Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bAMP5k4RbxlIKVLaaH6KJM8kNmo.cer
File:                     bAMP5k4RbxlIKVLaaH6KJM8kNmo.cer (raw, json)
Hash identifier:          h8hitD+L8ecrCp6DbWHxdsKxeQzSEQ9cjuQslhkTcp4=
Subject key identifier:   6C:03:0F:E6:4E:11:6F:19:48:29:52:DA:68:7E:8A:24:CF:24:36:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF6DF291D8C620223C1E6AA85E4CFF2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/207/6C030FE64E116F19482952DA687E8A24CF24366A.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/207
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:34:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 93.93.201.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f6:df:29:1d:8c:62:02:23:c1:e6:aa:85:e4:cf:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:34:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c030fe64e116f19482952da687e8a24cf24366a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:09:de:5a:dc:2e:8b:31:0d:fd:36:9f:86:
                    9a:37:d1:2c:83:89:de:03:b0:53:91:6c:ea:78:92:
                    50:d7:b1:dd:75:6e:1a:5d:5e:9d:43:64:01:fc:95:
                    3e:fa:db:39:42:96:c1:78:4d:e0:9b:3f:40:2b:79:
                    e4:27:f2:80:3a:b3:15:22:a9:ec:59:f9:e2:2e:4b:
                    b1:c2:0d:ae:4e:c8:69:17:e1:4b:4f:f4:ad:a8:45:
                    d4:10:0b:a3:89:15:08:ba:1a:62:fd:1c:bd:bb:e2:
                    a2:0a:b2:20:7e:2b:2f:fb:e4:04:cf:4b:bc:ba:73:
                    45:9a:94:62:db:bb:6c:47:07:99:a4:77:e6:a2:5d:
                    7b:b6:66:37:a7:07:67:7c:c4:71:d0:5e:56:ec:10:
                    52:10:aa:3c:2b:bf:4f:8c:38:e1:8f:12:ed:f9:ff:
                    40:21:0e:75:9e:d3:c1:34:70:a9:c5:3c:d5:7e:a6:
                    0c:fc:8b:28:2c:82:9a:1a:03:15:21:de:0b:a8:9f:
                    70:4d:3f:13:11:9c:0e:bf:d9:46:ec:84:be:4e:82:
                    97:81:31:09:37:b5:05:49:ba:88:df:82:f4:6c:bc:
                    92:64:02:e7:41:65:06:7c:03:a2:4a:5f:69:9c:db:
                    67:bb:1f:36:82:84:6e:35:b5:88:8b:fa:4f:0d:80:
                    a0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:03:0F:E6:4E:11:6F:19:48:29:52:DA:68:7E:8A:24:CF:24:36:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/207
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/207/6C030FE64E116F19482952DA687E8A24CF24366A.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:33:4c:36:aa:8c:97:08:a2:e3:1e:42:7a:78:96:a2:9d:08:
         c8:80:9a:fd:c1:60:d5:40:cb:db:d5:cf:17:fa:c1:6a:cb:ad:
         bd:aa:90:56:cf:ac:f6:b5:32:49:7e:e4:3d:39:2a:f6:08:29:
         2b:bd:5a:9a:94:62:a3:f7:e7:09:0c:b4:c4:10:f6:d7:86:ad:
         80:60:9b:de:95:0c:f2:0c:0f:5c:ab:e9:e8:a8:58:aa:0b:96:
         96:e0:a5:50:61:02:77:8f:97:4e:a5:a6:1f:b3:ef:e2:21:30:
         46:ad:3e:5c:cf:db:6a:ba:57:19:b9:a8:cd:fe:dd:a6:ed:16:
         2e:19:78:af:2c:44:c9:45:39:09:8b:de:ac:6f:8c:6e:ff:eb:
         ae:2b:90:94:f5:d2:02:19:80:8e:9e:2f:1a:bc:5c:f1:70:9d:
         9e:ea:b7:8c:f6:59:9b:21:0b:7a:f4:98:af:c5:cb:09:09:50:
         ee:74:f7:d7:dc:8b:d8:75:e2:77:40:9d:99:3d:06:c0:d0:01:
         2c:69:05:7d:99:cc:f6:f4:de:1a:e9:8c:5d:2b:13:99:e0:c7:
         72:6b:4e:e1:fc:aa:05:ac:14:9c:b9:fa:04:a2:ce:a5:3a:f7:
         99:6c:2b:bd:50:5b:ad:5f:45:2c:ca:c8:b2:d9:9f:c8:26:9a:
         c6:ee:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:03 2023 by rpki-client on console.sobornost.net