Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Uv2iICOa691KtEx8T8JeyoHQFfs.cer
File:                     Uv2iICOa691KtEx8T8JeyoHQFfs.cer (raw, json)
Hash identifier:          6pE9n5fY6bjrZovCUxoL8EGPwMzYQnUbpNXizsMeIaU=
Subject key identifier:   52:FD:A2:20:23:9A:EB:DD:4A:B4:4C:7C:4F:C2:5E:CA:81:D0:15:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708B3F74A18E806B370569E0C47C127B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/Uv2iICOa691KtEx8T8JeyoHQFfs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:34:12 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.247.166.0/24
                          IP: 2a11:c3c0::/29

Validation:               Failed, certificate revoked on Thu 26 Oct 2023 16:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:3f:74:a1:8e:80:6b:37:05:69:e0:c4:7c:12:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=52fda220239aebdd4ab44c7c4fc25eca81d015fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:d5:c1:6c:fd:cb:79:37:d7:60:61:9b:c4:
                    81:69:a5:84:83:f5:4d:af:f5:82:13:a8:b2:98:b2:
                    96:c7:a8:e8:96:4d:a8:b4:80:d3:0b:d1:2e:b2:b6:
                    e5:78:6a:07:62:1b:d3:19:26:b0:bc:e9:d7:92:21:
                    a3:b1:5b:2d:a6:80:fc:06:80:5f:66:89:46:ba:77:
                    33:2d:8a:a9:56:f9:02:08:bf:c4:89:d5:a1:1e:85:
                    3f:18:80:69:e8:42:d4:48:8a:e1:7d:e6:15:d5:0f:
                    f3:fd:9d:12:23:05:80:8e:44:93:9d:41:fb:d9:03:
                    57:44:2a:23:3c:98:5a:c0:25:45:2e:3c:ac:68:7e:
                    94:57:e4:15:77:e7:ac:8c:30:eb:c7:2d:05:32:92:
                    3c:e1:05:17:6b:cb:05:88:83:1b:33:54:6b:a5:2b:
                    a2:6a:d6:3e:be:8a:d7:b8:5b:a4:a4:14:c0:cf:f8:
                    84:b8:a1:29:69:c6:f8:9e:bc:c0:29:45:1e:13:86:
                    bd:1c:00:c3:08:ff:4e:e6:ff:c4:02:99:b3:80:bd:
                    2c:0c:42:95:18:d8:fa:e7:ce:28:1c:49:d2:fe:8a:
                    e5:f6:72:f7:c9:94:15:98:85:41:a9:99:01:d9:11:
                    c9:e5:74:fe:3e:c8:ba:d0:ba:21:be:e1:59:10:ce:
                    86:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FD:A2:20:23:9A:EB:DD:4A:B4:4C:7C:4F:C2:5E:CA:81:D0:15:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/Uv2iICOa691KtEx8T8JeyoHQFfs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.166.0/24
                IPv6:
                  2a11:c3c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:04:9e:e6:ac:dc:d8:24:8b:d7:26:5d:f6:4c:fd:30:6b:2e:
         5c:77:83:9a:79:ed:a9:e0:bd:58:c3:f6:a2:97:56:3b:65:97:
         b0:e8:9d:a4:ed:21:e7:d1:df:68:96:72:d0:71:3a:38:e9:00:
         65:5d:24:43:2b:c0:2b:79:2b:a7:7a:ae:c3:62:54:f1:e9:db:
         37:07:5c:84:aa:b5:fb:71:4c:47:a0:86:a2:f7:fd:4a:48:b7:
         0c:d8:2f:b0:2e:44:07:39:bb:bb:38:27:8d:94:6c:05:53:21:
         8e:d7:27:ff:bb:b2:53:94:79:40:2b:c9:f9:38:71:a2:f3:e3:
         7e:c4:d6:a2:51:cd:ae:cd:d4:0f:07:ff:3a:5f:e8:f7:c0:d1:
         48:c8:78:42:f1:30:c9:5c:6f:69:9c:05:84:a5:e6:51:de:c9:
         44:7d:3b:67:22:23:2a:79:ac:4b:9a:f9:88:1a:4f:bc:d2:31:
         56:b7:7a:ed:2d:23:9e:4e:ed:5c:fc:50:51:81:9c:60:35:80:
         11:09:3b:3d:56:dc:89:40:30:be:58:d0:bb:3a:99:e7:4b:27:
         69:be:09:6c:a0:54:3a:b5:e0:2a:b7:46:30:c7:74:da:56:98:
         f4:05:fe:6e:81:17:8f:b8:e0:43:06:b0:6e:79:c5:38:af:d2:
         8d:b4:1c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:19 2024 by rpki-client on console-fra.rpki-client.org