Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
File:                     yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer (raw, json)
Hash identifier:          ilU/No0JliAy0jAmACdD0sw8acCNyyC5PNDl6z5puYw=
Subject key identifier:   C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F4BAE3E6A7F33225C02FD8F029E7B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/yUy0Im5tJMHg6WhXiKX51ZQxLMA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.195.124.0/23
                          IP: 194.176.118.0/24

Validation:               Failed, certificate revoked on Tue 15 Aug 2023 11:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:4b:ae:3e:6a:7f:33:22:5c:02:fd:8f:02:9e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:56:d7:33:26:63:03:b1:02:44:f9:ac:93:
                    5c:c8:91:69:1b:01:f9:ec:1e:f3:be:0e:b5:bf:25:
                    20:6a:f1:7f:29:12:4c:6c:e2:5b:54:90:16:0a:a0:
                    46:4d:18:bc:3b:d4:72:cc:87:6b:4d:4d:2f:9f:fe:
                    1b:da:45:c3:4b:5f:46:3b:d7:55:5e:97:43:4e:0c:
                    92:79:18:d6:65:c2:00:55:53:6e:84:8f:5a:e0:9f:
                    8c:58:63:65:6a:f7:12:bb:a3:0c:6b:71:1e:5d:b8:
                    da:3d:1c:3a:6e:f0:4e:2a:65:59:4a:11:0f:2c:6c:
                    c8:f0:9f:4b:51:41:70:21:47:85:50:4e:74:2a:fa:
                    ab:1d:66:a2:f5:33:e6:ad:2b:00:84:57:c4:5c:02:
                    a3:af:a6:54:49:85:64:a3:3a:66:4c:eb:cb:af:ba:
                    15:cc:1d:6b:fa:18:f8:aa:00:54:20:93:06:61:e0:
                    b1:2d:88:d5:25:2e:b5:30:3d:65:38:40:1e:7a:47:
                    24:78:ff:55:29:51:8b:ba:c4:17:c3:b3:a3:e6:19:
                    fd:f2:e7:ac:b9:c0:3a:c6:2d:2e:d8:b2:51:0a:c0:
                    57:6e:9c:9a:8f:7d:94:32:fc:d1:ad:ce:09:27:da:
                    38:26:86:e9:46:64:d3:ee:7e:10:22:a0:13:4b:27:
                    07:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/yUy0Im5tJMHg6WhXiKX51ZQxLMA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.124.0/23
                  194.176.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:4d:b1:5d:ee:ef:53:04:1d:a5:18:04:ef:ee:2d:1a:84:a7:
         22:39:ac:43:bf:fa:d6:c3:af:ab:2c:ee:28:36:3b:cb:fb:34:
         bb:02:0e:f0:d2:74:dc:17:8b:56:5e:5a:8c:22:87:c7:d6:c7:
         6c:1c:6e:d7:eb:8a:08:f2:b5:dd:81:81:5a:33:79:c3:6e:16:
         55:78:cb:fe:d9:fe:cf:e9:d7:66:90:07:d3:ed:79:1d:2b:fc:
         7a:54:80:ec:d4:db:fe:4c:7c:ff:4f:a7:67:8d:bd:01:8d:54:
         f1:ad:92:d1:20:df:a1:c7:e2:6c:98:c8:2f:64:34:4e:af:8f:
         34:c1:19:b9:58:c4:86:4e:05:18:e4:69:2d:a6:90:5b:6c:f4:
         2b:4a:fd:22:10:3c:d5:f0:6c:b1:04:41:d1:a2:c9:3d:95:c7:
         2e:23:d5:cf:bb:96:8d:c2:b2:a9:43:56:9d:b6:38:30:01:3a:
         5e:59:aa:a3:ff:c5:b5:b0:f0:2d:2a:22:a0:9c:ec:48:e2:25:
         2b:b3:f6:b7:84:d1:3a:61:24:be:05:1a:e6:bb:fb:4d:02:09:
         19:94:b9:3b:79:a8:d5:fe:21:9a:f4:fe:02:ec:c3:77:24:c0:
         0e:ca:5e:91:cc:61:9e:52:6b:9a:dc:11:61:2b:26:98:d7:65:
         4b:b2:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:08 2024 by rpki-client on console-fra.rpki-client.org