Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
File:                     EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer (raw, json)
Hash identifier:          OAoL3rXsXYaau+wJFTj9aAwXaCUaDpB08ojmtiUdFps=
Subject key identifier:   11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B195CDBB6824C123C40A42DF0954F24EF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 10 Oct 2023 11:33:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 48130
                          AS: 216190
                          IP: 185.142.52.0/22
                          IP: 193.177.0.0/24
                          IP: 193.177.162.0/24
                          IP: 193.177.182.0/24
                          IP: 193.178.0.0/24
                          IP: 2a07:28c0::/29
                          IP: 2a0f:9240::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:19:5c:db:b6:82:4c:12:3c:40:a4:2d:f0:95:4f:24:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 10 11:33:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11466326406436e31478b7bca2dda16c96d5a964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:cb:df:67:aa:9d:d1:21:ce:2c:db:0b:c2:
                    52:72:ea:aa:65:8f:3f:a5:c0:00:5c:26:f1:d8:90:
                    1c:07:e1:27:fd:4b:d6:59:5b:05:41:b1:86:a1:f7:
                    b5:28:bc:43:cf:39:eb:20:fc:69:33:86:e5:53:88:
                    d8:d0:35:d8:01:52:46:03:c9:96:22:30:38:15:a2:
                    3c:da:92:c2:5b:58:16:8d:74:86:88:5b:fa:53:8d:
                    97:29:57:b1:66:ab:92:90:0e:81:4b:34:89:12:38:
                    49:db:61:97:6a:32:16:e4:6b:7c:ae:57:a1:e3:8d:
                    8e:f2:29:b3:04:f5:30:d5:e5:d5:8b:9a:0b:83:41:
                    81:9b:36:06:59:2a:7e:55:c4:d4:1c:02:34:5f:56:
                    9e:32:d9:68:04:b7:d7:55:d5:88:ce:ec:08:62:ef:
                    be:42:7c:bd:3a:d6:6a:52:a4:0f:39:77:fe:4d:c4:
                    28:81:74:fc:87:c6:04:57:5f:d9:86:09:5c:b2:fe:
                    4e:f6:da:1b:88:8c:93:ee:b1:f2:b3:8a:86:1b:d2:
                    e8:4b:cb:b5:65:32:30:b1:2f:12:ca:06:19:08:fc:
                    8f:bd:32:f4:47:0d:3e:34:3e:87:53:8d:a6:6d:83:
                    f4:a9:c0:7e:9d:7c:11:e2:f2:92:1b:3c:bc:a4:62:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.52.0/22
                  193.177.0.0/24
                  193.177.162.0/24
                  193.177.182.0/24
                  193.178.0.0/24
                IPv6:
                  2a07:28c0::/29
                  2a0f:9240::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48130
                  216190

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:d8:69:be:31:2e:21:9e:f4:74:74:b3:eb:fa:1f:1c:b6:
         ba:64:aa:bf:38:29:58:03:fb:d3:02:9f:12:60:8f:ec:92:bb:
         2a:ed:26:b0:a9:55:12:73:08:63:43:55:5b:80:57:85:d5:54:
         a1:ba:3f:a0:fd:c0:2c:7b:cb:74:13:5b:56:99:bb:f7:15:51:
         13:f8:45:43:00:de:f9:a1:3e:c0:c3:37:c4:77:b2:cd:87:2f:
         83:3f:2e:73:79:60:43:07:b3:0e:bc:d4:83:d9:3a:c5:d3:f2:
         f0:82:02:7d:07:fe:57:43:64:03:03:82:1e:58:86:ab:cc:c9:
         cf:78:79:86:e5:c0:ab:f3:ca:8b:23:04:b7:67:54:ef:bf:0b:
         97:42:7f:6c:cc:e0:80:d0:24:0f:b9:e5:a8:13:8b:63:83:75:
         87:da:0b:7f:f0:80:1a:d9:d8:ca:df:a0:68:35:d4:6f:10:fc:
         27:69:53:a7:ba:b6:88:b5:35:dc:60:d5:db:34:59:b6:70:bb:
         c2:b4:0f:e8:4a:1d:23:7c:6d:72:85:c9:c9:86:f8:fd:25:9e:
         52:a1:b0:ee:fc:39:8f:7b:2e:5f:dd:08:85:b9:8b:02:e6:5e:
         cf:20:46:c4:fe:60:5d:9e:b1:5c:fe:5f:a1:b1:0f:cf:42:8d:
         6e:9a:ba:82
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgISAYsZXNu2gkwSPECkLfCVTyTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMDEwMTEzMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTQ2NjMyNjQwNjQzNmUzMTQ3OGI3YmNhMmRkYTE2Yzk2ZDVhOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0krL32eqndEhzizbC8JScuqqZY8/
pcAAXCbx2JAcB+En/UvWWVsFQbGGofe1KLxDzznrIPxpM4blU4jY0DXYAVJGA8mW
IjA4FaI82pLCW1gWjXSGiFv6U42XKVexZquSkA6BSzSJEjhJ22GXajIW5Gt8rleh
442O8imzBPUw1eXVi5oLg0GBmzYGWSp+VcTUHAI0X1aeMtloBLfXVdWIzuwIYu++
Qny9OtZqUqQPOXf+TcQogXT8h8YEV1/Zhglcsv5O9tobiIyT7rHys4qGG9LoS8u1
ZTIwsS8SygYZCPyPvTL0Rw0+ND6HU42mbYP0qcB+nXwR4vKSGzy8pGJiswIDAQAB
o4IC0zCCAs8wHQYDVR0OBBYEFBFGYyZAZDbjFHi3vKLdoWyW1alkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzliYTY2
Yy1iZWU3LTQ0YzktODJlNS1kOTVhNTE1NWRkMDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvOWJhNjZj
LWJlZTctNDRjOS04MmU1LWQ5NWE1MTU1ZGQwMi8xL0VVWmpKa0JrTnVNVWVMZThv
dDJoYkpiVnFXUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF
BwEHAQH/BD4wPDAkBAIAATAeAwQCuY40AwQAwbEAAwQAwbGiAwQAwbG2AwQAwbIA
MBQEAgACMA4DBQMqByjAAwUDKg+SQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA
vAICAwNMfjANBgkqhkiG9w0BAQsFAAOCAQEASW3Yab4xLiGe9HR0s+v6Hxy2umSq
vzgpWAP70wKfEmCP7JK7Ku0msKlVEnMIY0NVW4BXhdVUobo/oP3ALHvLdBNbVpm7
9xVRE/hFQwDe+aE+wMM3xHeyzYcvgz8uc3lgQwezDrzUg9k6xdPy8IICfQf+V0Nk
AwOCHliGq8zJz3h5huXAq/PKiyMEt2dU778Ll0J/bMzggNAkD7nlqBOLY4N1h9oL
f/CAGtnYyt+gaDXUbxD8J2lTp7q2iLU13GDV2zRZtnC7wrQP6EodI3xtcoXJyYb4
/SWeUqGw7vw5j3suX90IhbmLAuZezyBGxP5gXZ6xXP5fobEPz0KNbpq6gg==
-----END CERTIFICATE-----
Generated at Mon Dec 18 08:47:18 2023 by rpki-client on console-fra.rpki-client.org