Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JlAY26nCWm4zirTpGr5ol_akVRQ.cer
File:                     JlAY26nCWm4zirTpGr5ol_akVRQ.cer (raw, json)
Hash identifier:          EIFXIgdzFb2WpKSyy+f5CK9/MAwVtY8pJXo4YJ7HuaE=
Subject key identifier:   26:50:18:DB:A9:C2:5A:6E:33:8A:B4:E9:1A:BE:68:97:F6:A4:55:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348D717637AF98336375DBB73588562
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/d21ef7-f1ce-4077-ab74-4828dc72ea98/1/JlAY26nCWm4zirTpGr5ol_akVRQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/d21ef7-f1ce-4077-ab74-4828dc72ea98/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:39 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 45.132.248.0/22

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 13:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:d7:17:63:7a:f9:83:36:37:5d:bb:73:58:85:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=265018dba9c25a6e338ab4e91abe6897f6a45514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:85:33:6d:5a:73:20:e4:f7:13:77:60:00:
                    cd:bd:08:03:04:a3:50:8a:1f:dc:be:cf:18:b6:3a:
                    08:98:0d:5c:7b:c3:ef:13:93:67:45:da:f6:ae:2b:
                    3b:f4:73:d7:8f:6b:a0:4a:d6:d6:b1:3b:0e:aa:ec:
                    c1:c7:47:35:c6:72:82:ea:5a:60:fc:99:d1:72:13:
                    eb:6a:4e:23:ad:b4:df:31:84:2b:91:73:23:64:64:
                    b8:54:fc:d9:e8:d3:f7:83:a6:8f:43:8b:81:35:40:
                    21:59:31:9e:89:3c:d2:28:a0:59:e3:34:27:40:98:
                    8a:e1:95:8a:c6:b3:94:e3:6d:fd:60:41:62:ce:59:
                    a7:23:bb:37:a6:32:1d:80:d6:4b:c0:57:c3:71:82:
                    ec:72:78:a4:98:39:71:3b:37:55:03:2c:f8:bf:7b:
                    08:e7:52:52:6c:f2:7d:6a:8e:3f:a2:f0:4c:6f:db:
                    0e:ca:40:e9:e6:8a:d8:c1:62:75:65:53:a8:13:e2:
                    25:97:c7:69:5a:f6:19:0e:c9:03:c6:ff:80:24:e5:
                    42:d5:6a:29:80:60:d5:12:13:b5:1f:32:c6:63:d4:
                    31:3d:ac:a0:e0:c3:3f:82:f0:64:79:6e:69:a7:1f:
                    c3:f3:1d:30:5f:af:ff:99:ae:b2:7f:03:56:7e:2d:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:50:18:DB:A9:C2:5A:6E:33:8A:B4:E9:1A:BE:68:97:F6:A4:55:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d21ef7-f1ce-4077-ab74-4828dc72ea98/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d21ef7-f1ce-4077-ab74-4828dc72ea98/1/JlAY26nCWm4zirTpGr5ol_akVRQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:c0:ec:c2:63:17:cd:d5:b9:23:ee:c5:e2:83:0d:f7:93:
         5f:48:a5:42:85:7f:5c:f5:69:4d:8e:be:18:c6:bf:a7:42:57:
         8c:fe:7d:77:90:5e:cc:4c:00:7b:ff:a9:8f:e0:74:3c:a3:4e:
         be:c2:3c:0c:e3:f4:c1:60:89:25:43:21:60:76:df:56:06:e8:
         92:4d:33:5b:99:8e:68:ca:33:d4:b2:03:67:4a:c8:18:da:9e:
         da:bc:eb:54:15:6f:d0:48:14:65:ac:a2:a0:b8:f1:1b:31:2f:
         11:ba:32:f4:88:a1:c6:c9:70:8e:8f:b7:16:e7:fe:d2:29:57:
         fb:1a:ce:4d:9e:59:de:e9:94:68:2f:b3:f9:e6:41:1b:dd:e3:
         2c:98:f0:89:bb:6c:f9:e1:16:f4:d8:29:5a:fe:86:a8:dc:14:
         df:e4:5b:07:80:bc:8a:86:ff:9f:a9:0e:71:05:67:80:fa:08:
         d7:42:12:ab:50:be:ec:d6:b1:8f:a6:1b:ae:71:6f:e9:f6:23:
         e5:fc:14:e6:d4:c1:55:af:dd:cc:64:26:15:2d:f8:40:e4:9a:
         fb:07:2f:6d:06:a8:a4:1a:2b:3f:26:e4:85:76:ee:e2:32:67:
         3a:82:5e:67:4b:af:2e:77:10:c2:37:f0:0a:67:91:af:a2:a9:
         a2:dd:49:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:40 2024 by rpki-client on console-fra.rpki-client.org