Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uN_4FyS_da7_4U-Gv84ggjRBmoA.cer
File:                     uN_4FyS_da7_4U-Gv84ggjRBmoA.cer (raw, json)
Hash identifier:          DdJEMulBlVcNx3XNShClz9Q+Udr+z003cSrB1/PhgGE=
Subject key identifier:   B8:DF:F8:17:24:BF:75:AE:FF:E1:4F:86:BF:CE:20:82:34:41:9A:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186C61B6076BCD1D32A1E95E13528B642C0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/uN_4FyS_da7_4U-Gv84ggjRBmoA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 09 Mar 2023 11:22:08 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.142.15.0/24

Validation:               Failed, certificate revoked on Fri 08 Dec 2023 12:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c6:1b:60:76:bc:d1:d3:2a:1e:95:e1:35:28:b6:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  9 11:22:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b8dff81724bf75aeffe14f86bfce208234419a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7d:75:e2:64:4c:2c:47:36:8f:4b:0b:a7:0e:
                    d1:30:31:0c:75:0e:a6:53:42:c7:4f:9b:f3:ff:c6:
                    cd:f0:fb:a9:94:e2:e3:04:e5:e5:95:69:91:b1:41:
                    1e:dd:f8:7a:3e:8e:83:59:d2:1f:17:78:5c:c3:c4:
                    b6:03:73:77:54:8e:ca:c5:fb:eb:58:0a:50:6a:db:
                    18:c0:7e:2e:f3:ce:2d:ee:84:91:64:13:8c:e9:c0:
                    64:7e:3f:0d:49:bd:67:b3:fa:67:86:53:aa:33:e8:
                    84:e9:58:95:60:0e:26:2e:04:d9:43:b3:b2:c2:92:
                    2c:8c:71:ef:26:02:67:11:6e:12:23:a1:b5:9a:08:
                    27:88:2b:65:3b:2c:cd:c9:97:45:97:2e:16:64:b9:
                    c7:e3:9e:f9:14:74:95:4d:8c:89:f4:ab:e5:9d:98:
                    d6:60:06:4d:25:7e:fe:ff:87:a1:a4:de:0d:91:60:
                    a9:ed:7d:fe:22:66:76:73:77:be:30:80:7b:c3:02:
                    89:d8:38:82:d0:1a:11:95:0e:68:d0:59:26:bf:b6:
                    14:25:f1:4d:5b:71:4e:3d:f6:72:6e:65:8c:30:c8:
                    44:3a:c4:90:1b:e8:f7:3e:7f:e3:3f:15:44:06:95:
                    33:ff:66:f6:fe:2e:63:f3:cf:fd:2e:03:32:33:bb:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DF:F8:17:24:BF:75:AE:FF:E1:4F:86:BF:CE:20:82:34:41:9A:80
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/uN_4FyS_da7_4U-Gv84ggjRBmoA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:72:23:9a:8e:be:9e:d7:4d:11:6d:a8:1d:d4:69:b8:11:
         93:b4:77:cb:53:86:98:c6:57:d1:5c:9a:1d:23:c0:b9:41:59:
         d3:19:c6:f4:6c:a6:71:c0:27:05:d3:96:6c:08:a3:15:d4:df:
         1b:c7:6b:0f:7e:70:7d:26:75:e2:06:74:9a:fd:02:90:8f:d0:
         2a:34:f7:bd:a5:f6:8f:71:18:ad:2b:48:fa:c0:2b:68:f7:77:
         6a:39:34:82:94:78:fd:fb:79:f0:0f:51:8e:9e:7b:0a:fe:1c:
         d6:6c:cd:d6:c9:78:6a:52:60:02:94:f6:fd:29:d2:f2:a9:5c:
         4a:b6:e7:1d:ce:66:b2:c7:d3:ea:ed:74:0f:81:36:11:99:d6:
         35:3b:90:43:da:3b:04:d9:37:d5:74:6b:e5:70:12:d8:3b:ce:
         76:73:aa:9a:35:0b:20:3e:9a:4c:4c:21:ce:42:a1:4a:10:cb:
         d9:25:04:07:97:90:7d:96:8f:2c:65:92:76:f4:d0:c2:43:e1:
         99:fe:a6:f1:99:33:39:9b:19:1d:89:0a:1a:76:74:69:ce:f2:
         e9:0e:0b:31:57:7b:d0:b8:b0:7f:72:c7:f4:44:b7:74:35:f6:
         0a:52:c5:9a:16:75:5b:08:cb:27:3f:47:24:69:a3:7c:6a:91:
         b4:f1:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:31 2024 by rpki-client on console-fra.rpki-client.org