Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CdUn-81xexMW7mTCg_3ibQ5bsVM.cer
File:                     CdUn-81xexMW7mTCg_3ibQ5bsVM.cer (raw, json)
Hash identifier:          EaiIYfQM9t4+0upC0CboQ7/L30bQJaMBX/+8YI9i7tM=
Subject key identifier:   09:D5:27:FB:CD:71:7B:13:16:EE:64:C2:83:FD:E2:6D:0E:5B:B1:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F318D265726C882483FDF08FB67FE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/d21efd-ea64-4145-8cef-6d62c0359d29/1/CdUn-81xexMW7mTCg_3ibQ5bsVM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/d21efd-ea64-4145-8cef-6d62c0359d29/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.249.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:31:8d:26:57:26:c8:82:48:3f:df:08:fb:67:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=09d527fbcd717b1316ee64c283fde26d0e5bb153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:ff:c2:fa:ea:0e:f3:ac:61:82:96:6e:6f:
                    e2:63:ee:13:72:57:03:7d:4b:73:6d:a4:33:72:96:
                    c4:01:82:25:9e:0b:fb:8e:ae:98:0a:b0:a1:7a:93:
                    e4:e1:01:db:72:2c:05:0b:74:e3:03:30:4d:e2:bc:
                    f9:6c:c4:e8:2e:2d:97:ed:cb:5b:4e:a1:f0:c4:6f:
                    24:fa:aa:81:f7:54:be:67:03:61:ee:54:57:d6:ce:
                    ed:a0:4f:aa:bb:4a:b2:ef:2f:09:f0:02:aa:6a:10:
                    92:50:fa:78:a9:97:23:0f:ef:ec:2f:a0:e5:76:8f:
                    a4:aa:4d:5d:42:a3:a8:8f:16:24:9a:1d:36:e7:64:
                    22:67:d4:b0:7e:cc:68:ec:83:62:82:73:85:29:9d:
                    b9:74:00:73:8d:74:68:00:1e:14:dd:88:7b:f4:7e:
                    d1:26:92:b9:0f:36:0b:bb:d8:28:12:91:45:7b:9e:
                    af:a9:90:88:2e:a7:4d:77:ce:aa:04:e3:2e:a0:e9:
                    eb:b0:30:0b:7c:5e:b4:49:98:6d:24:af:30:92:fc:
                    67:db:f8:67:db:02:a8:d3:ed:98:23:60:bb:3a:32:
                    bd:1d:f0:d2:ba:e4:94:20:6c:19:0c:d9:f0:9e:c0:
                    64:d8:58:cd:c6:33:42:5b:45:f1:90:df:17:64:ba:
                    f0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D5:27:FB:CD:71:7B:13:16:EE:64:C2:83:FD:E2:6D:0E:5B:B1:53
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d21efd-ea64-4145-8cef-6d62c0359d29/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d21efd-ea64-4145-8cef-6d62c0359d29/1/CdUn-81xexMW7mTCg_3ibQ5bsVM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:32:c2:ab:e3:81:96:40:bf:75:a5:52:f3:59:cf:59:3f:87:
         52:85:d8:a0:67:8b:92:6c:58:28:29:76:f3:bb:3f:8f:09:31:
         c0:c7:86:8f:eb:58:de:52:e8:6f:ca:15:e4:13:a1:94:2d:42:
         50:ee:49:c5:de:b9:aa:68:a2:4a:bb:d2:ce:c8:99:41:24:55:
         ec:a9:49:fc:37:76:ae:cc:22:99:5a:1b:93:cf:2a:71:33:a7:
         ae:e1:c7:ee:3f:fc:1a:99:42:a9:a2:1f:01:9b:9a:64:70:46:
         7a:ae:b0:70:ec:5b:7e:64:f5:9d:2b:2c:e8:77:12:02:d1:49:
         b8:ae:b1:5d:2a:27:28:c0:24:a2:56:80:20:d9:78:91:d2:1c:
         2a:26:7d:99:77:b8:1c:82:db:a8:a4:7c:20:97:a2:0b:24:ac:
         04:ef:f3:c6:a3:94:10:72:cd:b3:eb:2f:e5:7e:1d:40:4f:94:
         bd:0b:0b:c8:07:33:b4:3c:bc:16:14:b6:2f:7e:dd:f8:f1:fc:
         6c:a0:9e:d6:bb:3a:3c:d8:e5:fe:2e:06:64:7b:24:ce:2d:4a:
         85:2b:b4:a4:91:57:a4:2a:45:f4:ee:0e:2d:67:f5:a5:06:10:
         2b:c1:45:45:61:0d:a0:37:cd:70:fe:9f:a4:50:bf:4a:9d:52:
         2c:3f:4c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 11:04:10 2023 by rpki-client on console-fra.rpki-client.org