Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer
File:                     blgupBdSD5MAxuDhXsyrQb--EbA.cer (raw, json)
Hash identifier:          iu3v+IE9E4I827Xk9WMGj9cbFblsNMzvr4lfLnhVgrI=
Subject key identifier:   6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F202DB4F62EF16FE430B9380FE1B3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/blgupBdSD5MAxuDhXsyrQb--EbA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 206495
                          AS: 208005
                          IP: 194.9.56.0/23
                          IP: 194.9.80.0/23
                          IP: 194.150.68.0/22
                          IP: 2a04:1080::/29
                          IP: 2a04:6980::/29

Validation:               Failed, certificate revoked on Fri 17 Nov 2023 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:20:2d:b4:f6:2e:f1:6f:e4:30:b9:38:0f:e1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:a1:0a:1e:24:c6:f9:63:23:01:be:fe:46:
                    f5:59:91:70:af:53:3d:c4:af:10:3b:ec:e1:e4:d1:
                    f0:8a:14:27:fa:40:54:60:a5:6f:19:9b:70:e8:ca:
                    ad:1c:43:26:d0:75:e3:c8:40:70:86:c6:b4:22:60:
                    b7:d1:0b:dd:d5:ec:6f:ce:1b:f0:9b:55:99:0a:a6:
                    52:1d:3a:dc:ce:4b:ac:a7:d4:d4:1c:0c:20:0b:bb:
                    f7:58:ab:f9:c4:75:2a:cf:3e:df:de:4e:cc:50:7c:
                    25:7f:87:a2:55:40:2d:f9:bf:e2:09:99:b5:d2:71:
                    e0:b9:a6:01:d2:09:1d:b3:c6:82:c6:28:01:45:9a:
                    f9:98:d1:af:91:c2:2b:ea:2a:ab:ff:52:10:38:b7:
                    ed:af:e7:89:5c:e7:b3:20:e7:62:b7:e4:68:df:b2:
                    8d:60:d6:fc:87:64:d9:c2:2c:8f:c9:0e:06:cb:49:
                    94:64:1a:7e:44:9c:d6:12:c2:0e:f6:62:fe:77:37:
                    c3:46:da:f6:6b:95:d2:94:3d:54:9b:2b:d4:4b:84:
                    ca:91:45:bd:82:2a:e4:ae:4a:66:d2:46:ad:6c:0e:
                    03:78:9f:58:7f:71:08:a6:62:90:fe:19:6f:c0:0e:
                    26:41:df:98:36:13:6f:5c:5a:3a:bd:14:c0:b0:2c:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/blgupBdSD5MAxuDhXsyrQb--EbA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.56.0/23
                  194.9.80.0/23
                  194.150.68.0/22
                IPv6:
                  2a04:1080::/29
                  2a04:6980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206495
                  208005

    Signature Algorithm: sha256WithRSAEncryption
         2b:30:34:8e:27:08:db:90:5d:34:bb:f4:f3:9f:61:97:af:3f:
         ad:9e:bb:b0:48:6d:c2:6d:72:5e:9b:81:89:f1:2c:a5:06:c0:
         ef:fc:1a:40:39:f3:b8:f0:1f:a3:0f:dd:08:2e:40:80:25:cd:
         a0:9b:9a:bc:a2:63:23:0b:89:11:b0:8e:16:36:31:98:6e:8b:
         8f:bf:3d:ed:8f:8f:84:b0:47:75:3d:e7:d4:54:e8:d1:bc:0d:
         73:3d:6c:76:07:26:77:0f:05:f5:7d:e0:14:fb:17:a7:1f:a7:
         b3:f8:a0:01:12:46:3c:f2:67:74:ba:ef:17:8f:59:91:a3:27:
         16:05:c7:92:d0:14:e2:ad:bc:53:96:53:7c:f3:f4:9f:93:25:
         ab:a5:10:69:37:7d:9f:b1:d9:f5:66:54:63:4d:72:90:8c:c2:
         9a:74:2b:aa:91:2d:8f:2f:12:4d:aa:6f:2b:52:40:a3:dd:80:
         24:af:24:ea:7f:d7:4d:e9:05:80:9e:35:42:5f:d9:65:2a:d0:
         b1:28:be:93:e7:31:d8:30:93:29:7f:25:6f:87:da:19:e4:8e:
         93:ae:9e:4b:bc:ce:eb:c6:37:ae:cb:a3:00:e2:1a:ec:c5:71:
         e9:1c:db:bc:c1:a9:72:a9:ac:8b:47:cc:47:72:2b:1f:ff:6a:
         51:26:3f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:57 2024 by rpki-client on console-ams.rpki-client.org