Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Uw7b5yl95cNXZSf3RZCHT43KL1M.cer
File:                     Uw7b5yl95cNXZSf3RZCHT43KL1M.cer (raw, json)
Hash identifier:          J7uErhtVvjU9KJnJx03Giqe0TpDYh6DEX/YjnsbYnf4=
Subject key identifier:   53:0E:DB:E7:29:7D:E5:C3:57:65:27:F7:45:90:87:4F:8D:CA:2F:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFB321BF8CEC1DE7EC2C8544162E46E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/Uw7b5yl95cNXZSf3RZCHT43KL1M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:14 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 213318
                          IP: 2001:678:d2c::/48

Validation:               Failed, certificate revoked on Thu 10 Aug 2023 05:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:32:1b:f8:ce:c1:de:7e:c2:c8:54:41:62:e4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=530edbe7297de5c3576527f74590874f8dca2f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:4d:f5:7a:b8:52:64:7b:4c:b4:98:e0:9e:
                    0b:c2:0d:05:2e:5d:a8:f5:49:14:04:f7:33:da:45:
                    d0:a2:a4:d3:8f:1c:61:91:cf:f7:a5:ec:7a:a9:73:
                    d8:69:34:5e:81:ab:6f:2b:58:96:7a:1c:b4:8a:32:
                    c9:ba:37:9a:41:45:e2:dd:49:82:1a:8c:58:63:f5:
                    24:5b:0b:33:e2:75:f6:e3:d8:68:14:5d:7a:b4:68:
                    47:aa:4a:51:61:26:00:3e:04:97:76:a0:b6:68:23:
                    88:8d:ca:b0:f1:34:45:da:77:79:32:e7:70:e0:74:
                    af:a1:71:6a:49:1b:c9:95:dd:1b:50:58:e6:e5:02:
                    04:2f:33:cb:05:b0:25:32:d5:4f:72:7c:bc:c4:1b:
                    f5:42:bc:2f:7b:9e:3f:40:db:c0:e1:1a:52:59:c7:
                    04:12:c5:aa:a6:74:ce:09:17:27:ce:6e:99:a3:c6:
                    60:ef:53:03:98:29:7b:4c:cb:8d:38:3c:cf:05:f6:
                    af:a2:84:11:f5:97:3d:43:a5:0f:73:27:cb:02:ab:
                    69:2a:3e:d0:14:bf:c0:d5:4a:62:eb:c9:97:47:2d:
                    3f:7a:4e:6a:14:f8:01:ff:05:75:23:06:2a:11:38:
                    68:b8:8c:e0:13:77:f2:36:9d:1b:63:45:26:5f:5c:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0E:DB:E7:29:7D:E5:C3:57:65:27:F7:45:90:87:4F:8D:CA:2F:53
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/Uw7b5yl95cNXZSf3RZCHT43KL1M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d2c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213318

    Signature Algorithm: sha256WithRSAEncryption
         07:e9:6f:4e:e1:0a:cf:79:ca:2c:69:84:82:53:c6:5d:e2:56:
         e8:9e:6a:b6:46:33:9e:44:cb:38:c7:34:ed:5b:33:a7:70:16:
         55:ae:af:cf:3d:c4:ff:bd:58:34:ca:c3:0f:91:d1:b8:74:6a:
         a1:ff:9d:ea:b2:f2:02:55:2c:4e:f3:41:4e:be:d3:e7:83:97:
         3c:3e:3b:39:de:c6:c2:08:cf:80:80:6a:9d:b5:f8:21:33:f6:
         0c:5b:2c:7c:0a:99:64:2c:7f:8e:13:d1:48:12:82:f2:2c:d4:
         1e:a8:c6:66:81:94:6d:4e:72:4f:5e:9d:c2:72:ce:c8:a9:e2:
         68:27:49:7e:3f:7f:f2:3c:cb:06:b0:43:20:fd:3c:52:df:42:
         ba:84:48:bd:63:d5:3b:86:ce:60:fa:a7:b9:0e:e7:22:6e:f8:
         42:bf:f6:d0:93:f7:8d:49:8a:fe:fd:7c:ce:91:a1:80:a4:1c:
         73:78:1e:18:65:5c:45:39:bc:1d:24:d5:e0:76:70:9d:dc:8c:
         ec:91:b7:ae:bd:df:86:7a:f5:90:50:b2:3e:3b:ee:c9:48:c4:
         2d:d3:97:f1:d8:d3:29:e6:03:6d:1d:78:b7:d8:92:1f:89:55:
         f0:a1:1a:0b:aa:04:e6:38:34:90:d7:66:c3:70:2c:98:6f:93:
         d7:95:bf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:40 2024 by rpki-client on console-ams.rpki-client.org