Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6LsOhGEgr4EWV2Ecms8a_gv4J1E.cer
File:                     6LsOhGEgr4EWV2Ecms8a_gv4J1E.cer (raw, json)
Hash identifier:          qQdHlTH8ee8x0vqRn0viAVFAJIGNJCWma4DZ4ibh+uQ=
Subject key identifier:   E8:BB:0E:84:61:20:AF:81:16:57:61:1C:9A:CF:1A:FE:0B:F8:27:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3B6E35A64218876397916A4ED52579F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/6LsOhGEgr4EWV2Ecms8a_gv4J1E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 06:29:52 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 80.91.211.0/24
                          IP: 2a12:bc80::/29

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 14:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:e3:5a:64:21:88:76:39:79:16:a4:ed:52:57:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:29:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e8bb0e846120af811657611c9acf1afe0bf82751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:6c:41:e1:17:53:f9:34:db:e0:06:85:35:
                    8c:e8:19:56:fe:8b:2d:48:20:f2:1f:a5:29:db:c6:
                    50:00:42:52:64:16:5c:de:2d:89:3a:e5:9c:c0:7b:
                    3a:21:3f:74:75:c6:9d:0e:fc:84:38:1b:c6:38:63:
                    5d:44:e1:b9:8e:a1:97:92:fe:5d:32:c1:f8:47:44:
                    f7:b2:47:db:6e:02:4c:6b:a7:8a:4e:c6:67:d0:ef:
                    1d:63:63:61:d8:0f:66:76:ba:82:77:e2:63:e5:8f:
                    6c:57:04:b3:a0:35:9d:41:d1:04:30:4d:6b:1d:b1:
                    10:74:f3:80:fb:d9:12:d7:de:1b:59:db:3d:6b:55:
                    90:75:da:88:69:19:5a:1a:10:d5:61:2d:3a:34:d8:
                    ed:c2:aa:d3:4c:2c:77:db:02:92:b4:00:da:6a:b6:
                    03:96:3c:59:ef:f5:67:41:b8:66:f9:ba:0e:25:0d:
                    c4:74:98:f7:b4:40:9b:f7:00:65:15:01:f0:12:1d:
                    8a:de:28:56:78:73:c5:5b:45:33:a9:ed:99:68:c1:
                    e0:89:b7:13:04:a8:fa:b5:88:36:1c:94:7e:52:1b:
                    ba:57:bd:79:f6:d0:a7:37:e4:33:9d:03:ff:7b:3c:
                    f6:76:17:df:ff:7b:1e:fb:cb:3a:c2:1f:27:2a:b8:
                    ab:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BB:0E:84:61:20:AF:81:16:57:61:1C:9A:CF:1A:FE:0B:F8:27:51
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/6LsOhGEgr4EWV2Ecms8a_gv4J1E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.91.211.0/24
                IPv6:
                  2a12:bc80::/29

    Signature Algorithm: sha256WithRSAEncryption
         68:a7:dc:02:87:c8:7f:ac:a9:1f:d5:fa:23:46:c3:1a:25:59:
         99:39:18:41:ab:31:80:ce:1a:fc:f0:82:7d:d7:fb:6b:c8:69:
         9c:e5:6e:36:87:75:06:ff:ab:2b:38:78:d7:fd:a7:82:66:e4:
         fa:cd:8e:82:de:36:c5:c1:55:ff:c8:e8:81:8f:6d:07:9f:28:
         29:7f:cd:48:0c:37:97:67:a2:c2:1b:02:62:3d:13:1b:4f:83:
         78:e3:35:d6:17:2e:1d:6e:2b:6c:9e:26:c6:09:ae:4a:4e:15:
         c9:7d:1a:77:91:39:36:a5:b2:e1:57:01:c7:bb:cd:6c:b1:d7:
         71:a1:0b:79:d1:cf:7f:5b:ab:8d:3e:8c:95:c3:83:ec:b0:1e:
         0a:fc:04:14:d6:15:b9:3b:cd:55:fe:6f:fc:80:e5:7d:0e:46:
         c7:11:97:8c:53:97:61:50:e6:92:9f:36:f0:bb:13:29:0f:6d:
         5a:58:5c:07:98:81:c6:a6:07:7c:37:f4:e3:ed:d7:41:dc:14:
         36:ae:93:9f:cf:03:3f:b5:29:1d:dd:15:51:c0:47:6a:01:3a:
         fc:71:bb:f3:e3:31:5d:7c:e5:5a:36:17:07:45:f7:0e:75:e2:
         95:44:56:11:6d:93:74:58:6b:a5:ae:b2:39:f4:20:34:2d:9d:
         05:87:db:40
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzDtuNaZCGIdjl5FqTtUlefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGJiMGU4NDYxMjBhZjgxMTY1NzYxMWM5YWNmMWFmZTBiZjgyNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVtsQeEXU/k02+AGhTWM6BlW/ost
SCDyH6Up28ZQAEJSZBZc3i2JOuWcwHs6IT90dcadDvyEOBvGOGNdROG5jqGXkv5d
MsH4R0T3skfbbgJMa6eKTsZn0O8dY2Nh2A9mdrqCd+Jj5Y9sVwSzoDWdQdEEME1r
HbEQdPOA+9kS194bWds9a1WQddqIaRlaGhDVYS06NNjtwqrTTCx32wKStADaarYD
ljxZ7/VnQbhm+boOJQ3EdJj3tECb9wBlFQHwEh2K3ihWeHPFW0Uzqe2ZaMHgibcT
BKj6tYg2HJR+Uhu6V7159tCnN+QznQP/ezz2dhff/3se+8s6wh8nKrirywIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFOi7DoRhIK+BFldhHJrPGv4L+CdRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2U5OGJm
MC1jNzhhLTQzYjctYTY2MS0yNGRlZDY3MDg2YjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvZTk4YmYw
LWM3OGEtNDNiNy1hNjYxLTI0ZGVkNjcwODZiNC8xLzZMc09oR0VncjRFV1YyRWNt
czhhX2d2NEoxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAUFvTMA0EAgACMAcDBQMqEryAMA0GCSqGSIb3
DQEBCwUAA4IBAQBop9wCh8h/rKkf1fojRsMaJVmZORhBqzGAzhr88IJ91/tryGmc
5W42h3UG/6srOHjX/aeCZuT6zY6C3jbFwVX/yOiBj20Hnygpf81IDDeXZ6LCGwJi
PRMbT4N44zXWFy4dbitsnibGCa5KThXJfRp3kTk2pbLhVwHHu81ssddxoQt50c9/
W6uNPoyVw4PssB4K/AQU1hW5O81V/m/8gOV9DkbHEZeMU5dhUOaSnzbwuxMpD21a
WFwHmIHGpgd8N/Tj7ddB3BQ2rpOfzwM/tSkd3RVRwEdqATr8cbvz4zFdfOVaNhcH
RfcOdeKVRFYRbZN0WGulrrI59CA0LZ0Fh9tA
-----END CERTIFICATE-----
Generated at Thu Feb 8 19:53:58 2024 by rpki-client on console-ams.rpki-client.org