Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vopjFjH_CqLcW9n4mWaHoJxViRE.cer
File:                     vopjFjH_CqLcW9n4mWaHoJxViRE.cer (raw, json)
Hash identifier:          RNXuNYdvE0GyR9iqKoJBEvD5KCBraWcT81LZyiJGvPQ=
Subject key identifier:   BE:8A:63:16:31:FF:0A:A2:DC:5B:D9:F8:99:66:87:A0:9C:55:89:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AEE71842D9461ED0154CEF10083DC5F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/183/BE8A631631FF0AA2DC5BD9F8996687A09C558911.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/183
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:24:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.116.27.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:ee:71:84:2d:94:61:ed:01:54:ce:f1:00:83:dc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be8a631631ff0aa2dc5bd9f8996687a09c558911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:e2:ef:28:db:c2:05:90:75:55:8a:80:1e:
                    bb:5e:06:37:0e:4d:32:88:f1:06:77:37:c8:3f:ee:
                    f7:b7:c0:4b:ee:09:b4:23:29:bd:0c:f3:21:aa:5b:
                    ec:06:34:63:81:67:a4:4f:cd:a9:fb:c1:36:c2:ec:
                    7d:f9:ca:11:5b:61:02:fe:44:4c:ac:7c:ab:16:5f:
                    88:44:f7:ac:ff:1e:69:85:b7:d6:34:98:80:e4:cc:
                    9e:4a:4d:13:3d:2a:6a:25:93:44:90:7a:ca:a2:bc:
                    4c:4c:67:de:21:6b:f3:aa:8d:4b:49:da:4e:93:9f:
                    28:8c:aa:fd:6c:86:c0:70:96:9a:4c:ed:30:04:bb:
                    64:a7:4b:e8:d7:9c:e8:b4:be:10:a5:de:68:1d:28:
                    21:da:b2:2d:d0:00:e5:7f:db:ed:b2:e3:c8:8c:4f:
                    75:d4:e5:41:a5:e1:32:1c:7e:dd:d9:31:2d:c8:15:
                    28:52:4d:8d:83:59:e0:63:64:aa:dc:96:17:42:18:
                    0a:fd:54:fd:57:4e:fb:aa:58:16:a2:b9:e5:94:ae:
                    c0:18:82:ae:c6:fb:3a:13:6e:fd:5f:04:a0:d7:0c:
                    4c:3b:8f:14:41:dd:d3:cb:40:79:59:7f:90:af:92:
                    ee:3d:b4:a1:b6:ac:6f:18:76:95:82:8d:2f:4e:de:
                    cf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8A:63:16:31:FF:0A:A2:DC:5B:D9:F8:99:66:87:A0:9C:55:89:11
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/183
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/183/BE8A631631FF0AA2DC5BD9F8996687A09C558911.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f3:9f:88:a4:5d:9f:58:dc:e3:7b:10:48:d2:26:6b:dc:13:
         05:50:7e:8a:e7:bd:a4:f3:db:68:b0:a9:ea:7b:a6:91:5b:0c:
         6f:a5:79:92:2c:40:5a:38:fa:a5:7b:66:1d:9f:5d:a2:50:ee:
         80:cf:79:1f:e7:30:21:40:07:68:81:68:af:04:d9:33:84:ea:
         03:fd:51:62:d9:58:e6:56:2c:b9:1a:81:7e:59:7e:90:97:52:
         2a:54:c7:c1:30:b0:be:5d:d7:38:42:36:ba:77:57:5d:51:b0:
         62:5e:6a:dd:c2:25:2a:fa:96:76:b9:ab:06:b0:7a:04:4f:43:
         77:74:da:6d:81:d5:6c:b8:c4:ad:6f:dc:ad:89:78:33:da:8e:
         ac:27:bb:5e:6b:5f:91:8b:6a:05:77:3a:17:e0:bd:5a:8c:7d:
         69:a0:c2:3a:6f:51:88:f6:fd:f7:82:19:ff:d6:11:49:39:32:
         6b:02:0c:11:ef:1c:05:86:0a:48:94:1a:10:8a:8c:54:5a:5c:
         6d:bd:ca:09:c6:df:3a:88:ea:f7:8d:12:b1:f9:fc:3c:89:ee:
         7b:1f:fc:ba:67:c7:06:ed:4a:aa:53:7f:d1:3d:46:12:20:7e:
         8f:dc:34:3f:53:be:0a:89:06:5c:28:e9:c2:2a:c1:80:68:2d:
         c9:f2:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:37 2023 by rpki-client on console.sobornost.net