Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xLQUMGWlCYgbygZZLunggd8sdUk.cer
File:                     xLQUMGWlCYgbygZZLunggd8sdUk.cer (raw, json)
Hash identifier:          W0oFvjHIQ81y8T8/Ym8e3nYkBsK8mbiE44sVwG9CDJU=
Subject key identifier:   C4:B4:14:30:65:A5:09:88:1B:CA:06:59:2E:E9:E0:81:DF:2C:75:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571684351787246567BDDFBE54C91D2C0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/469d85-9578-4ad0-bebc-af83aed319ec/1/xLQUMGWlCYgbygZZLunggd8sdUk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/469d85-9578-4ad0-bebc-af83aed319ec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:35:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.212.229.0/24

Validation:               Failed, certificate revoked on Mon 18 Dec 2023 11:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:43:51:78:72:46:56:7b:dd:fb:e5:4c:91:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:35:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c4b4143065a509881bca06592ee9e081df2c7549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fa:bd:ac:af:09:3e:18:e3:d5:93:e9:df:89:
                    07:24:14:fc:ed:6d:90:db:f1:23:e4:3e:16:5d:bf:
                    ac:83:ee:9d:ec:ca:fc:aa:f6:93:82:76:cc:38:63:
                    d0:f8:64:8c:46:78:48:3e:54:e1:9d:25:cf:cb:4e:
                    af:f6:ad:e2:ae:54:dd:0f:f1:e5:f5:01:a6:11:a1:
                    9a:8d:23:d1:f1:6b:59:f1:13:cf:72:58:cb:f8:96:
                    00:b0:a7:20:6f:c6:fb:b5:14:be:61:5c:86:7a:ed:
                    0e:26:a0:75:78:44:ad:ed:32:ae:66:f3:b2:b3:b4:
                    bc:b5:57:29:66:40:09:77:2c:92:7b:de:88:f6:40:
                    2a:76:d7:9a:09:53:f1:89:4d:39:ef:ae:d2:29:92:
                    8c:5f:12:d3:3d:92:d9:ff:45:01:fa:fe:71:aa:0c:
                    b4:21:eb:bf:77:fb:7c:88:d6:ce:34:99:53:ff:8c:
                    49:6a:1c:c3:a9:01:da:d5:af:83:35:de:4a:b3:73:
                    88:3f:da:e1:7c:80:08:7c:79:76:6f:0b:90:01:0f:
                    ea:a6:41:e4:49:4a:01:89:be:02:f2:ae:b3:ff:5a:
                    85:dd:55:4b:85:4d:73:a4:ac:5e:47:a4:05:15:1e:
                    21:d8:3c:13:b6:a9:fe:ad:e2:65:48:9b:45:90:08:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B4:14:30:65:A5:09:88:1B:CA:06:59:2E:E9:E0:81:DF:2C:75:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/469d85-9578-4ad0-bebc-af83aed319ec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/469d85-9578-4ad0-bebc-af83aed319ec/1/xLQUMGWlCYgbygZZLunggd8sdUk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ee:57:22:45:b6:4c:b4:ea:ff:99:44:c7:08:24:cc:97:c0:
         3d:a1:cc:56:48:4a:08:ce:9d:ee:33:98:8a:82:03:ba:ad:45:
         4d:ed:4b:e9:f9:07:55:b6:e8:af:25:16:47:c9:02:78:b2:1c:
         e5:ae:7c:91:70:22:63:b9:91:30:2c:12:c3:9b:4f:ef:41:02:
         f3:39:ac:16:1e:6b:f9:31:db:20:5a:56:2f:e2:7d:6c:47:17:
         1e:0d:82:13:86:4d:a5:05:26:e9:f5:3a:26:1d:bb:56:5e:db:
         18:05:03:1a:32:74:7c:da:06:83:ed:d6:99:2f:ec:67:9f:25:
         36:0e:e0:14:5b:2f:c5:59:88:24:60:dc:61:50:eb:58:7b:6a:
         f5:75:5f:39:21:d9:9d:65:89:41:be:52:41:54:fc:f1:83:3f:
         97:86:31:2a:3b:f5:81:e4:b0:c2:e7:01:a5:e8:5c:98:ee:71:
         17:4b:a5:8d:dd:f9:35:4b:6c:f0:95:5a:fb:e9:76:14:f0:87:
         81:25:43:ff:22:2d:40:09:73:c7:dd:44:da:49:97:26:33:07:
         5c:da:f6:10:3e:be:5d:f2:8e:7a:b0:ea:6b:9b:36:43:3c:24:
         4d:8e:be:4b:7e:a0:ea:1c:ab:ee:cd:d6:a6:56:70:41:3b:ab:
         ab:ac:00:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:59 2024 by rpki-client on console-fra.rpki-client.org