Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eLxmIayciJJ701pq73kdb_YpxpY.cer
File:                     eLxmIayciJJ701pq73kdb_YpxpY.cer (raw, json)
Hash identifier:          lN3BLyZgFDWLW1aHgFjBwlKA8+OuRhdI8zNG74q63FE=
Subject key identifier:   78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFB7E798EC068746F30ECCB1DB2EE70
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/eLxmIayciJJ701pq73kdb_YpxpY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:33 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 92.114.56.0/22
                          IP: 109.230.216.0/23
                          IP: 109.230.222.0/24
                          IP: 134.255.215.0/24
                          IP: 185.159.252.0/22
                          IP: 188.215.224.0/22

Validation:               Failed, certificate revoked on Mon 06 Nov 2023 10:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:7e:79:8e:c0:68:74:6f:30:ec:cb:1d:b2:ee:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78bc6621ac9c88927bd35a6aef791d6ff629c696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:50:45:b7:f3:a7:b9:12:a6:ef:e0:8d:a2:
                    e3:95:38:8e:26:57:74:16:0e:23:83:33:3f:65:0e:
                    16:1a:d3:6c:a0:14:8a:8b:53:d4:3b:62:5c:64:98:
                    fb:a9:5e:53:49:8c:cf:1a:e8:4a:10:e4:55:bc:c7:
                    ad:2d:13:ab:50:c5:2b:f5:4e:3a:91:40:ac:b8:c9:
                    d8:2f:0c:03:2c:02:23:e6:be:bc:92:02:b2:f4:63:
                    39:d3:a0:ec:ab:35:54:7f:2b:89:cb:0c:9f:a5:2d:
                    4b:65:ef:ae:c2:c6:92:b7:96:0c:39:2a:1a:67:1b:
                    7b:b8:ac:f7:42:67:02:ae:9a:8e:91:e9:8b:77:64:
                    14:fc:99:ad:b6:02:f5:0e:b9:be:9b:02:0a:96:09:
                    6f:51:f6:ff:c3:e9:7f:1b:51:6f:39:1a:eb:56:7e:
                    ad:94:28:9f:5d:4d:46:09:50:b2:58:3d:ac:de:47:
                    84:26:7c:a1:cf:3f:68:b2:17:15:d9:24:93:60:76:
                    58:8e:90:26:95:01:8b:2f:af:9b:c9:55:b2:fe:3d:
                    dd:31:e6:bd:d3:2f:79:e0:cb:51:73:5a:21:73:54:
                    9a:ae:57:ca:2c:53:78:9b:30:6d:83:76:5d:d1:95:
                    83:f6:3e:f4:cd:c6:07:88:a9:b6:90:88:b2:74:8d:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/eLxmIayciJJ701pq73kdb_YpxpY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.114.56.0/22
                  109.230.216.0/23
                  109.230.222.0/24
                  134.255.215.0/24
                  185.159.252.0/22
                  188.215.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:c4:e3:db:fd:f4:4c:df:c9:17:fa:6f:e7:df:55:97:c9:ba:
         6e:72:85:a9:c3:0e:89:60:71:2b:85:d6:da:2a:f4:64:d4:e3:
         57:de:b6:87:db:b6:ff:c2:64:d8:24:79:2d:c5:61:c5:41:b3:
         ae:f9:03:b3:b6:a7:a8:a6:3d:50:dd:55:69:79:17:71:22:ba:
         02:84:1b:b2:a1:05:d5:ee:67:43:ab:cd:85:6c:0a:67:8a:14:
         42:c9:5c:e6:3a:48:85:3c:92:cb:0a:85:c9:0e:11:18:a5:ff:
         b2:8e:b6:c3:76:a5:dd:ab:18:7f:78:ae:21:4d:9d:a2:e8:6b:
         fd:bd:41:4a:e9:55:18:56:2f:b4:a4:09:f0:41:67:78:a0:84:
         2e:3e:c5:e0:9d:62:5a:a7:7f:8c:fa:fa:ee:a9:48:18:df:ee:
         17:d5:c7:02:87:1c:c7:74:78:75:19:03:33:6f:52:53:d1:a6:
         3e:51:70:05:68:f8:2c:85:a2:90:bd:54:cb:53:f7:48:e0:3d:
         79:c7:c5:2f:62:38:11:60:67:04:d7:d3:5c:48:29:7b:54:00:
         ef:66:ce:1c:f1:69:31:a0:f9:a4:b2:c4:be:64:d7:f6:55:db:
         72:24:bb:97:e1:f9:c3:08:97:74:88:31:85:30:79:db:8a:bb:
         54:f0:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:36 2024 by rpki-client on console-ams.rpki-client.org