Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
File:                     UFahhvQfRv0U2gBAzAeH52qauEg.cer (raw, json)
Hash identifier:          ytF7lyxGT37uvCvYLeyal0hU1jDzi6+z/Hw1KK5r4dU=
Subject key identifier:   50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65B2107D773F969529500EADDD0551
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.117.0/24

Validation:               Failed, certificate revoked on Fri 15 Dec 2023 07:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:b2:10:7d:77:3f:96:95:29:50:0e:ad:dd:05:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5056a186f41f46fd14da0040cc0787e76a9ab848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:67:37:00:e4:96:95:31:4e:7e:ff:f7:46:
                    bf:95:89:33:f4:45:9b:c4:64:a9:a1:b7:dd:e9:2c:
                    8a:22:ab:3a:5e:71:2e:38:ba:61:2d:29:a6:02:ee:
                    a5:7a:ce:fa:7c:63:cb:96:07:de:84:34:8c:6c:9e:
                    58:b4:39:96:11:78:e5:16:ff:f6:a0:cc:80:6d:aa:
                    8e:4a:15:2c:fd:62:1e:c0:92:56:28:30:73:35:ce:
                    e0:3a:21:10:38:66:7f:03:ff:6c:d1:eb:c7:28:ad:
                    27:bf:3a:f4:4a:50:54:55:9a:d0:a9:c3:88:70:47:
                    a8:be:da:a8:b3:a1:22:63:69:45:47:7b:53:c7:fa:
                    66:12:08:fd:12:2f:34:af:62:b1:91:b3:ef:40:37:
                    16:40:0f:78:ee:34:7e:bb:4a:2a:4d:57:93:fd:5e:
                    81:da:b6:d5:df:78:c6:9b:56:2a:aa:ca:9d:27:75:
                    81:fd:e7:ba:be:51:81:cd:1e:48:1a:82:ad:87:7a:
                    fe:4f:54:9e:42:a1:ab:ef:02:2e:cb:9a:db:3f:3b:
                    ff:dc:24:2e:a2:e8:af:9c:52:80:08:88:b3:21:d8:
                    79:98:5a:2e:9d:52:9a:fc:b3:0f:a3:68:7b:e5:93:
                    f8:27:13:9f:24:7c:0f:b6:9f:29:cb:15:87:cf:1c:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b7:17:0f:31:3a:dd:cd:c9:f8:a9:e0:68:33:fc:33:37:46:
         c0:de:94:0e:82:9a:14:c3:ae:de:d6:4c:3d:96:96:47:25:5a:
         63:98:b3:e7:59:76:15:af:41:91:99:a8:ff:92:31:20:6e:1f:
         5b:cd:04:31:14:e0:b6:85:36:a7:8e:63:f2:99:b6:9c:ee:7b:
         86:49:b4:4a:aa:af:5e:a8:ca:db:2a:06:78:34:d7:a4:54:c0:
         a2:32:46:59:22:a8:70:31:24:cb:5c:74:9c:45:ad:09:01:37:
         e3:82:a0:c7:05:6b:1c:18:ed:ce:6b:b7:23:e7:cd:ca:50:9c:
         22:e8:4f:e3:b3:5b:09:7e:1c:23:87:e4:1a:b6:e0:52:0b:4f:
         f8:9b:83:b0:05:b5:0e:61:60:00:c4:0d:ca:86:3a:b4:b2:cd:
         81:25:79:5f:d1:15:86:d8:fc:c1:89:10:7a:13:77:33:cd:92:
         26:7f:f2:9d:45:0c:2b:a3:b9:57:fa:7f:95:e1:b6:c9:b5:aa:
         ab:03:83:2a:4f:36:f5:e7:2c:33:8b:a9:1c:99:9c:81:99:9c:
         7d:2b:53:0b:3b:23:73:2b:a5:bb:cc:54:7e:94:70:c6:73:23:
         42:2d:53:4f:0c:1d:9a:f0:ef:0e:cd:d6:4b:23:d0:d9:05:e2:
         1b:b2:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-fra.rpki-client.org