Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L2GK4u4_J_RdqU-0mU-FVonJtwg.cer
File:                     L2GK4u4_J_RdqU-0mU-FVonJtwg.cer (raw, json)
Hash identifier:          rT34U0JOZAxQFe9qUp6hjxah4CALmwPIvh7p0G0cZ3k=
Subject key identifier:   2F:61:8A:E2:EE:3F:27:F4:5D:A9:4F:B4:99:4F:85:56:89:C9:B7:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FAC1B20D88B7BF05AC44C6AFAEC84C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/c1411f-9f3c-44c1-b7db-72def2d4afeb/1/L2GK4u4_J_RdqU-0mU-FVonJtwg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/c1411f-9f3c-44c1-b7db-72def2d4afeb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:35:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211692
                          IP: 45.88.56.0/22
                          IP: 2a0a:8d00::/32

Validation:               Failed, certificate revoked on Thu 13 Jul 2023 10:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:c1:b2:0d:88:b7:bf:05:ac:44:c6:af:ae:c8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:35:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f618ae2ee3f27f45da94fb4994f855689c9b708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:74:cf:e8:83:77:ac:db:1f:a0:db:45:f6:
                    ac:67:19:b9:92:fa:b1:e7:95:51:f7:d8:24:0b:db:
                    31:2a:e9:ff:1c:96:b7:0a:d9:9f:09:2f:91:95:fe:
                    b5:e4:e2:5e:f8:c9:cc:ed:6c:bb:ce:8e:75:ac:36:
                    37:7e:df:e5:a0:81:16:76:6f:ab:1c:78:70:a7:ff:
                    bd:dd:90:d1:1e:bc:93:b4:1e:50:c5:cd:8b:87:98:
                    87:6a:32:c1:ec:ae:94:6d:13:32:74:b7:ef:fc:d8:
                    e6:3f:05:26:b6:d6:eb:21:bd:40:ae:57:ea:69:a6:
                    0f:13:4f:78:fd:01:0d:3e:50:61:7f:50:d8:23:81:
                    92:b3:11:01:66:72:35:fc:ae:8f:96:77:03:53:1c:
                    58:d0:e2:03:4d:67:e5:68:e8:bd:75:03:dc:53:55:
                    72:c3:fe:c2:8e:03:35:e9:42:c4:ce:38:fa:a3:6b:
                    10:c7:3c:e2:b7:f9:8a:e6:80:73:87:f1:ec:08:ae:
                    60:b0:b9:1e:56:62:04:7a:bc:0b:94:05:89:68:c2:
                    05:39:3c:a1:70:ac:69:ac:c4:3f:78:5a:b0:11:5b:
                    7e:84:e3:df:a0:85:7a:51:74:54:cd:e4:20:73:66:
                    8b:0f:54:59:2f:15:9d:ed:c0:af:c5:c8:07:90:37:
                    7b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:61:8A:E2:EE:3F:27:F4:5D:A9:4F:B4:99:4F:85:56:89:C9:B7:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c1411f-9f3c-44c1-b7db-72def2d4afeb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c1411f-9f3c-44c1-b7db-72def2d4afeb/1/L2GK4u4_J_RdqU-0mU-FVonJtwg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.56.0/22
                IPv6:
                  2a0a:8d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211692

    Signature Algorithm: sha256WithRSAEncryption
         2c:9d:06:3a:16:00:29:d8:b9:91:8f:f4:36:42:c8:08:ca:29:
         53:e1:03:c7:dc:3d:cd:b4:ce:fc:61:79:6f:e2:da:93:2b:3d:
         76:af:e0:7c:09:13:ca:4a:fe:00:63:06:3c:69:18:54:ef:eb:
         d8:8b:ae:1e:88:e9:d2:87:12:ef:14:81:c9:5e:2d:ea:69:87:
         36:26:42:1a:e7:ad:d6:2b:6f:d7:bd:48:31:1d:32:07:9e:9c:
         f0:8d:4d:d5:f9:bc:d8:9e:8a:6b:2a:ad:54:29:c3:26:64:af:
         fc:ce:32:83:ec:38:6a:fd:ce:89:0d:d2:1e:90:84:aa:d3:a1:
         54:5a:ab:6b:16:88:db:d9:65:42:86:5c:51:f5:41:58:cf:a8:
         cd:2f:9c:13:ea:a3:7f:cb:66:34:b4:06:6f:e2:0a:57:b1:e8:
         4d:ef:0b:09:8d:a9:51:57:8b:28:c8:67:ae:7a:ab:b6:83:12:
         85:92:e6:c7:f0:65:4d:66:d3:f7:63:78:d3:d2:6f:73:53:fc:
         41:4a:ee:46:47:fe:97:64:63:93:87:e2:07:31:45:72:4b:c5:
         b5:bf:c4:20:f6:72:f7:31:d5:c3:25:4b:31:a3:a1:3a:84:42:
         11:92:2c:1a:fc:d5:1f:6f:c0:3f:7a:85:cd:8c:0f:d5:ed:7e:
         0f:03:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:28 2024 by rpki-client on console-ams.rpki-client.org