Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Elgxy98R1ludzpJo5A9HPF5YsKY.cer
File:                     Elgxy98R1ludzpJo5A9HPF5YsKY.cer (raw, json)
Hash identifier:          MiXi9n1jzaRG2ZRqBsj+WjaL3lt9rmIIP8a/mHQ++cw=
Subject key identifier:   12:58:31:CB:DF:11:D6:5B:9D:CE:92:68:E4:0F:47:3C:5E:58:B0:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01884571D526795E6147B9BA637D4B5D64A1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/Bee/0/125831CBDF11D65B9DCE9268E40F473C5E58B0A6.mft
caRepository:             rsync://rpki.co/repo/Bee/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:51:08 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199693

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:45:71:d5:26:79:5e:61:47:b9:ba:63:7d:4b:5d:64:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 22 21:51:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=125831cbdf11d65b9dce9268e40f473c5e58b0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:32:2f:8b:05:bd:d3:dc:c8:74:05:45:a5:
                    f2:1e:8a:8c:1e:0e:17:42:20:c6:8b:d5:37:a7:fa:
                    74:e8:2a:4d:8d:52:d4:e6:09:eb:6c:ae:50:a0:82:
                    f8:82:fa:68:5e:55:a9:42:a6:dd:ae:56:fd:e2:49:
                    ab:d9:e6:aa:3d:a6:b5:fd:4c:e7:6d:87:02:41:00:
                    6d:ca:fc:34:46:26:da:7a:b2:ab:f6:2e:68:e8:7e:
                    61:b5:70:ab:05:15:8f:8a:ff:51:76:27:7d:7f:76:
                    18:d1:cf:14:b4:fe:57:02:d5:82:aa:48:bf:4f:bb:
                    53:64:d0:52:ee:50:a6:d2:09:c4:4e:f5:43:79:48:
                    95:df:bc:6e:91:61:88:21:88:7b:96:4e:21:a1:c9:
                    14:d6:fd:20:7c:52:11:fc:f0:c6:a4:14:c5:bd:f4:
                    7f:b3:76:32:88:dc:cc:6d:63:10:c8:28:51:e6:e5:
                    ba:e8:43:49:ec:c7:6f:27:f1:cb:61:46:0a:42:ba:
                    ac:6d:f6:ae:69:8e:e1:cd:ec:d0:ad:9e:26:e6:be:
                    28:1f:70:55:d9:22:e2:cf:0c:a6:a8:95:6c:6c:24:
                    a8:59:fd:16:49:6b:6b:b4:ca:44:8a:69:f3:22:22:
                    16:90:e9:8d:f7:c4:b9:15:94:9c:3e:45:6d:8b:f7:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:58:31:CB:DF:11:D6:5B:9D:CE:92:68:E4:0F:47:3C:5E:58:B0:A6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Bee/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/Bee/0/125831CBDF11D65B9DCE9268E40F473C5E58B0A6.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199693

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:11:81:99:1a:62:45:6e:c5:b0:e2:5e:41:36:81:9c:c3:
         b8:9d:c5:28:7b:7b:ae:7e:21:17:d7:10:c2:ff:07:48:18:d3:
         dd:0e:c5:b6:1e:09:8b:ff:89:ac:ac:1c:70:6b:8f:f3:ea:19:
         9b:01:29:df:fb:9f:90:9b:16:29:6d:c3:4b:ce:9a:c5:08:23:
         bb:63:60:11:68:bb:5a:0f:cf:ed:e6:ea:a9:84:7b:14:7b:4e:
         ba:b7:95:9d:31:39:d7:0d:e2:31:d4:0c:80:ee:37:1d:d4:86:
         4f:9a:c4:87:9d:97:8c:e7:ae:ba:91:5e:92:01:30:ed:1f:86:
         2d:a2:e7:a5:de:29:9b:7f:a8:b9:03:bf:22:2c:b8:b3:e0:11:
         de:dd:c7:5d:c8:7a:e5:8e:b6:2d:cf:97:a4:6d:4e:07:15:33:
         9a:ed:77:83:d4:7b:eb:96:9c:ed:c3:08:41:66:c3:76:34:06:
         79:3c:a7:27:78:11:ec:69:21:cc:6b:a2:8b:b0:37:c3:c8:67:
         8b:e6:9c:55:09:9e:1f:2d:55:e5:e3:81:c9:55:70:93:68:d7:
         49:3b:b5:ae:01:de:a3:5b:96:25:26:54:15:9d:ff:0f:2b:c6:
         4f:e9:51:83:7a:8a:16:53:5c:25:82:e6:cf:7b:43:74:5a:54:
         dc:6c:93:33
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYhFcdUmeV5hR7m6Y31LXWShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNTIyMjE1MTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjU4MzFjYmRmMTFkNjViOWRjZTkyNjhlNDBmNDczYzVlNThiMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI4yL4sFvdPcyHQFRaXyHoqMHg4X
QiDGi9U3p/p06CpNjVLU5gnrbK5QoIL4gvpoXlWpQqbdrlb94kmr2eaqPaa1/Uzn
bYcCQQBtyvw0RibaerKr9i5o6H5htXCrBRWPiv9Rdid9f3YY0c8UtP5XAtWCqki/
T7tTZNBS7lCm0gnETvVDeUiV37xukWGIIYh7lk4hockU1v0gfFIR/PDGpBTFvfR/
s3YyiNzMbWMQyChR5uW66ENJ7MdvJ/HLYUYKQrqsbfauaY7hzezQrZ4m5r4oH3BV
2SLizwymqJVsbCSoWf0WSWtrtMpEimnzIiIWkOmN98S5FZScPkVti/eRCQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBJYMcvfEdZbnc6SaOQPRzxeWLCmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgcYGCCsGAQUFBwELBIG5MIG2MCcGCCsGAQUFBzAFhhtyc3lu
YzovL3Jwa2kuY28vcmVwby9CZWUvMC8wUwYIKwYBBQUHMAqGR3JzeW5jOi8vcnBr
aS5jby9yZXBvL0JlZS8wLzEyNTgzMUNCREYxMUQ2NUI5RENFOTI2OEU0MEY0NzND
NUU1OEIwQTYubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAucnBraS5jby9y
cmRwL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5I
QzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAwwNMA0GCSqGSIb3DQEBCwUAA4IBAQBeSBGBmRpi
RW7FsOJeQTaBnMO4ncUoe3uufiEX1xDC/wdIGNPdDsW2HgmL/4msrBxwa4/z6hmb
ASnf+5+QmxYpbcNLzprFCCO7Y2ARaLtaD8/t5uqphHsUe066t5WdMTnXDeIx1AyA
7jcd1IZPmsSHnZeM5666kV6SATDtH4Ytouel3imbf6i5A78iLLiz4BHe3cddyHrl
jrYtz5ekbU4HFTOa7XeD1HvrlpztwwhBZsN2NAZ5PKcneBHsaSHMa6KLsDfDyGeL
5pxVCZ4fLVXl44HJVXCTaNdJO7WuAd6jW5YlJlQVnf8PK8ZP6VGDeooWU1wlgubP
e0N0WlTcbJMz
-----END CERTIFICATE-----
Generated at Sat Oct 14 17:31:58 2023 by rpki-client on console-fra.rpki-client.org