Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
File:                     c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer (raw, json)
Hash identifier:          RnmIxGFWwhOHHUpBBgryuGRwommM1rUdej+6CuQKbcw=
Subject key identifier:   73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC80190CB842F1BF2D709B2534D73318E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 02:29:55 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 60159
                          AS: 60812
                          IP: 185.1.213.0/24
                          IP: 185.239.25.0/24
                          IP: 194.146.188.0/22
                          IP: 2001:7f8:14d::/48
                          IP: 2a0c:d540::/32

Validation:               Failed, certificate revoked on Thu 02 May 2024 13:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:90:cb:84:2f:1b:f2:d7:09:b2:53:4d:73:31:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:8a:89:17:24:c4:86:9c:ac:1a:a1:ad:a3:
                    1a:05:b2:2e:71:af:e4:4c:09:5a:35:19:cf:02:55:
                    03:b5:77:eb:ea:d2:bc:1e:31:51:de:a3:0e:d4:23:
                    b4:b4:e1:37:5c:2e:45:87:24:32:73:e8:c6:d7:39:
                    a5:d4:a0:bf:3a:dd:33:f5:67:8f:06:ec:71:d2:1c:
                    93:45:49:2f:08:df:27:98:92:ba:c8:c1:8f:3f:ed:
                    10:76:14:d3:18:ee:a6:87:24:b8:3c:39:3d:f7:d7:
                    d4:bc:01:66:f8:cc:bf:c5:3d:4f:f9:8f:7d:34:cd:
                    a8:eb:e9:2a:33:d0:32:f1:8d:d5:cb:27:02:22:3f:
                    eb:64:6d:96:8a:91:dd:2b:a0:12:ac:4b:e0:8d:19:
                    0e:2f:42:c7:c8:ce:6d:71:36:7c:f8:9e:ef:05:9d:
                    f9:15:dd:34:8f:38:28:c3:56:e7:01:ab:af:54:f6:
                    b0:b7:21:ed:c3:fd:b5:6a:97:39:8f:07:86:fc:fe:
                    72:09:58:c5:25:e9:dd:22:db:41:2d:4a:37:8b:54:
                    67:0e:14:c9:68:a1:86:53:0f:1d:90:97:6e:85:f0:
                    4e:99:e0:2c:28:9c:10:2f:96:8f:9b:85:a7:fd:c8:
                    46:2d:19:00:03:7b:e7:33:fe:a1:b8:b9:28:ab:87:
                    28:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.213.0/24
                  185.239.25.0/24
                  194.146.188.0/22
                IPv6:
                  2001:7f8:14d::/48
                  2a0c:d540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60159
                  60812

    Signature Algorithm: sha256WithRSAEncryption
         45:77:5c:d2:68:db:92:2e:4a:09:2b:80:a9:03:cc:56:3f:07:
         b6:3d:8c:cc:b5:63:f0:bf:cd:49:9b:24:4c:3e:e2:d7:dd:76:
         71:bd:dc:6d:e6:5a:f7:fd:48:82:03:b4:74:03:c7:39:af:70:
         72:8d:a1:48:5e:79:44:74:9a:ae:0d:1c:ad:04:30:5e:da:36:
         c3:0d:ae:c6:25:2e:ff:f4:73:ee:29:a5:e8:43:6e:8f:fa:05:
         05:70:51:ae:3e:67:36:07:94:ad:72:e4:66:27:4d:ab:a3:30:
         53:53:2f:20:be:78:31:52:c3:ff:5c:70:6b:e4:d4:4d:e3:d5:
         2f:7f:75:23:d2:56:ee:a6:92:19:6d:db:a9:1e:4d:2f:2f:bf:
         9d:c1:7a:12:47:89:df:e9:21:fc:71:d3:db:91:94:18:54:40:
         c2:cb:22:2b:05:47:0a:f8:c1:16:5e:80:54:2c:13:9f:8d:07:
         f3:bc:45:cd:8c:e7:68:41:24:7b:1b:b3:1e:00:ac:dc:6b:fd:
         b4:cd:9a:d3:15:50:9e:fc:38:25:d2:23:b2:9c:fb:cc:e0:ab:
         db:96:f0:9f:07:55:fd:09:e3:e0:51:dc:56:ad:73:94:fd:a1:
         55:a4:43:f9:73:55:23:62:5c:5b:77:70:73:af:dc:ef:18:72:
         96:2e:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:58:46 2024 by rpki-client on console-fra.rpki-client.org