Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uelxWqkVI2vkXTJmTZrZ839M6mA.cer
File:                     uelxWqkVI2vkXTJmTZrZ839M6mA.cer (raw, json)
Hash identifier:          DDw6F227smau3Zp/y8/LZZN3fpYxU0QQGBLLgQECnVw=
Subject key identifier:   B9:E9:71:5A:A9:15:23:6B:E4:5D:32:66:4D:9A:D9:F3:7F:4C:EA:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571687C209EBDC7887AF994516FBEAC24
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/95/35bfd4-addf-4d45-a0fb-9939d16f8165/1/uelxWqkVI2vkXTJmTZrZ839M6mA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/95/35bfd4-addf-4d45-a0fb-9939d16f8165/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:35:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.35.80.0/22
                          IP: 2a0d:6140::/29

Validation:               Failed, certificate revoked on Fri 21 Jul 2023 09:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:7c:20:9e:bd:c7:88:7a:f9:94:51:6f:be:ac:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:35:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b9e9715aa915236be45d32664d9ad9f37f4cea60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:f6:81:e4:a5:15:13:7d:b5:6a:2d:f3:f4:
                    d5:58:31:3c:8c:c9:dd:1d:ee:8c:01:2d:e2:8b:6d:
                    9e:a0:73:bb:b9:e2:1e:07:64:52:98:d2:96:52:d2:
                    60:41:c0:af:a1:1e:ba:1d:f7:cf:02:43:76:43:14:
                    ac:ee:c5:7d:58:12:35:fa:39:dd:1f:1a:17:0f:c9:
                    6b:c5:44:fe:96:07:67:56:da:05:6c:c7:23:b6:86:
                    50:0f:e3:67:8e:01:a1:80:51:c0:ae:a4:97:61:9f:
                    69:9d:e5:a6:c9:dc:d8:e3:87:1f:b4:32:ae:3b:11:
                    ca:f5:a6:df:7b:b1:42:ca:b8:a1:ec:48:2e:b3:5f:
                    31:70:7d:56:98:a4:f8:d4:73:cb:8f:d1:7d:71:9f:
                    70:d2:8e:3c:17:36:31:f9:fd:e2:36:6d:7f:84:17:
                    df:93:26:10:aa:63:4d:bf:22:1f:aa:39:c8:80:d3:
                    24:7c:b5:67:11:1c:3e:55:1c:4d:c9:32:d3:1b:76:
                    9a:f0:91:64:a2:69:5b:79:57:26:f1:76:f5:66:ba:
                    db:79:8f:bc:9c:81:f0:88:88:e3:35:fa:4f:b6:6f:
                    11:b2:7f:a7:eb:33:36:77:6d:f1:d4:e5:96:7e:c4:
                    5c:d3:68:d5:55:22:9e:ca:f5:08:40:89:65:3e:31:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E9:71:5A:A9:15:23:6B:E4:5D:32:66:4D:9A:D9:F3:7F:4C:EA:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/35bfd4-addf-4d45-a0fb-9939d16f8165/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/35bfd4-addf-4d45-a0fb-9939d16f8165/1/uelxWqkVI2vkXTJmTZrZ839M6mA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.35.80.0/22
                IPv6:
                  2a0d:6140::/29

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:2c:0a:8f:fd:97:c0:da:26:a8:a3:b5:a5:cb:be:11:46:
         a5:40:d0:44:70:fc:78:ca:e8:33:a6:79:50:a1:07:49:3f:fd:
         34:e5:43:ea:69:9b:3f:92:81:e4:fb:ea:57:e2:4b:92:fb:33:
         bb:a6:e2:8b:4b:a4:99:62:d0:ab:26:0c:80:f3:e6:a2:fc:50:
         d9:6c:87:df:5a:64:c7:8a:83:28:f0:36:72:4e:0d:ed:02:32:
         85:f0:05:9f:f3:55:16:9f:f9:a1:b3:6a:67:ea:e1:73:32:9b:
         52:b4:8b:f5:b4:1b:67:ba:43:25:46:6c:fd:85:9a:b2:49:67:
         ae:8f:29:dd:78:8c:f8:03:8f:f0:fc:b3:59:cb:16:d7:bf:d5:
         a9:64:67:9a:50:aa:4c:bb:1c:45:f3:16:59:07:8f:0a:e1:0a:
         e6:bf:f6:79:55:5d:05:5f:62:33:b0:27:ff:ab:b7:f1:f1:25:
         a2:13:30:39:12:5a:10:d5:8b:88:50:7c:e8:8d:e8:71:52:7b:
         cb:e4:69:3f:24:6f:cd:14:64:07:fc:0e:36:56:1d:9e:b7:eb:
         76:ca:c2:c9:a8:5d:84:e0:78:45:8b:c2:2d:29:03:61:0a:ce:
         19:7d:fd:a6:d6:39:35:69:a5:61:45:ec:0e:59:1b:ee:55:41:
         4b:0d:4a:7c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVxaHwgnr3HiHr5lFFvvqwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWU5NzE1YWE5MTUyMzZiZTQ1ZDMyNjY0ZDlhZDlmMzdmNGNlYTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLT2geSlFRN9tWot8/TVWDE8jMnd
He6MAS3ii22eoHO7ueIeB2RSmNKWUtJgQcCvoR66HffPAkN2QxSs7sV9WBI1+jnd
HxoXD8lrxUT+lgdnVtoFbMcjtoZQD+NnjgGhgFHArqSXYZ9pneWmydzY44cftDKu
OxHK9abfe7FCyrih7Egus18xcH1WmKT41HPLj9F9cZ9w0o48FzYx+f3iNm1/hBff
kyYQqmNNvyIfqjnIgNMkfLVnERw+VRxNyTLTG3aa8JFkomlbeVcm8Xb1ZrrbeY+8
nIHwiIjjNfpPtm8Rsn+n6zM2d23x1OWWfsRc02jVVSKeyvUIQIllPjGKqwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLnpcVqpFSNr5F0yZk2a2fN/TOpgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzM1YmZk
NC1hZGRmLTRkNDUtYTBmYi05OTM5ZDE2ZjgxNjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvMzViZmQ0
LWFkZGYtNGQ0NS1hMGZiLTk5MzlkMTZmODE2NS8xL3VlbHhXcWtWSTJ2a1hUSm1U
WnJaODM5TTZtQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwSNQMA0EAgACMAcDBQMqDWFAMA0GCSqGSIb3
DQEBCwUAA4IBAQAfXywKj/2XwNomqKO1pcu+EUalQNBEcPx4yugzpnlQoQdJP/00
5UPqaZs/koHk++pX4kuS+zO7puKLS6SZYtCrJgyA8+ai/FDZbIffWmTHioMo8DZy
Tg3tAjKF8AWf81UWn/mhs2pn6uFzMptStIv1tBtnukMlRmz9hZqySWeujyndeIz4
A4/w/LNZyxbXv9WpZGeaUKpMuxxF8xZZB48K4Qrmv/Z5VV0FX2IzsCf/q7fx8SWi
EzA5EloQ1YuIUHzojehxUnvL5Gk/JG/NFGQH/A42Vh2et+t2ysLJqF2E4HhFi8It
KQNhCs4Zff2m1jk1aaVhRewOWRvuVUFLDUp8
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:33 2024 by rpki-client on console-fra.rpki-client.org