Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
File:                     UyTe-6rek-mY4TqUICndWTuLLqM.cer (raw, json)
Hash identifier:          M5QPJ+BHWhns0ZhvMc7G0q723s2EtoeBPMA8ooGCRu0=
Subject key identifier:   53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0190E948169280257E6BFF8B5F796C22B004
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 25 Jul 2024 09:45:34 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 59447
                          AS: 197328
                          IP: 5.255.57.0/24
                          IP: 5.255.61.0 -- 5.255.63.255
                          IP: 23.252.66.0 -- 23.252.68.255
                          IP: 23.252.71.0/24
                          IP: 23.252.75.0 -- 23.252.76.255
                          IP: 23.252.79.0/24
                          IP: 91.92.112.0/23
                          IP: 107.150.162.0 -- 107.150.164.255
                          IP: 107.150.171.0/24
                          IP: 107.150.175.0/24
                          IP: 107.150.177.0/24
                          IP: 162.222.88.0 -- 162.222.90.255
                          IP: 167.160.4.0/24
                          IP: 167.160.10.0/23
                          IP: 167.160.19.0/24
                          IP: 167.160.21.0/24
                          IP: 167.160.27.0/24
                          IP: 167.160.30.0/24
                          IP: 185.4.224.0/23
                          IP: 185.4.227.0/24
                          IP: 185.118.141.0/24
                          IP: 185.150.2.0/24
                          IP: 185.162.72.0/23
                          IP: 185.165.47.0/24
                          IP: 185.252.210.0/24
                          IP: 2a02:c940::/29
                          IP: 2a06:4b40::/29
                          IP: 2a07:5140::/29

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 09:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e9:48:16:92:80:25:7e:6b:ff:8b:5f:79:6c:22:b0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 25 09:45:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5324defbaade93e998e13a942029dd593b8b2ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:26:a9:b7:bd:55:75:3c:c5:76:66:cb:b5:
                    10:ab:49:0c:1b:95:fc:31:ba:71:80:63:b2:1f:db:
                    c5:78:4c:40:d8:e0:09:87:06:df:09:bc:64:ef:4f:
                    70:70:43:6b:9f:70:85:77:2e:9a:c9:df:9e:40:e2:
                    61:ba:4e:46:9d:5e:d0:7b:fd:aa:f9:26:77:ad:d5:
                    0b:6d:b0:f3:ed:00:ad:b0:6b:d9:56:60:f6:22:9d:
                    a9:a9:fc:89:b4:a4:98:78:08:a8:b7:d3:86:39:28:
                    b1:6d:8f:5c:32:f4:29:09:67:61:1c:62:fc:0e:29:
                    bd:8b:24:7b:ca:b3:52:f3:0a:b2:3d:aa:7f:77:5d:
                    25:09:10:a8:fc:f2:1c:d5:c9:da:1d:9d:e6:dc:c4:
                    80:33:15:26:51:8d:3b:58:4e:ce:a4:a9:0e:be:6b:
                    9d:e9:ff:49:c8:8d:ad:d1:26:c6:91:02:c0:1d:cb:
                    90:5b:a9:53:ff:41:10:71:7e:89:59:9e:81:f2:ac:
                    3f:8b:7b:57:91:38:b7:67:f0:52:f9:41:e4:d4:6e:
                    6b:be:52:c6:d4:62:bb:3f:2f:be:3b:93:eb:24:85:
                    53:18:da:b0:38:cf:66:2a:c9:f3:2b:08:af:b9:9c:
                    85:c2:ea:3e:ce:9f:5b:83:2f:11:64:99:e2:cc:f8:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.255.57.0/24
                  5.255.61.0-5.255.63.255
                  23.252.66.0-23.252.68.255
                  23.252.71.0/24
                  23.252.75.0-23.252.76.255
                  23.252.79.0/24
                  91.92.112.0/23
                  107.150.162.0-107.150.164.255
                  107.150.171.0/24
                  107.150.175.0/24
                  107.150.177.0/24
                  162.222.88.0-162.222.90.255
                  167.160.4.0/24
                  167.160.10.0/23
                  167.160.19.0/24
                  167.160.21.0/24
                  167.160.27.0/24
                  167.160.30.0/24
                  185.4.224.0/23
                  185.4.227.0/24
                  185.118.141.0/24
                  185.150.2.0/24
                  185.162.72.0/23
                  185.165.47.0/24
                  185.252.210.0/24
                IPv6:
                  2a02:c940::/29
                  2a06:4b40::/29
                  2a07:5140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59447
                  197328

    Signature Algorithm: sha256WithRSAEncryption
         8c:12:f7:59:47:87:33:87:9f:03:e1:c4:78:37:65:c0:47:5e:
         e6:e3:32:f5:12:bc:23:7f:de:ee:80:4e:dc:6b:72:c4:31:53:
         92:73:b7:4b:bf:1c:25:86:46:9e:8e:d0:f5:07:75:d8:85:3a:
         3d:20:06:73:c3:4c:86:15:86:41:f6:e5:31:3a:f8:07:fa:5f:
         80:2d:8f:76:61:92:e7:19:99:99:ea:ca:ee:62:11:e1:ae:e3:
         d1:d0:89:98:b3:58:94:06:e2:cd:bc:03:a8:21:30:21:8d:5d:
         a8:00:d5:fb:d5:46:f1:a8:5e:f6:d0:e9:8d:37:2b:41:a9:ce:
         aa:9f:07:18:a3:29:ef:b2:9c:73:9f:2d:4d:65:a0:84:37:75:
         79:ab:1d:6c:75:c4:8f:7e:a3:65:04:f7:4f:35:06:83:f1:dd:
         c5:56:5c:b8:de:48:d5:dd:7a:20:01:c4:98:3e:6f:63:88:c6:
         0e:a6:fa:59:6f:64:75:0e:8c:ac:e2:b3:de:e6:85:1b:dc:60:
         9f:45:99:8e:fa:4f:73:e9:9a:52:40:71:7c:a8:97:ad:e6:45:
         5d:69:61:6d:b8:14:ea:59:89:b5:69:51:8b:39:32:0f:aa:ee:
         e5:dc:2b:c7:dc:2e:11:91:fb:ad:ba:f5:af:31:cd:40:07:40:
         ca:35:62:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:48 2024 by rpki-client on console-ams.rpki-client.org