Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LlGFngMQTdTF6SkTihIVoUD1GHU.cer
File:                     LlGFngMQTdTF6SkTihIVoUD1GHU.cer (raw, json)
Hash identifier:          /9nDFyH+3Oy0GiIq0vZ+/w4nnemfhJ2VBXXqiAxx7Jg=
Subject key identifier:   2E:51:85:9E:03:10:4D:D4:C5:E9:29:13:8A:12:15:A1:40:F5:18:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0192903AF1EE39F715BD6B4FBC5989A25E91
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3b/5a4b32-219c-4d54-945d-07cf904abbf2/1/LlGFngMQTdTF6SkTihIVoUD1GHU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3b/5a4b32-219c-4d54-945d-07cf904abbf2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 15 Oct 2024 12:50:35 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214030
                          IP: 2001:67c:f34::/48

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 10:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:90:3a:f1:ee:39:f7:15:bd:6b:4f:bc:59:89:a2:5e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 15 12:50:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2e51859e03104dd4c5e929138a1215a140f51875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:28:71:42:dc:96:33:07:ac:d3:0c:a1:70:
                    46:8b:89:a3:09:85:ad:f5:37:3c:6e:c7:ed:cb:19:
                    ba:ea:75:26:2f:a8:4e:4f:3a:29:ae:71:dc:45:32:
                    db:41:0f:ad:13:9e:2e:b9:72:72:ab:e9:cb:c9:3a:
                    8e:35:d0:4b:e2:3e:6e:2a:22:7b:e3:2a:31:ef:b7:
                    6a:8b:ac:51:4d:84:b7:61:06:6d:34:13:54:1d:ea:
                    4d:91:b2:26:97:06:f0:d4:05:d1:9e:34:7a:fb:85:
                    4a:c1:6d:96:92:55:12:55:2b:7e:14:e4:96:93:c1:
                    d9:a4:11:4d:25:b0:7c:e7:51:ef:98:47:44:93:ef:
                    44:fa:da:38:85:f0:7a:b1:95:a6:80:88:c8:5e:56:
                    03:88:5e:fb:d6:b3:b3:10:a2:0b:5e:04:2b:0d:67:
                    08:a4:c3:05:9d:f1:86:c5:c5:48:ec:72:91:24:3c:
                    b0:9e:e8:1b:ef:89:a0:dc:b4:cf:d0:9f:ed:40:e2:
                    21:ed:0c:11:9b:d8:65:75:70:13:ad:20:c8:b0:e6:
                    5d:3c:dd:2a:5d:4e:e0:03:c8:df:21:90:8c:84:97:
                    2d:8b:46:f8:46:ac:87:7e:fb:91:97:e3:36:ee:05:
                    71:5f:cc:fa:3c:10:65:ea:b5:b8:0c:0c:5c:0c:69:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:51:85:9E:03:10:4D:D4:C5:E9:29:13:8A:12:15:A1:40:F5:18:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5a4b32-219c-4d54-945d-07cf904abbf2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5a4b32-219c-4d54-945d-07cf904abbf2/1/LlGFngMQTdTF6SkTihIVoUD1GHU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:f34::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214030

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:61:ce:8b:6f:d1:4b:a1:19:1f:d3:71:d9:01:68:31:be:
         73:c2:dc:89:6a:9f:49:cc:1f:37:7f:77:68:81:e4:d4:18:79:
         44:57:17:0e:11:05:0c:9e:38:50:0f:0f:e2:ef:24:67:ae:0d:
         27:9a:9d:0e:68:a4:77:e5:ca:b4:62:1b:37:92:9b:e4:47:29:
         7d:c6:6b:fc:5f:9c:51:f3:d7:f5:87:3f:47:d5:e5:d7:65:5f:
         19:79:0a:5a:3e:ff:31:8f:9b:0a:7d:bd:0c:3e:d9:13:fe:de:
         f3:54:96:bd:79:77:b4:c5:10:8d:58:e1:09:e3:dc:ba:8d:ae:
         50:34:7a:5e:6c:a7:75:11:32:70:87:1f:06:ba:95:05:c9:32:
         3e:3a:e3:16:a1:f7:8d:38:d0:9a:26:99:8b:06:b9:9c:81:d5:
         b0:fa:7e:59:f2:4a:66:fd:dd:7f:c3:11:ab:44:79:c4:21:ac:
         87:9b:05:73:c0:39:e6:03:63:69:8c:05:ea:55:d7:b7:32:18:
         07:e3:a0:b1:a2:32:66:0b:29:92:1a:a7:83:45:64:26:23:b2:
         72:43:e3:3e:59:de:6c:ee:c6:c5:4c:02:30:94:5d:70:25:cc:
         08:0a:f5:0f:cb:91:5e:61:81:3f:cb:8d:1d:ab:90:c6:cd:32:
         fd:9b:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 12:02:05 2024 by rpki-client on console-fra.rpki-client.org