Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pUcj_xcetcNuM_edB6c_BaTMw4A.cer
File:                     pUcj_xcetcNuM_edB6c_BaTMw4A.cer (raw, json)
Hash identifier:          d0BCJfxGi13kkm8+bYaKlP2pojfCgwhYJyoXgb0sPqM=
Subject key identifier:   A5:47:23:FF:17:1E:B5:C3:6E:33:F7:9D:07:A7:3F:05:A4:CC:C3:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01872D13CC8F19A794FB1FE87E774F4F358E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/274041-0eba-4302-8a73-2793ec3e5c20/1/pUcj_xcetcNuM_edB6c_BaTMw4A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/274041-0eba-4302-8a73-2793ec3e5c20/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 29 Mar 2023 11:14:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 51707
                          IP: 46.18.8.0/21

Validation:               Failed, certificate revoked on Wed 16 Aug 2023 11:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:2d:13:cc:8f:19:a7:94:fb:1f:e8:7e:77:4f:4f:35:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 29 11:14:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a54723ff171eb5c36e33f79d07a73f05a4ccc380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:a5:60:55:4d:bc:1e:0c:57:78:a3:cb:25:
                    9f:8b:ec:15:a6:fd:0c:32:e9:d7:0e:2c:40:83:b5:
                    cd:30:6f:8d:5e:78:b7:26:d2:f8:4d:9f:ec:b2:f0:
                    50:44:3a:5d:95:87:24:a1:9a:fc:6e:b9:b3:32:63:
                    bc:12:a5:39:96:a5:05:94:b0:f9:72:b8:a7:69:52:
                    86:fd:e1:27:2e:24:fd:80:e5:39:81:86:3e:4f:27:
                    51:c0:fc:52:1f:03:29:47:07:cc:34:5b:05:28:f0:
                    dd:6c:d0:d6:5d:d8:30:7c:7e:52:57:c3:b8:fb:e6:
                    c8:ae:a3:c3:55:c9:03:44:be:bd:b2:5f:43:b9:d4:
                    f5:42:d5:7e:88:10:71:f7:db:b6:b7:da:40:aa:c9:
                    ce:87:fb:7a:de:10:b3:9b:d8:c9:bf:9e:73:3b:4a:
                    d3:03:a1:1d:9b:af:48:4f:24:c6:d9:27:de:9b:8f:
                    93:d2:61:84:14:77:ff:27:c9:f0:34:2f:31:0b:35:
                    97:2b:77:19:23:0c:1e:be:11:7d:9a:cd:81:94:d5:
                    11:73:b4:62:0b:55:17:aa:69:40:a4:04:f6:a5:1f:
                    b0:5f:18:a5:11:d8:c2:7b:9f:69:9e:d3:75:43:86:
                    bb:04:c2:37:4b:43:fb:b4:ba:ac:65:4e:26:5b:7d:
                    04:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:47:23:FF:17:1E:B5:C3:6E:33:F7:9D:07:A7:3F:05:A4:CC:C3:80
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/274041-0eba-4302-8a73-2793ec3e5c20/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/274041-0eba-4302-8a73-2793ec3e5c20/1/pUcj_xcetcNuM_edB6c_BaTMw4A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.18.8.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51707

    Signature Algorithm: sha256WithRSAEncryption
         34:50:f5:e0:63:f0:4d:e5:8b:d5:06:8a:d4:7d:dc:81:e5:83:
         07:a9:0d:4f:e4:4f:b3:21:bd:65:0c:54:8e:8c:78:13:b9:97:
         b5:50:01:ff:15:d7:91:b1:a8:7b:47:94:51:8b:22:a4:ee:31:
         50:cf:1e:ce:36:12:22:4c:3a:b7:f4:23:75:b2:2d:07:06:53:
         23:46:56:de:16:62:86:92:6b:ba:7c:43:ce:8f:d2:f9:e5:cd:
         ef:a6:0e:b4:0b:ad:56:e7:e5:1a:5c:a0:0b:d4:89:56:2c:50:
         28:ee:18:b4:ec:72:5b:75:01:48:51:41:72:49:08:e9:52:0e:
         c5:ce:59:97:6b:64:5a:6e:37:81:35:c4:65:ab:ab:62:c8:e4:
         2d:75:37:91:0a:07:5a:67:fb:0c:8d:bc:8b:9b:fb:71:c1:98:
         fc:4f:08:1a:05:37:bb:56:28:92:07:6e:70:1f:5e:42:a4:40:
         07:9c:20:9e:8f:08:5a:f3:12:4e:d6:4e:25:17:55:14:a7:6c:
         e6:20:e0:66:b1:7c:3c:2d:59:2f:37:56:13:f4:a7:a2:c4:d1:
         6b:8a:c0:2a:a5:a1:76:57:66:d0:57:e8:32:23:34:de:ad:28:
         37:4b:88:74:7e:da:e1:5a:7a:f8:8f:0b:04:62:b4:36:2e:77:
         19:76:35:39
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYctE8yPGaeU+x/ofndPTzWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzI5MTExNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTQ3MjNmZjE3MWViNWMzNmUzM2Y3OWQwN2E3M2YwNWE0Y2NjMzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1julYFVNvB4MV3ijyyWfi+wVpv0M
MunXDixAg7XNMG+NXni3JtL4TZ/ssvBQRDpdlYckoZr8brmzMmO8EqU5lqUFlLD5
crinaVKG/eEnLiT9gOU5gYY+TydRwPxSHwMpRwfMNFsFKPDdbNDWXdgwfH5SV8O4
++bIrqPDVckDRL69sl9DudT1QtV+iBBx99u2t9pAqsnOh/t63hCzm9jJv55zO0rT
A6Edm69ITyTG2Sfem4+T0mGEFHf/J8nwNC8xCzWXK3cZIwwevhF9ms2BlNURc7Ri
C1UXqmlApAT2pR+wXxilEdjCe59pntN1Q4a7BMI3S0P7tLqsZU4mW30ETwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFKVHI/8XHrXDbjP3nQenPwWkzMOAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzI3NDA0
MS0wZWJhLTQzMDItOGE3My0yNzkzZWMzZTVjMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvMjc0MDQx
LTBlYmEtNDMwMi04YTczLTI3OTNlYzNlNWMyMC8xL3BVY2pfeGNldGNOdU1fZWRC
NmNfQmFUTXc0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDLhIIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDJ+zANBgkqhkiG9w0BAQsFAAOCAQEANFD14GPwTeWL1QaK1H3cgeWDB6kNT+RP
syG9ZQxUjox4E7mXtVAB/xXXkbGoe0eUUYsipO4xUM8ezjYSIkw6t/QjdbItBwZT
I0ZW3hZihpJrunxDzo/S+eXN76YOtAutVuflGlygC9SJVixQKO4YtOxyW3UBSFFB
ckkI6VIOxc5Zl2tkWm43gTXEZaurYsjkLXU3kQoHWmf7DI28i5v7ccGY/E8IGgU3
u1YokgducB9eQqRAB5wgno8IWvMSTtZOJRdVFKds5iDgZrF8PC1ZLzdWE/SnosTR
a4rAKqWhdldm0FfoMiM03q0oN0uIdH7a4Vp6+I8LBGK0Ni53GXY1OQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:00 2024 by rpki-client on console-ams.rpki-client.org