Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
File:                     U1dz1_rOTZUweiNDn-lOmt-mShI.cer (raw, json)
Hash identifier:          mQJrFvsNfNUkkj2hCvd6Eskt0sORbqRBGhLmCkjawWg=
Subject key identifier:   53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC50019443AB8392CB07FBC1176A96EFA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/U1dz1_rOTZUweiNDn-lOmt-mShI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:29:27 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 212.46.35.0/24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 13:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:19:44:3a:b8:39:2c:b0:7f:bc:11:76:a9:6e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:29:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=535773d7face4d95307a23439fe94e9adfa64a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:a5:13:5d:58:e3:c4:21:d7:0d:81:0e:a5:
                    b7:50:f1:bd:22:28:4a:63:ba:bf:57:22:b8:0d:ae:
                    05:88:48:c4:c7:13:25:90:2d:11:78:82:19:b2:2e:
                    34:66:1a:20:e8:78:b0:d6:2e:b1:8c:8c:d7:7a:30:
                    cd:d6:da:0c:2d:68:c1:1b:ab:d8:bd:6a:28:32:32:
                    44:ab:ba:47:b2:de:e9:63:7c:87:1f:1f:3c:95:a3:
                    b3:04:0f:4b:45:7b:12:ea:34:12:97:02:01:29:79:
                    d1:ca:b1:bf:cf:40:d0:29:1a:30:cd:ab:64:22:2b:
                    5b:11:df:34:59:7b:1b:b0:f5:43:cb:68:fc:1b:33:
                    57:13:ed:24:35:23:74:7b:6d:16:f0:d4:b7:28:0e:
                    2f:8b:69:b8:ce:d9:88:5b:0a:2e:ad:31:ee:6d:64:
                    7a:a8:e5:ad:a1:53:de:d2:77:43:7e:e3:6c:0a:4b:
                    22:23:9b:94:28:c0:0b:ec:eb:c2:4d:2b:ba:dd:61:
                    27:08:1f:fc:6b:37:8a:8f:f9:8e:2b:8f:97:64:b9:
                    1a:1b:bf:7b:6d:cf:84:39:c9:37:90:e7:4f:30:dd:
                    11:89:14:2c:ce:44:01:2a:3c:fd:8f:d0:59:b5:fc:
                    46:12:a1:6d:bc:57:99:fc:9a:1e:e2:7a:85:77:5e:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/U1dz1_rOTZUweiNDn-lOmt-mShI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:91:3e:78:a2:03:1f:a6:63:1d:34:b0:d9:4d:46:77:23:ba:
         fa:79:48:64:9f:0f:cc:95:c3:f9:1a:41:5a:ce:ad:d6:3c:fd:
         d2:11:9e:b2:d8:a9:3e:ea:9d:15:52:84:53:72:0c:db:5e:8f:
         35:e1:1f:59:8d:7e:a5:d6:9a:3a:a4:27:8c:40:06:3b:28:bb:
         87:5f:05:4a:cc:37:87:68:fc:15:b6:bc:5d:13:d5:39:72:b7:
         ea:5d:69:fb:ce:07:f9:c3:0f:d6:72:6f:d8:ea:d2:60:71:1b:
         30:5b:99:f0:e0:43:56:06:ca:b1:83:24:ca:2a:61:d0:28:6e:
         ea:b6:d6:e6:74:a6:d9:34:45:c4:8f:90:66:4f:20:d9:13:2d:
         25:98:02:27:4e:72:91:99:c3:a2:76:a3:3d:d4:41:94:bd:56:
         ba:f7:45:86:77:80:db:e4:2e:00:5e:29:d8:76:5e:aa:e2:8f:
         d9:0c:b7:56:93:00:32:b8:59:c9:bc:7e:b4:31:70:0f:74:f6:
         12:11:bb:dd:f1:db:71:a7:68:98:49:47:8e:5b:68:8a:48:26:
         06:c7:d9:be:25:ec:e8:31:16:f2:e1:51:ef:a6:ee:61:2c:d1:
         d7:d2:c2:6e:1d:c0:b4:51:c1:d5:a3:ac:24:a5:42:b4:cd:d8:
         1c:b5:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:07 2024 by rpki-client on console-fra.rpki-client.org