Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UWCmjVKjgQgnCt1GSTtzHdKYvYA.cer
File:                     UWCmjVKjgQgnCt1GSTtzHdKYvYA.cer (raw, json)
Hash identifier:          WPevK8eLFoRUhSGE7kxYZYJin6SLIS3UC7Y/446UJ0E=
Subject key identifier:   51:60:A6:8D:52:A3:81:08:27:0A:DD:46:49:3B:73:1D:D2:98:BD:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CACFF91DD0582F108A1E22D4959A422
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/6fa53f-6cd0-4d96-b1d6-9f3e550486a3/1/UWCmjVKjgQgnCt1GSTtzHdKYvYA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/6fa53f-6cd0-4d96-b1d6-9f3e550486a3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 50796
                          IP: 37.32.56.0/21
                          IP: 178.22.0.0/21
                          IP: 185.3.196.0/22
                          IP: 2a00:1e30::/32

Validation:               Failed, certificate revoked on Wed 05 Jul 2023 08:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ac:ff:91:dd:05:82:f1:08:a1:e2:2d:49:59:a4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5160a68d52a38108270add46493b731dd298bd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:0c:61:95:61:c3:e5:34:b7:57:05:67:97:
                    1a:ee:35:9b:12:35:99:e2:5e:e3:c3:58:2c:c1:c7:
                    14:a6:04:4a:d5:10:f5:9c:ae:24:5e:18:37:cf:fd:
                    1b:cb:c1:5a:2a:4a:c0:02:26:cd:94:b9:69:83:c7:
                    87:42:44:53:b5:75:d8:f2:45:26:62:62:6d:de:ba:
                    cf:e3:ba:2b:2b:e4:b7:70:8c:bf:dd:42:f3:89:c7:
                    ca:a9:4c:e9:7d:b1:ce:7e:c7:1b:c0:18:76:c1:f4:
                    6f:51:d1:96:5e:f0:22:0a:62:b2:78:0f:34:86:08:
                    03:0c:ff:ba:f4:aa:cc:3e:f8:56:a4:b1:f4:a5:f7:
                    2c:c6:ff:da:b7:d1:98:83:fa:7f:9e:3b:c7:ae:fa:
                    99:6a:6a:c3:19:e9:bd:4f:d4:07:b8:35:4e:b4:ee:
                    e0:0f:43:a3:70:08:fe:fd:b7:7e:a8:17:b1:56:17:
                    80:72:4b:c6:2d:dd:45:57:aa:0c:7b:bc:3b:29:28:
                    2e:2d:f9:c4:26:08:30:eb:7e:46:74:00:2d:8c:04:
                    e9:33:4e:37:be:14:26:64:b4:e9:e1:cb:9d:5a:c6:
                    3c:6a:d5:cc:98:78:ad:b9:17:75:47:0f:b6:83:cd:
                    57:7a:79:4b:81:c5:59:b6:b7:f6:53:6e:df:96:bb:
                    db:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:60:A6:8D:52:A3:81:08:27:0A:DD:46:49:3B:73:1D:D2:98:BD:80
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6fa53f-6cd0-4d96-b1d6-9f3e550486a3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6fa53f-6cd0-4d96-b1d6-9f3e550486a3/1/UWCmjVKjgQgnCt1GSTtzHdKYvYA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.32.56.0/21
                  178.22.0.0/21
                  185.3.196.0/22
                IPv6:
                  2a00:1e30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50796

    Signature Algorithm: sha256WithRSAEncryption
         22:ca:f7:6d:84:d8:ce:1e:f1:6a:99:47:70:29:7a:24:72:3a:
         75:c8:1d:0f:b3:d7:e8:94:70:fa:40:eb:a6:27:a6:e1:88:04:
         6c:7b:85:e5:de:e7:71:c8:d7:d6:2b:de:e5:38:20:e3:1a:2f:
         e3:5d:51:d5:16:71:60:d5:b9:89:f3:92:e4:88:65:72:a5:64:
         f0:09:48:16:23:81:b1:38:e5:ff:05:af:d5:bf:17:c8:b6:48:
         35:d8:5c:c1:d5:eb:c0:01:a3:43:13:d8:a1:a6:19:4c:5f:df:
         92:4c:73:72:9f:c0:06:b0:ef:fb:b8:9f:f6:2c:9c:04:52:27:
         a5:f5:b0:1a:3e:c3:d9:b7:f2:75:e8:6b:4b:37:b1:40:4f:44:
         f7:7e:d5:80:c6:cb:91:9b:98:f8:ef:fa:c9:82:c7:54:f3:59:
         e4:a1:44:e5:19:de:a2:15:71:23:06:97:dd:54:d0:c5:54:b1:
         0f:0b:82:f1:fe:e8:19:ff:fb:01:d1:c4:10:29:c3:e2:41:ba:
         c8:26:e0:75:06:88:ff:38:af:1d:92:68:16:6d:45:90:dc:ea:
         c5:f3:41:09:3f:4a:cd:a4:b6:ff:52:be:4d:bb:4f:b2:67:3e:
         31:c1:03:ad:88:5c:97:89:41:c9:85:c1:83:35:9c:74:ad:12:
         ba:7c:b6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-fra.rpki-client.org