Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Uvc0oyHNQmBma7Ak8qJfAd9fJA.cer
File:                     3Uvc0oyHNQmBma7Ak8qJfAd9fJA.cer (raw, json)
Hash identifier:          Gvv23fGXceY/3BlBqwJ88pSwXB8NQrwcbTCqvW+nc7Q=
Subject key identifier:   DD:4B:DC:D2:8C:87:35:09:81:99:AE:C0:93:CA:89:7C:07:7D:7C:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8702DD055348BB555EEE29C4D02EBD7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/3Uvc0oyHNQmBma7Ak8qJfAd9fJA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 04:30:44 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206858
                          IP: 193.228.143.0/24
                          IP: 2a10:11c0::/32

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 07:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:70:2d:d0:55:34:8b:b5:55:ee:e2:9c:4d:02:eb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:30:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=dd4bdcd28c8735098199aec093ca897c077d7c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:26:0a:32:5b:c6:db:c4:a7:72:ef:18:12:
                    74:50:39:4d:f0:ca:b3:55:04:16:d3:60:c5:c5:64:
                    22:83:5b:1f:d4:89:46:6d:41:33:a4:fb:31:ca:d5:
                    16:00:70:85:a2:ed:12:ce:e8:b3:e3:0c:1e:fe:30:
                    78:63:41:64:91:2c:d9:b2:bc:2c:ee:67:38:eb:87:
                    8a:75:98:15:f5:1b:a8:67:db:80:e6:c7:db:f0:ab:
                    68:18:4e:e5:1e:a7:13:ed:8c:8e:f6:ec:c5:9c:94:
                    d1:d0:5f:c9:7e:7c:62:8d:e5:f7:13:dc:54:4b:17:
                    8e:68:5b:21:54:6d:b2:54:55:d7:6b:aa:c8:4d:bd:
                    ea:69:45:73:49:32:67:ff:5a:d7:b6:d5:3c:9c:64:
                    d8:b9:b7:be:6c:31:15:bb:77:6e:86:37:9f:6e:e6:
                    28:d7:5b:cf:82:12:6d:ba:7a:52:fb:21:ac:f9:b1:
                    36:80:8b:65:1b:ce:ff:40:1a:aa:fa:10:f4:92:43:
                    f5:c0:a9:7c:48:e4:47:72:d2:d2:67:d0:18:55:bb:
                    29:fc:bc:aa:7d:5c:c6:fc:22:fe:58:9b:5f:8d:51:
                    80:bc:50:84:a8:4d:9f:9a:a9:33:d9:bf:6e:8d:2a:
                    78:93:52:00:af:4a:55:ab:e2:04:64:3d:f8:63:cd:
                    17:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4B:DC:D2:8C:87:35:09:81:99:AE:C0:93:CA:89:7C:07:7D:7C:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/3Uvc0oyHNQmBma7Ak8qJfAd9fJA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.143.0/24
                IPv6:
                  2a10:11c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206858

    Signature Algorithm: sha256WithRSAEncryption
         9b:26:5e:42:76:75:29:87:6b:ca:94:49:e9:7c:bb:60:b9:d1:
         ef:8b:fe:d2:0b:4f:34:82:9b:93:20:10:b8:24:86:2d:09:44:
         ea:91:77:2a:d2:34:fd:2e:e9:b6:98:9d:92:63:b3:14:e8:27:
         ad:4d:ea:9d:cb:39:5d:33:a8:b1:6c:70:87:21:9c:92:7a:b7:
         c3:2b:c7:02:d5:39:9a:31:87:a3:b0:85:ae:8f:bd:f0:2c:63:
         c8:f6:18:86:bf:2e:f8:c3:e7:b7:5e:be:97:3b:4f:e6:46:87:
         7f:4c:a3:92:5f:bb:b6:ee:9f:0a:3a:b6:9b:9b:1c:f1:ad:b5:
         9d:98:52:d1:d3:72:1b:1e:80:e2:64:4e:20:37:46:85:4c:00:
         4a:3a:50:54:b3:45:e7:e7:56:1e:fc:f0:ba:f3:aa:ed:4e:79:
         bc:9c:4c:b2:a5:54:de:97:c1:b8:e9:eb:27:9f:8b:a3:62:46:
         85:ba:f2:5a:cd:61:67:c5:64:06:a1:6d:40:81:67:9a:27:16:
         fb:5f:38:19:f9:53:27:4e:e1:f9:6a:0f:07:18:89:a2:dc:5c:
         94:be:4d:8b:b2:7d:24:1f:fa:38:f7:d3:47:5b:a4:1a:61:87:
         87:17:4c:4d:9a:1b:e3:06:d8:5e:59:37:91:92:c8:21:d0:ac:
         e1:20:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 10:35:03 2024 by rpki-client on console-fra.rpki-client.org