
                    bd:6f:bb:30:e2:a0:d0:a1:4c:40:a4:5a:4c:2b:14:
                    e6:66:14:41:50:d6:95:ac:b3:ce:1f:49:20:af:08:
                    fb:a6:8c:1a:02:62:7a:f1:3e:da:27:ef:a4:fd:60:
                    4b:07:16:9a:61:53:b1:84:b2:21:1a:7f:18:73:1a:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:65:DD:53:20:E8:69:CB:15:32:53:65:18:9F:12:9C:A0:5D:B2:8A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4aae9e-a3a1-4afa-80d9-26b8a7b8c8e7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4aae9e-a3a1-4afa-80d9-26b8a7b8c8e7/1/SWXdUyDoacsVMlNlGJ8SnKBdsoo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:5c:1e:54:e0:c5:88:86:4e:fe:69:b6:9f:ce:f8:7d:90:99:
         2e:fa:9e:99:c7:4b:12:ea:cd:9b:6d:46:f7:8e:0d:a0:2e:47:
         0a:c1:bf:08:9d:41:22:a1:39:7c:a6:c8:78:2c:38:e2:4b:30:
         c8:c5:9e:f3:b8:07:e4:30:c4:7a:9a:38:2b:14:19:b4:82:37:
         0e:4e:ae:ca:cc:37:a6:d3:9f:8d:3a:3e:ff:e3:4e:1a:60:14:
         70:c7:f1:6b:f0:11:3c:7d:d8:ad:e1:c7:20:83:46:e5:a1:44:
         9c:82:f1:5b:4f:00:eb:8a:e5:db:4f:39:28:5b:fe:7e:e4:b2:
         be:f3:d6:c3:1a:98:47:2e:19:e4:21:8e:d3:0d:d7:47:b4:1c:
         1e:16:61:25:db:d8:16:3f:14:1a:25:fd:fd:d4:54:fe:c2:3a:
         c1:7b:4e:36:17:97:0d:e8:3c:58:e9:4b:ad:ea:fa:1f:14:fc:
         9c:59:72:e3:fd:72:66:f4:4f:44:c9:0a:c8:ba:e6:93:44:fc:
         e4:ce:60:3f:1d:94:a6:b6:8e:97:5a:e8:fd:a3:c4:c7:b3:98:
         f8:91:54:f9:f6:2c:cf:fc:34:11:fe:88:4b:de:22:d2:50:43:
         83:34:ef:b2:31:4c:ca:39:6d:d8:70:1a:36:f5:26:1d:43:e6:
         62:50:19:b0
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzI3syT/B3L9dNL/Z3lzSHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTY1ZGQ1MzIwZTg2OWNiMTUzMjUzNjUxODlmMTI5Y2EwNWRiMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1ZPwW0XepwmKDEZUKrTsJBgmmv2
2TY6RoAweCC0972hZV95rk21WuOV/ykjtxxfveQSMgtAASlAfg2cb7PWeQWqPDc/
8QOJS759PdXgIZ7j9FRZfBeCbxgS5DdHr+fhFo90qbxdE/ghc147Z65vA/ZzZ22g
i4n7Oc7na01/v3lg0UzaOp0IDqUtpCn2Cdn/mV0X18diGG/bDpjr39nvQv4nMxGv
Z7j9fXoPZO5pwRNrU00wV9M4NsMB/O3FOffuc/y9b7sw4qDQoUxApFpMKxTmZhRB
UNaVrLPOH0kgrwj7powaAmJ68T7aJ++k/WBLBxaaYVOxhLIhGn8YcxpaLwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEll3VMg6GnLFTJTZRifEpygXbKKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzRhYWU5
ZS1hM2ExLTRhZmEtODBkOS0yNmI4YTdiOGM4ZTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvNGFhZTll
LWEzYTEtNGFmYS04MGQ5LTI2YjhhN2I4YzhlNy8xL1NXWGRVeURvYWNzVk1sTmxH
SjhTbktCZHNvby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+feMA0GCSqGSIb3DQEBCwUAA4IBAQA+XB5U
4MWIhk7+abafzvh9kJku+p6Zx0sS6s2bbUb3jg2gLkcKwb8InUEioTl8psh4LDji
SzDIxZ7zuAfkMMR6mjgrFBm0gjcOTq7KzDem05+NOj7/404aYBRwx/Fr8BE8fdit
4ccgg0bloUScgvFbTwDriuXbTzkoW/5+5LK+89bDGphHLhnkIY7TDddHtBweFmEl
29gWPxQaJf391FT+wjrBe042F5cN6DxY6Uut6vofFPycWXLj/XJm9E9EyQrIuuaT
RPzkzmA/HZSmto6XWuj9o8THs5j4kVT59izP/DQR/ohL3iLSUEODNO+yMUzKOW3Y
cBo29SYdQ+ZiUBmw
-----END CERTIFICATE-----
Generated at Wed Mar 6 14:47:15 2024 by rpki-client on console.sobornost.net