Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xlsmuwB8wd2WiA1MhU2020AEXYs.cer
File:                     xlsmuwB8wd2WiA1MhU2020AEXYs.cer (raw, json)
Hash identifier:          cene5if5YuL5gMEDtD6O63LD9ynl3EwuDhB2elDzvfs=
Subject key identifier:   C6:5B:26:BB:00:7C:C1:DD:96:88:0D:4C:85:4D:B4:DB:40:04:5D:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF7D4E41D203BDF7A570DC9BC3F3947
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/20/4598a4-059c-465e-ab8d-5d25cab9868b/1/xlsmuwB8wd2WiA1MhU2020AEXYs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/20/4598a4-059c-465e-ab8d-5d25cab9868b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.24.126.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:d4:e4:1d:20:3b:df:7a:57:0d:c9:bc:3f:39:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c65b26bb007cc1dd96880d4c854db4db40045d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:f8:ea:4c:38:7d:3d:1f:06:01:dd:cc:af:
                    0d:c2:80:6a:5d:c5:93:3f:26:ae:11:8d:e3:14:b9:
                    54:b5:f3:af:23:d8:60:1f:99:ed:3d:a2:60:46:c8:
                    61:7b:0f:1a:6c:68:a7:d3:c1:a6:68:d7:d8:91:12:
                    fe:e7:bd:54:44:7e:68:37:cc:e4:db:84:8d:52:82:
                    66:a6:90:85:e1:55:ec:cc:5c:89:e5:5e:36:06:8d:
                    4c:17:67:b3:e9:4c:5c:05:5a:eb:58:75:23:bf:8b:
                    de:2a:82:dc:87:ee:24:c0:84:21:fe:4f:b7:8e:3f:
                    2a:f9:b9:0b:6f:29:19:0f:8d:a7:a0:5e:2d:f6:5c:
                    4e:8e:4a:b7:54:46:1a:4a:59:37:60:1e:a3:4f:c0:
                    ee:c4:fe:21:a9:8a:d5:e0:41:59:ac:be:dc:fa:ba:
                    e0:ef:31:d4:3c:57:ec:bf:e3:de:d9:ce:f3:86:bd:
                    39:6f:f8:98:2e:63:5b:5c:00:0e:6f:96:ab:9d:a2:
                    b7:8e:fc:0a:05:93:40:df:68:cb:03:60:8e:4a:f1:
                    0b:f7:88:1e:64:a0:43:0a:69:d7:b5:64:26:f4:5a:
                    d5:b9:ab:4f:e1:3d:98:ca:e6:62:64:01:18:8e:fc:
                    3f:45:0c:d3:88:26:07:c4:73:e2:dd:cf:a5:c2:98:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5B:26:BB:00:7C:C1:DD:96:88:0D:4C:85:4D:B4:DB:40:04:5D:8B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4598a4-059c-465e-ab8d-5d25cab9868b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4598a4-059c-465e-ab8d-5d25cab9868b/1/xlsmuwB8wd2WiA1MhU2020AEXYs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.24.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:eb:7f:d3:4d:92:de:5d:a5:e6:9a:f5:e5:50:fa:c9:81:e0:
         f6:17:3e:ab:eb:0d:fc:09:43:8e:7e:85:8c:82:31:93:29:63:
         d8:5a:e0:06:62:8b:6c:cc:35:3d:08:23:48:ac:56:44:a5:d7:
         54:cc:a7:dd:a2:98:f8:75:74:fd:ca:25:2d:cb:d7:23:23:e0:
         91:a2:99:2f:83:94:1f:3e:94:d6:b1:e5:5b:b1:68:63:39:85:
         54:c6:85:a6:2c:fb:19:a0:34:ee:8b:61:b3:68:85:75:15:15:
         88:f0:d8:30:9b:0a:63:06:e9:e4:45:e1:bd:67:11:91:b8:1b:
         02:5f:f7:db:e0:6f:2a:c1:32:18:05:b1:62:ae:c1:93:57:ec:
         82:cf:f7:8d:f7:ca:70:ca:4d:84:a1:b9:8f:c3:f2:11:2f:be:
         4d:f2:62:32:5a:88:74:8a:3c:bf:c9:a0:a2:55:6a:77:3c:90:
         17:6f:c0:e1:a0:c0:73:bf:dc:bb:ca:ca:ae:c4:70:57:80:89:
         f9:01:a6:87:6b:bf:41:bf:52:fb:c2:fa:8b:ad:cb:b4:22:87:
         0e:f5:ba:f2:e5:a3:f9:07:92:6e:a9:91:b2:66:ab:f2:63:01:
         12:9a:7b:04:4d:b1:33:30:02:32:ab:e9:ce:f2:b2:02:52:29:
         a6:8b:69:1e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVt99TkHSA733pXDcm8PzlHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTUzMzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjViMjZiYjAwN2NjMWRkOTY4ODBkNGM4NTRkYjRkYjQwMDQ1ZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQT46kw4fT0fBgHdzK8NwoBqXcWT
PyauEY3jFLlUtfOvI9hgH5ntPaJgRshhew8abGin08GmaNfYkRL+571URH5oN8zk
24SNUoJmppCF4VXszFyJ5V42Bo1MF2ez6UxcBVrrWHUjv4veKoLch+4kwIQh/k+3
jj8q+bkLbykZD42noF4t9lxOjkq3VEYaSlk3YB6jT8DuxP4hqYrV4EFZrL7c+rrg
7zHUPFfsv+Pe2c7zhr05b/iYLmNbXAAOb5arnaK3jvwKBZNA32jLA2COSvEL94ge
ZKBDCmnXtWQm9FrVuatP4T2YyuZiZAEYjvw/RQzTiCYHxHPi3c+lwph6owIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMZbJrsAfMHdlogNTIVNtNtABF2LMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzQ1OThh
NC0wNTljLTQ2NWUtYWI4ZC01ZDI1Y2FiOTg2OGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvNDU5OGE0
LTA1OWMtNDY1ZS1hYjhkLTVkMjVjYWI5ODY4Yi8xL3hsc211d0I4d2QyV2lBMU1o
VTIwMjBBRVhZcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA1Bh+MA0GCSqGSIb3DQEBCwUAA4IBAQAu63/T
TZLeXaXmmvXlUPrJgeD2Fz6r6w38CUOOfoWMgjGTKWPYWuAGYotszDU9CCNIrFZE
pddUzKfdopj4dXT9yiUty9cjI+CRopkvg5QfPpTWseVbsWhjOYVUxoWmLPsZoDTu
i2GzaIV1FRWI8NgwmwpjBunkReG9ZxGRuBsCX/fb4G8qwTIYBbFirsGTV+yCz/eN
98pwyk2EobmPw/IRL75N8mIyWoh0ijy/yaCiVWp3PJAXb8DhoMBzv9y7ysquxHBX
gIn5AaaHa79Bv1L7wvqLrcu0IocO9bry5aP5B5JuqZGyZqvyYwESmnsETbEzMAIy
q+nO8rICUimmi2ke
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:46 2023 by rpki-client on console.sobornost.net