Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RLid_mW1rVMWQ2Rj5pxXO6-Eung.cer
File:                     RLid_mW1rVMWQ2Rj5pxXO6-Eung.cer (raw, json)
Hash identifier:          O2iwngo/ea0tNqLrMFlQ09BIkYD7GIvW/ir37h68YNs=
Subject key identifier:   44:B8:9D:FE:65:B5:AD:53:16:43:64:63:E6:9C:57:3B:AF:84:BA:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571685748546BE2B44F50CB82E77001A5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/16/40caac-8f02-45ed-867b-4f1d242e9773/1/RLid_mW1rVMWQ2Rj5pxXO6-Eung.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/16/40caac-8f02-45ed-867b-4f1d242e9773/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:35:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 84.246.86.0/24
                          IP: 2a11:2380::/29

Validation:               Failed, certificate revoked on Thu 24 Aug 2023 08:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:57:48:54:6b:e2:b4:4f:50:cb:82:e7:70:01:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:35:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=44b89dfe65b5ad5316436463e69c573baf84ba78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:c3:e7:e8:7e:ac:a2:89:1c:24:65:c3:05:
                    0d:2e:d8:55:77:54:7e:c8:d8:97:2d:17:7e:a8:c2:
                    2e:d0:3e:0b:68:b3:01:13:ea:46:c5:7e:79:7c:2e:
                    ad:e4:46:e8:92:9e:8d:3d:28:6a:d2:62:8f:df:7d:
                    d4:33:96:06:1d:02:b4:ba:a1:b7:10:2f:6c:a0:ac:
                    4a:63:1a:be:9c:fd:45:b0:59:85:7f:10:e0:79:d8:
                    44:1b:f2:a7:de:54:22:f0:12:c0:7b:65:74:5f:de:
                    ae:bd:8c:53:f0:4b:de:95:1a:e4:7a:47:a1:56:fd:
                    f9:00:3d:64:56:9b:99:73:a3:5a:fe:67:2b:24:0c:
                    37:19:86:5d:f8:93:c0:f3:a0:15:4a:90:0f:ed:9f:
                    1a:8a:d3:25:7b:58:65:7a:e9:0c:0c:49:eb:be:dc:
                    cc:a1:3d:b9:74:09:f4:5b:88:28:f1:f2:17:a5:0b:
                    aa:f8:96:6e:09:42:23:0a:3a:80:b9:c1:15:bd:8a:
                    1b:f4:d2:9a:dc:49:8a:eb:db:84:5d:78:2f:47:6d:
                    04:db:76:24:0f:34:90:5b:a1:7d:3d:ef:6f:55:38:
                    ac:c0:b1:30:81:cc:ad:a5:5c:8b:cb:a6:ac:78:8b:
                    3e:3b:37:8b:af:d0:c3:ef:88:79:38:1a:78:fc:84:
                    dd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B8:9D:FE:65:B5:AD:53:16:43:64:63:E6:9C:57:3B:AF:84:BA:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/40caac-8f02-45ed-867b-4f1d242e9773/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/40caac-8f02-45ed-867b-4f1d242e9773/1/RLid_mW1rVMWQ2Rj5pxXO6-Eung.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.246.86.0/24
                IPv6:
                  2a11:2380::/29

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:c6:34:16:6c:ea:40:d4:73:43:17:69:4c:91:09:6d:23:
         ef:62:c6:53:cc:2e:af:6b:48:67:79:6a:cf:59:81:bc:b1:53:
         8e:97:d1:2e:d5:58:73:96:72:87:5f:72:6c:73:72:2b:d4:30:
         2c:47:52:70:71:01:cd:88:dc:9a:64:8c:8f:04:8d:2c:d9:4b:
         f7:be:ee:0e:a4:da:3f:49:b9:6a:07:27:aa:0e:f2:b8:76:ea:
         bf:10:15:68:1e:8e:7c:10:ec:c6:0a:ea:ca:6b:3b:15:1d:cf:
         34:91:68:1e:83:ff:1f:ed:db:33:41:9c:bb:7b:9a:fb:fb:24:
         7e:00:90:8b:39:a6:9d:04:b7:c9:9a:90:63:bb:28:8f:b1:b6:
         f9:dd:28:f5:b3:53:7e:fd:28:61:d3:26:55:67:6a:d3:e9:b7:
         21:c8:82:fc:4e:d0:d5:6e:14:ec:f2:b0:fb:4b:61:c4:25:c3:
         84:1f:82:9d:62:0e:8a:a4:73:5f:90:50:92:29:1b:fe:da:cf:
         55:61:c5:40:2a:e9:86:a2:9c:53:f9:ba:c7:c2:17:48:05:ef:
         9d:0f:84:c7:b2:82:8a:2e:15:a8:35:10:b6:1d:22:18:96:4e:
         79:bc:da:1e:a3:cf:c2:92:88:ff:7e:cb:aa:60:4e:01:7c:83:
         40:e1:72:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:28 2024 by rpki-client on console-fra.rpki-client.org