Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uEQurSgJtPou7FE3Id0tH-PAD-A.cer
File:                     uEQurSgJtPou7FE3Id0tH-PAD-A.cer (raw, json)
Hash identifier:          UpMmoWx2EtFGIZ/G1hmG1V1iQEgQc3ljmTFZ4bHNucg=
Subject key identifier:   B8:44:2E:AD:28:09:B4:FA:2E:EC:51:37:21:DD:2D:1F:E3:C0:0F:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B7892F84A804DC6C5BF260B8EFAD65
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/0f7c1f-60c4-4b07-bc14-483b5ae3bffe/1/uEQurSgJtPou7FE3Id0tH-PAD-A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/0f7c1f-60c4-4b07-bc14-483b5ae3bffe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:29:26 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206789

Validation:               Failed, certificate revoked on Tue 05 Mar 2024 11:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:89:2f:84:a8:04:dc:6c:5b:f2:60:b8:ef:ad:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:29:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b8442ead2809b4fa2eec513721dd2d1fe3c00fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ca:98:37:05:bc:d8:70:09:9e:d6:63:fe:b5:
                    27:56:b8:07:cd:85:ce:49:e2:02:a1:79:3c:ce:0a:
                    08:f9:10:dd:71:b4:6e:39:48:02:97:33:59:12:48:
                    f5:87:3b:64:65:c6:e9:97:3e:49:52:12:96:99:0f:
                    e4:33:4d:1f:fa:f1:e3:df:60:e2:2d:57:24:22:d9:
                    8d:bb:5c:02:a6:5c:29:bc:90:37:ff:b1:00:e5:dc:
                    24:34:ef:ac:6b:08:55:18:aa:41:d8:6d:51:46:c3:
                    47:ef:c1:49:48:9f:68:96:6f:0d:29:2f:f0:b4:91:
                    f1:a2:76:a8:48:72:a2:57:7a:be:c0:5a:3b:c3:07:
                    9f:0a:2e:be:a8:88:4a:84:5b:27:89:35:a8:d4:51:
                    ac:3f:45:54:f5:77:9a:bb:54:16:86:ef:cb:01:36:
                    e0:67:8c:5f:34:0e:46:d0:b6:c0:b5:5d:72:7f:86:
                    22:14:0e:00:a4:2c:eb:10:cf:4a:2b:e3:48:b7:a2:
                    04:99:3f:63:4b:93:2b:7c:fc:93:fc:af:a5:9b:70:
                    72:fd:fd:3c:75:9c:3b:8a:c8:ca:00:3c:a6:a8:15:
                    ae:5b:05:23:db:2d:88:70:e3:16:3d:63:7a:e4:6d:
                    ae:0f:3e:ff:4f:ec:50:9f:81:d3:95:54:b2:d7:87:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:44:2E:AD:28:09:B4:FA:2E:EC:51:37:21:DD:2D:1F:E3:C0:0F:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0f7c1f-60c4-4b07-bc14-483b5ae3bffe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0f7c1f-60c4-4b07-bc14-483b5ae3bffe/1/uEQurSgJtPou7FE3Id0tH-PAD-A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206789

    Signature Algorithm: sha256WithRSAEncryption
         2f:b0:48:cf:43:13:e9:ee:5f:e0:58:0c:17:fc:07:f3:a6:8e:
         13:a6:fd:6a:cf:4a:d2:56:e1:67:29:65:d7:9d:34:f6:ba:e8:
         97:e0:1e:1f:65:74:7c:27:06:08:ca:8d:eb:94:b1:90:be:ad:
         a8:bd:8b:b4:c9:4b:23:7f:52:ae:9e:10:38:e9:bd:f2:d4:cb:
         a2:07:98:6c:e5:1a:da:1c:b7:e4:6f:9d:a8:40:3a:d8:bf:e4:
         a8:38:f5:57:b5:d4:c9:7b:e6:38:c2:90:6e:da:ac:90:2d:db:
         80:5a:96:e8:8a:ab:b3:64:af:8b:7b:45:ee:3c:33:49:f7:e8:
         22:49:45:4b:52:a6:dc:a1:46:fa:93:86:90:4f:dd:5e:7d:3c:
         8d:c5:2f:de:81:d5:6c:6b:33:7c:f7:13:f0:85:0d:9f:d6:8b:
         44:44:d5:d0:b3:34:92:b0:cb:4a:e7:5d:eb:e9:13:4c:e0:72:
         9d:23:f5:4f:cf:72:d6:9d:ad:e7:33:18:80:58:46:a7:58:d9:
         fe:63:56:fb:11:3a:fe:db:c8:1d:ad:07:44:18:69:da:b7:13:
         63:4e:cd:31:87:24:48:e1:fa:87:00:c5:7b:70:6d:90:46:d8:
         48:03:7d:41:fb:6d:2a:05:2a:b3:0c:69:96:59:c2:e1:d9:59:
         97:2b:a1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:29 2024 by rpki-client on console-fra.rpki-client.org