Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UY_-xkaUKKDE2Qae8iRh1JK6PcY.cer
File:                     UY_-xkaUKKDE2Qae8iRh1JK6PcY.cer (raw, json)
Hash identifier:          v6aC2MIFNSVu3oYM/9LPr7wuKmb568GPL6AqNYFlHeA=
Subject key identifier:   51:8F:FE:C6:46:94:28:A0:C4:D9:06:9E:F2:24:61:D4:92:BA:3D:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D895C28523CD09A718642973A93E94E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/22edf4-0192-41bf-9faf-0243a3b8af52/1/UY_-xkaUKKDE2Qae8iRh1JK6PcY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/22edf4-0192-41bf-9faf-0243a3b8af52/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:16 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 88.151.8.0/24
                          IP: 2a11:5180::/29

Validation:               Failed, certificate revoked on Mon 28 Aug 2023 06:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:5c:28:52:3c:d0:9a:71:86:42:97:3a:93:e9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=518ffec6469428a0c4d9069ef22461d492ba3dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9b:a4:84:6d:aa:8e:de:e0:a0:73:f1:78:16:
                    20:72:03:9d:bb:34:67:a1:1d:9b:46:d2:ab:1c:71:
                    f5:e4:1c:04:6f:71:6d:b0:46:eb:80:c2:58:9f:66:
                    99:2f:db:1b:6a:ec:45:47:f9:c0:d9:50:01:f3:60:
                    2f:aa:c9:97:f3:11:79:8a:a4:d3:9f:7d:6f:86:1e:
                    f5:22:83:5c:a8:8f:4c:c4:f1:9b:d5:85:cb:c6:a4:
                    69:25:c3:a7:32:65:1b:44:7d:8e:32:a2:20:87:f1:
                    05:87:11:56:28:79:8d:77:ab:35:3c:80:b7:d1:35:
                    cb:cb:14:e2:8a:4b:dd:a1:87:49:a2:3a:e9:a7:2c:
                    4f:c0:20:ef:9d:9b:c3:6e:f2:c0:8d:b3:b9:39:8d:
                    1c:41:95:4f:a9:44:f4:99:1e:59:03:d5:62:50:2c:
                    9a:9a:2e:42:a2:28:4b:ef:c7:15:3b:c8:c8:4f:54:
                    35:94:45:6a:9b:88:be:31:62:fb:28:b0:a5:18:67:
                    f4:f0:05:41:70:e8:94:e0:41:cc:fb:56:0f:d5:36:
                    92:28:1a:d1:8b:e8:7d:95:e8:6a:9a:e0:61:c8:70:
                    2a:6f:76:9b:58:27:e1:25:07:77:d7:42:10:cd:13:
                    c9:9b:5d:fa:1e:f6:8c:bc:a4:68:7d:fb:cb:84:e9:
                    fb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8F:FE:C6:46:94:28:A0:C4:D9:06:9E:F2:24:61:D4:92:BA:3D:C6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/22edf4-0192-41bf-9faf-0243a3b8af52/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/22edf4-0192-41bf-9faf-0243a3b8af52/1/UY_-xkaUKKDE2Qae8iRh1JK6PcY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.151.8.0/24
                IPv6:
                  2a11:5180::/29

    Signature Algorithm: sha256WithRSAEncryption
         1f:a8:38:6a:e7:a9:83:26:55:23:25:16:90:25:1e:ce:e4:a6:
         5f:37:3f:a4:49:de:66:42:21:72:98:83:cc:55:ec:d0:46:b3:
         15:5c:8d:48:e4:dc:67:69:71:6c:88:e3:e6:be:48:1d:33:68:
         42:1e:63:32:48:35:15:0d:a3:75:28:d3:49:8b:01:95:bd:a6:
         95:09:61:a8:ba:48:db:f5:e9:4a:1f:af:cf:58:96:05:1a:d0:
         31:d3:7d:20:bf:bd:15:14:1f:6d:34:3c:8d:b2:b4:3d:92:44:
         22:61:7d:c5:9c:29:07:a0:2b:f5:62:94:28:fe:81:73:49:ff:
         c9:f7:56:1e:0b:95:aa:b9:f7:2c:25:60:9c:ac:07:cf:02:09:
         e1:c1:a6:7f:a4:37:53:4a:fe:f9:d8:4f:f4:cd:7b:e3:0d:90:
         ed:f7:f7:bc:3f:90:db:fe:f0:e0:bb:aa:76:0e:d9:d0:da:ba:
         ca:1d:64:c0:28:99:85:72:db:23:4e:67:89:c4:8e:d9:1a:71:
         7a:a7:85:17:7b:4d:71:8e:6a:49:07:d0:7c:35:1c:fe:18:7a:
         01:cd:ec:6c:ca:51:47:d2:f3:ae:76:e7:7f:78:cb:e1:31:20:
         85:f6:2a:ae:67:33:e6:10:82:86:d4:cc:86:41:7e:66:e3:39:
         b4:69:aa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:33 2024 by rpki-client on console-ams.rpki-client.org