Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uI9wGdJ903dwbnkIclbVp5N7KrU.cer
File:                     uI9wGdJ903dwbnkIclbVp5N7KrU.cer (raw, json)
Hash identifier:          zOjd7gv48Hby6B51UHwOwEt8CDBDbbsw5bk9IZb0t+E=
Subject key identifier:   B8:8F:70:19:D2:7D:D3:77:70:6E:79:08:72:56:D5:A7:93:7B:2A:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018572455D08629DFF44CDAB29254E532097
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/49/7bca26-200b-4a12-bc86-886ad2ad47ae/1/uI9wGdJ903dwbnkIclbVp5N7KrU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/49/7bca26-200b-4a12-bc86-886ad2ad47ae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:06 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 206079
                          IP: 185.168.180.0/22
                          IP: 2a10:abc0::/29

Validation:               Failed, certificate revoked on Tue 28 Feb 2023 12:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:45:5d:08:62:9d:ff:44:cd:ab:29:25:4e:53:20:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b88f7019d27dd377706e79087256d5a7937b2ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:d9:09:63:2e:dd:17:aa:16:b3:f8:c4:b0:
                    e5:ac:26:a9:db:ec:76:b8:3b:9a:48:f5:54:7e:38:
                    23:7d:1e:b8:f7:b3:78:58:e0:0e:f6:0d:42:c2:9f:
                    56:e1:54:e7:33:5f:32:38:a0:73:8b:14:30:35:8e:
                    6c:a0:6a:71:b1:52:bb:4f:9d:4d:6c:5a:95:dd:ef:
                    ff:a9:a2:d9:19:b0:b5:f4:53:fa:2e:65:89:4a:db:
                    78:85:84:f7:1e:7a:98:fd:3b:da:68:6e:b2:a9:27:
                    62:8c:f3:03:f6:eb:30:fd:45:d1:c3:f9:e6:42:fe:
                    52:2c:43:b0:c8:70:15:d0:bf:c2:55:70:84:dc:1f:
                    6d:6e:85:0f:61:b4:49:04:3f:62:3c:bc:cf:e7:f5:
                    fe:52:c6:0b:62:fc:4c:56:05:f0:ce:f9:97:ae:23:
                    b3:51:6e:ab:27:6b:fc:f6:d8:90:3e:68:34:8a:67:
                    06:73:37:b0:9b:08:1a:5b:bf:31:e0:4c:8f:e6:47:
                    e4:26:9f:fe:01:db:d6:1c:85:4d:c3:24:36:f2:6e:
                    ff:cf:e3:f8:34:b6:3e:02:3f:dc:25:c4:77:18:d0:
                    ef:92:56:29:22:8e:4c:ec:a4:d6:8e:7e:87:dc:05:
                    6c:96:95:47:7c:f0:6a:12:33:9f:c4:2b:7a:d1:00:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8F:70:19:D2:7D:D3:77:70:6E:79:08:72:56:D5:A7:93:7B:2A:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/7bca26-200b-4a12-bc86-886ad2ad47ae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/7bca26-200b-4a12-bc86-886ad2ad47ae/1/uI9wGdJ903dwbnkIclbVp5N7KrU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.168.180.0/22
                IPv6:
                  2a10:abc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206079

    Signature Algorithm: sha256WithRSAEncryption
         46:09:e7:99:0c:7a:2f:e8:f8:23:e4:88:d1:8c:9e:fa:ca:02:
         3a:ab:f4:61:e9:68:31:34:c5:b1:7f:74:9a:78:d9:c5:ab:a4:
         25:e7:53:67:a6:f5:aa:0c:87:a9:f1:4d:7d:3e:b6:0b:52:ea:
         fe:f3:a1:15:bf:c8:d5:18:e2:3f:5d:03:c4:8b:7e:a7:05:44:
         6a:65:89:3e:d4:c2:92:27:58:7d:49:fa:e7:02:ed:3e:3d:5d:
         3a:8e:0b:00:60:64:a8:74:1a:98:93:46:ce:27:b1:51:86:53:
         22:c1:91:85:30:cf:24:3b:68:1e:7d:b1:89:35:52:58:6f:4b:
         01:74:69:83:27:bb:34:7f:66:4e:ac:29:a5:c6:d4:a0:0a:b2:
         62:93:f5:c9:91:58:35:3f:44:41:75:f0:15:cb:fe:5f:5d:9c:
         10:bd:f8:16:aa:93:83:f3:f9:f4:68:28:1c:b2:00:77:6d:13:
         ec:d6:0a:51:fb:9b:23:04:a2:1f:4b:13:26:7e:b8:72:ae:12:
         9a:5a:e2:e1:1c:4f:d1:f4:4f:85:8f:f3:4c:7e:6b:c3:66:3c:
         84:ca:6b:bd:84:bd:d5:e0:b3:33:cc:6e:81:6f:02:14:c0:67:
         b2:31:a0:ea:fd:c6:5c:d4:ed:45:40:7e:f7:10:ff:b6:b5:c4:
         c7:b9:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:14 2024 by rpki-client on console-ams.rpki-client.org