Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UogigO-MblLcZKlKzoTT3I8mHe0.cer
File:                     UogigO-MblLcZKlKzoTT3I8mHe0.cer (raw, json)
Hash identifier:          8zUpqehLHzqBVOd2/ZKB9IYdH6NqslxCTJx9sVgMEXA=
Subject key identifier:   52:88:22:80:EF:8C:6E:52:DC:64:A9:4A:CE:84:D3:DC:8F:26:1D:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF7836E29F10FC8E7E528EE1575B6C7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/UogigO-MblLcZKlKzoTT3I8mHe0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.76.38.0/23

Validation:               Failed, certificate revoked on Tue 17 Oct 2023 09:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:83:6e:29:f1:0f:c8:e7:e5:28:ee:15:75:b6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=52882280ef8c6e52dc64a94ace84d3dc8f261ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c5:d9:3a:e7:82:ff:90:dc:e2:2c:63:ae:52:
                    0b:68:27:33:17:91:f9:23:85:b2:17:f4:c4:6d:ff:
                    fb:5d:7e:8a:a0:85:fd:b1:7b:c5:79:01:ab:88:e8:
                    5d:59:af:63:05:ef:e6:17:74:ff:ef:8f:d3:36:d7:
                    8d:a6:5a:8f:c8:c3:a9:fb:f2:b3:4b:61:0a:3e:ac:
                    16:ab:75:88:82:7d:5e:55:ab:a9:0e:5f:68:77:fd:
                    dc:0b:d6:60:44:18:47:41:95:af:89:42:0b:f0:3f:
                    8e:4a:82:53:21:27:c3:20:d5:67:28:18:8e:c8:bb:
                    3b:2d:ca:fd:92:a8:51:92:c5:39:8c:99:37:a2:96:
                    bb:87:2d:5d:a8:e8:04:fd:bf:d4:ba:15:c3:a5:f9:
                    9e:ba:bd:45:60:f3:7f:e4:bb:12:c1:b5:af:6c:c9:
                    6f:73:24:27:7f:5c:b3:73:a9:4b:87:f6:13:7e:75:
                    85:40:26:92:21:9b:ec:c7:02:33:4e:bc:a8:c5:0f:
                    14:13:ed:a4:f2:6d:ce:6c:ed:6b:a5:b4:f3:c4:ca:
                    72:e9:a1:d5:a6:4f:13:13:7d:9f:8a:9b:4a:30:e2:
                    4e:85:21:41:73:71:88:45:d6:f2:4d:e9:c9:02:8e:
                    b5:18:f2:9f:4f:fa:22:57:17:11:99:95:65:8a:c9:
                    bf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:88:22:80:EF:8C:6E:52:DC:64:A9:4A:CE:84:D3:DC:8F:26:1D:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/UogigO-MblLcZKlKzoTT3I8mHe0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:81:36:09:e1:19:79:f9:4b:25:1a:eb:18:ff:d1:31:4d:e6:
         b2:9c:f8:2d:8b:a7:e4:c3:d8:33:9c:fc:13:27:cc:7e:8a:d3:
         58:c7:cb:00:37:94:64:ad:7f:53:fe:69:9a:8c:65:87:b0:dd:
         e7:f8:3a:4e:37:97:17:8b:5e:b1:c4:31:df:76:12:d1:d7:74:
         2b:cb:b4:0e:a3:96:7f:53:5d:8c:f3:84:d4:db:36:c2:d9:92:
         be:9e:e6:35:e2:5c:78:68:25:2d:ee:7e:17:ca:61:f3:7b:ca:
         ec:05:fa:66:23:d1:fd:bc:aa:cd:ea:ac:c5:98:b6:cd:98:c8:
         51:28:e8:6c:72:42:13:f8:ae:11:23:95:aa:bf:62:03:28:20:
         16:98:10:8f:4a:ce:1d:f8:e3:1a:41:43:b3:13:e7:fe:78:bc:
         d9:f8:c5:df:8e:1f:2f:f1:32:74:11:ac:79:88:02:80:5e:1a:
         42:ad:07:73:f9:7a:f8:76:95:39:0f:05:46:9e:62:4f:3b:7a:
         ef:24:a9:b4:c9:14:ae:84:b3:4a:78:cd:a7:25:70:28:91:54:
         3b:4e:23:e6:ff:b2:d9:b5:8f:58:dc:41:dc:70:3f:a3:3d:f4:
         8c:4b:4c:e3:8e:36:69:59:16:b4:52:1d:d3:c3:68:50:e8:cc:
         a1:02:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:18 2024 by rpki-client on console-fra.rpki-client.org