Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/deiysou6PcToYdXL9bwcyYyJ5XY.cer
File:                     deiysou6PcToYdXL9bwcyYyJ5XY.cer (raw, json)
Hash identifier:          nWSzfSUiC0uHtIf+kd5V7Qr6n6QVFau3JRSEOSumgPg=
Subject key identifier:   75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC79333F68FEAE6B343557FBF06341CD6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/deiysou6PcToYdXL9bwcyYyJ5XY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 00:29:22 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 213.109.207.0/24

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 07:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:93:33:f6:8f:ea:e6:b3:43:55:7f:bf:06:34:1c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=75e8b2b28bba3dc4e861d5cbf5bc1cc98c89e576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:ad:b6:29:ad:a9:62:40:05:27:b0:6d:bd:
                    4e:a5:7e:82:3d:d1:e3:93:7b:ff:2e:c0:c0:be:a6:
                    2a:2a:0a:92:58:ff:9d:21:4e:79:8b:91:3b:3d:9a:
                    49:43:4c:12:b0:15:ef:85:0c:28:8d:b1:86:85:29:
                    2c:e5:9e:f8:3c:5d:91:c8:a0:fb:77:83:d6:e6:4d:
                    87:6f:4b:1e:3e:5e:cf:ef:1d:f2:78:72:c4:9c:35:
                    40:91:e1:17:6a:13:10:3d:48:fb:06:b3:72:a5:f5:
                    9e:36:27:cd:fb:ce:e1:0c:4c:00:df:2a:b1:c1:fe:
                    24:e5:91:1c:e7:5f:15:eb:fc:7e:cb:e6:51:fc:67:
                    df:e3:04:a6:8d:9b:d8:30:2f:a3:dc:15:31:e6:4f:
                    bd:53:55:32:f8:fb:cd:5f:9f:9a:2f:de:1d:db:51:
                    7c:58:55:a3:2d:4b:43:92:ac:a2:a8:cd:46:e3:61:
                    94:4a:fa:78:74:d4:f7:e4:66:84:a3:c0:32:4f:1f:
                    c7:87:97:00:d1:20:f3:17:0d:fd:30:37:ed:74:70:
                    e8:dc:54:88:94:53:a6:2c:e6:f8:dd:e9:d0:3b:3e:
                    c5:3b:53:bf:1f:51:81:2e:29:05:5b:2b:4d:f2:a5:
                    10:b1:5b:01:32:4e:b4:50:91:7b:dc:08:72:b4:ac:
                    8f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/deiysou6PcToYdXL9bwcyYyJ5XY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:8a:4c:ff:60:78:44:91:4c:d5:50:74:e0:b7:2e:df:18:30:
         16:e8:29:d7:3b:bd:18:f7:c9:c7:80:9c:23:33:dd:c4:2e:5f:
         22:bd:9f:2b:b5:e8:2d:6a:e1:5a:80:f5:97:52:c3:38:b1:89:
         11:9a:ce:d1:f3:b1:8c:96:e2:88:9e:ee:ed:71:a1:84:79:37:
         d4:4a:92:5d:d8:06:41:34:04:1b:94:ac:58:e1:8d:66:c3:2b:
         e5:6a:e1:20:fd:70:71:a6:c9:36:53:42:19:f4:c8:af:15:c4:
         56:43:3e:0f:5f:73:dc:b8:4e:57:ee:20:8f:3f:98:1e:57:02:
         24:03:46:69:63:80:cd:fc:bc:c4:bb:79:02:5f:c8:da:02:df:
         07:17:86:58:1c:54:23:57:6e:11:f3:1d:1b:83:fc:b5:59:95:
         1e:cc:f3:fe:67:7e:9c:48:b7:a6:1e:a4:7f:ab:5d:7e:b5:eb:
         c0:09:61:e5:83:1e:37:dc:b8:e1:ba:2f:4c:c5:9e:46:85:5b:
         44:f7:5f:8e:bd:08:68:ae:53:a4:cb:6b:da:05:40:81:f5:e6:
         ce:d5:91:86:ee:c7:5e:c9:4d:25:92:7b:a8:72:50:f2:f3:e8:
         97:83:bb:c2:9f:47:78:de:c9:68:c2:7a:d0:d7:c6:81:80:81:
         3b:3a:4c:02
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzHkzP2j+rms0NVf78GNBzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWU4YjJiMjhiYmEzZGM0ZTg2MWQ1Y2JmNWJjMWNjOThjODllNTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhKttimtqWJABSewbb1OpX6CPdHj
k3v/LsDAvqYqKgqSWP+dIU55i5E7PZpJQ0wSsBXvhQwojbGGhSks5Z74PF2RyKD7
d4PW5k2Hb0sePl7P7x3yeHLEnDVAkeEXahMQPUj7BrNypfWeNifN+87hDEwA3yqx
wf4k5ZEc518V6/x+y+ZR/Gff4wSmjZvYMC+j3BUx5k+9U1Uy+PvNX5+aL94d21F8
WFWjLUtDkqyiqM1G42GUSvp4dNT35GaEo8AyTx/Hh5cA0SDzFw39MDftdHDo3FSI
lFOmLOb43enQOz7FO1O/H1GBLikFWytN8qUQsVsBMk60UJF73AhytKyP5wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHXosrKLuj3E6GHVy/W8HMmMieV2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzgwYjkz
MC1hZDk3LTQwM2EtOWZkYi0wMTU2ZDAwMjcyYjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvODBiOTMw
LWFkOTctNDAzYS05ZmRiLTAxNTZkMDAyNzJiNy8xL2RlaXlzb3U2UGNUb1lkWEw5
YndjeVl5SjVYWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA1W3PMA0GCSqGSIb3DQEBCwUAA4IBAQA+ikz/
YHhEkUzVUHTgty7fGDAW6CnXO70Y98nHgJwjM93ELl8ivZ8rtegtauFagPWXUsM4
sYkRms7R87GMluKInu7tcaGEeTfUSpJd2AZBNAQblKxY4Y1mwyvlauEg/XBxpsk2
U0IZ9MivFcRWQz4PX3PcuE5X7iCPP5geVwIkA0ZpY4DN/LzEu3kCX8jaAt8HF4ZY
HFQjV24R8x0bg/y1WZUezPP+Z36cSLemHqR/q11+tevACWHlgx433Ljhui9MxZ5G
hVtE91+OvQhorlOky2vaBUCB9ebO1ZGG7sdeyU0lknuoclDy8+iXg7vCn0d43slo
wnrQ18aBgIE7OkwC
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:12 2024 by rpki-client on console.sobornost.net