Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eUWjoe_A5rPgPoQScmsCM8COd_s.cer
File:                     eUWjoe_A5rPgPoQScmsCM8COd_s.cer (raw, json)
Hash identifier:          ER5ZrsiQLhZmcixQ+tKt9IG/cprMWiXV8MyjlfLylSc=
Subject key identifier:   79:45:A3:A1:EF:C0:E6:B3:E0:3E:84:12:72:6B:02:33:C0:8E:77:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4EFFD077A726A96AA82054ECC388E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/eUWjoe_A5rPgPoQScmsCM8COd_s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.94.184.0/22

Validation:               Failed, certificate revoked on Mon 30 Jan 2023 12:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:ef:fd:07:7a:72:6a:96:aa:82:05:4e:cc:38:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7945a3a1efc0e6b3e03e8412726b0233c08e77fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:9b:03:e5:cf:7e:8b:aa:39:05:69:79:84:
                    ea:1d:71:3e:d3:d2:9f:d0:7c:db:c0:24:44:0c:ee:
                    c6:ed:28:57:c6:4e:fd:0f:d1:4f:27:31:6c:fd:69:
                    71:ac:e1:fd:9e:36:d5:93:fe:d4:6d:6c:13:5a:0a:
                    38:6e:00:0f:c8:7a:fa:5b:3c:6b:2c:16:1c:87:e2:
                    03:f5:47:1d:1c:86:13:6d:12:66:cb:62:10:fd:45:
                    62:3c:4e:c1:65:96:3d:df:7b:cb:b8:65:35:72:6d:
                    d0:03:9d:71:9c:6b:fa:d7:15:56:07:80:23:7e:a5:
                    c2:97:7a:fd:d7:21:58:03:7b:88:86:97:3e:b6:e5:
                    62:f1:23:28:b8:be:52:f2:a7:b9:c0:ac:91:aa:63:
                    b2:f8:1f:b1:23:13:1c:c8:4d:3b:0f:ab:49:db:90:
                    5f:ac:dc:b4:c9:b4:2d:3a:59:46:1a:c6:e5:12:c1:
                    a6:19:0f:56:55:49:00:11:6f:ce:d4:cf:bd:4c:f8:
                    1f:84:aa:78:c1:c7:ae:af:f2:10:0e:46:d0:54:2e:
                    56:98:6e:49:73:e2:4a:4d:df:a1:3c:e6:9d:3f:e2:
                    6e:af:58:99:d2:d3:9b:96:bb:10:f9:ff:f6:22:07:
                    7b:03:ea:33:95:f5:16:3d:d6:ba:ab:de:7b:f2:01:
                    21:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:45:A3:A1:EF:C0:E6:B3:E0:3E:84:12:72:6B:02:33:C0:8E:77:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/eUWjoe_A5rPgPoQScmsCM8COd_s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:fa:9f:91:22:d9:18:6d:b9:fe:67:12:30:6d:e2:17:26:9a:
         31:a6:47:9b:cd:12:71:80:f9:70:30:b5:2d:88:90:56:4f:3b:
         4d:bf:21:c1:6f:b0:43:b7:14:16:c0:06:cc:2c:17:c6:3b:b8:
         2c:6d:60:e7:bd:07:fc:f0:b2:d3:55:9f:dc:8a:b5:6d:97:01:
         3a:1c:e9:bb:6f:7e:f9:fe:71:e9:b8:28:d4:7b:cd:de:98:43:
         a1:2e:ba:04:11:f4:4a:cc:90:19:e4:ac:aa:b6:04:d0:3f:a0:
         cf:c9:c5:70:80:f5:9c:bb:66:d5:c5:49:aa:2f:b6:2f:cb:f8:
         50:5d:82:e1:65:d9:b2:b8:cd:ee:27:72:ad:a4:85:f8:77:b4:
         32:b1:df:2a:38:c6:a2:47:c5:4c:31:58:ff:ab:c4:69:51:fc:
         48:74:d0:f6:c6:d6:21:b7:36:d0:c1:e7:ae:53:00:2a:e7:de:
         f1:5b:40:9b:00:0b:00:50:24:a7:55:d7:a3:72:65:2f:c5:54:
         9e:2c:fd:88:61:e2:1e:61:fa:8b:b0:5d:1c:12:b1:8a:0e:40:
         57:16:e8:86:cd:07:74:f7:08:90:85:ac:42:bf:48:dd:b5:ad:
         00:14:61:5c:fb:fd:2e:19:24:ec:f2:7e:db:26:ce:70:cc:80:
         5f:23:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:16 2024 by rpki-client on console-fra.rpki-client.org