Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.cer
File:                     EZEJ8O9ZXqi2hYZIPbxvs8_lbys.cer (raw, json)
Hash identifier:          m0uiqD2a+B7+CRzRDuR69WNxCDnETVyFvLOSufjwjzo=
Subject key identifier:   11:91:09:F0:EF:59:5E:A8:B6:85:86:48:3D:BC:6F:B3:CF:E5:6F:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC4244C6772C46C31D7D0D515B93CE95A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:29:22 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 45.11.196.0/24
                          IP: 2a12:6980::/29

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 14:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:4c:67:72:c4:6c:31:d7:d0:d5:15:b9:3c:e9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=119109f0ef595ea8b68586483dbc6fb3cfe56f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:5c:d0:32:06:55:62:60:30:70:36:a1:1b:
                    c2:1c:93:bf:0d:95:78:2e:90:d6:ec:f9:59:d2:f1:
                    6b:43:13:4c:11:09:b8:ee:c4:f1:d2:d8:4b:c0:fb:
                    5d:28:ae:62:bb:4f:4f:c3:b2:08:2b:06:ed:fb:af:
                    76:cd:f4:a6:bf:3d:ea:f6:8b:2c:b9:66:e5:66:41:
                    f2:ae:ff:02:e3:0a:03:68:0a:2f:56:c9:d8:b0:96:
                    1c:3b:f8:53:9f:ca:18:e6:15:67:4a:64:b7:11:55:
                    f0:0a:84:73:8a:af:f5:de:78:9c:14:c7:b9:e3:94:
                    f7:f1:99:f7:65:70:b0:f1:d6:2c:3e:a5:54:4c:7a:
                    f4:10:92:a4:51:bd:9b:3e:55:25:a9:a3:bf:a5:be:
                    29:fc:c8:26:56:a4:ef:bd:a3:48:20:87:a9:b4:3a:
                    59:89:83:65:26:6e:60:5f:ff:5b:5a:60:fb:20:b9:
                    34:74:79:e3:5a:1f:a5:53:d3:6b:c4:4a:68:d5:72:
                    6c:f3:c8:ec:f7:7a:0a:fe:af:b3:b9:08:af:bb:9b:
                    04:d0:32:ea:d1:b1:22:c4:3f:a4:fa:c9:a8:75:4d:
                    b9:ca:bc:2a:ad:14:28:b4:bc:bf:a9:9a:5d:85:e6:
                    21:30:aa:fb:62:38:3d:8d:be:1e:2b:a6:f5:be:a6:
                    f0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:91:09:F0:EF:59:5E:A8:B6:85:86:48:3D:BC:6F:B3:CF:E5:6F:2B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.196.0/24
                IPv6:
                  2a12:6980::/29

    Signature Algorithm: sha256WithRSAEncryption
         84:d0:4c:ec:50:08:75:b8:d0:34:0b:c1:f2:76:be:3a:e7:41:
         70:99:f0:59:fe:05:20:1f:81:c8:d5:85:48:f5:61:8d:ae:b1:
         33:f0:47:6b:10:e9:ea:c6:06:b6:09:9b:6f:05:f2:d1:32:eb:
         1d:82:b4:5a:85:67:78:5c:5c:e3:e1:f8:0f:dc:be:6b:a5:be:
         99:2f:e1:10:34:79:d1:d7:01:7d:da:40:5d:23:6a:76:9f:10:
         60:21:1d:3f:2e:29:d9:e8:82:b8:e6:c2:f5:4a:2f:c8:83:2e:
         6b:02:ab:31:74:4f:b8:ad:d5:a7:c1:38:f3:87:58:96:9e:b0:
         b3:52:fc:df:f6:dd:d0:b9:02:d5:ad:dd:1f:da:e5:5c:84:a7:
         c5:b9:d4:51:90:52:7c:43:a4:0b:8c:2b:6a:53:68:87:43:07:
         29:a0:48:09:b2:ed:2e:c1:bb:39:04:66:5d:39:10:e5:3c:9f:
         c7:c7:8e:12:dc:b1:1a:e4:65:d2:e4:ef:1e:36:c7:da:9a:c6:
         c7:20:50:a6:ea:b7:51:5f:91:f9:7f:14:90:ff:32:74:30:4e:
         86:76:4e:4e:84:db:e3:b4:8a:1f:7e:d0:80:e5:2e:4a:8c:46:
         68:d1:0d:46:b9:5f:15:db:8c:d4:ee:c8:c7:57:84:d0:c3:b0:
         5a:b4:f1:b5
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzEJExncsRsMdfQ1RW5POlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTkxMDlmMGVmNTk1ZWE4YjY4NTg2NDgzZGJjNmZiM2NmZTU2ZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSxc0DIGVWJgMHA2oRvCHJO/DZV4
LpDW7PlZ0vFrQxNMEQm47sTx0thLwPtdKK5iu09Pw7IIKwbt+692zfSmvz3q9oss
uWblZkHyrv8C4woDaAovVsnYsJYcO/hTn8oY5hVnSmS3EVXwCoRziq/13nicFMe5
45T38Zn3ZXCw8dYsPqVUTHr0EJKkUb2bPlUlqaO/pb4p/MgmVqTvvaNIIIeptDpZ
iYNlJm5gX/9bWmD7ILk0dHnjWh+lU9NrxEpo1XJs88js93oK/q+zuQivu5sE0DLq
0bEixD+k+smodU25yrwqrRQotLy/qZpdheYhMKr7Yjg9jb4eK6b1vqbwbQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBGRCfDvWV6otoWGSD28b7PP5W8rMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzJhNTYy
My1mNWM2LTQzMTUtOGI3Yi0yNWY5MzM2ZjljNzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvMmE1NjIz
LWY1YzYtNDMxNS04YjdiLTI1ZjkzMzZmOWM3Ny8xL0VaRUo4TzlaWHFpMmhZWklQ
Ynh2czhfbGJ5cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQALQvEMA0EAgACMAcDBQMqEmmAMA0GCSqGSIb3
DQEBCwUAA4IBAQCE0EzsUAh1uNA0C8Hydr4650FwmfBZ/gUgH4HI1YVI9WGNrrEz
8EdrEOnqxga2CZtvBfLRMusdgrRahWd4XFzj4fgP3L5rpb6ZL+EQNHnR1wF92kBd
I2p2nxBgIR0/LinZ6IK45sL1Si/Igy5rAqsxdE+4rdWnwTjzh1iWnrCzUvzf9t3Q
uQLVrd0f2uVchKfFudRRkFJ8Q6QLjCtqU2iHQwcpoEgJsu0uwbs5BGZdORDlPJ/H
x44S3LEa5GXS5O8eNsfamsbHIFCm6rdRX5H5fxSQ/zJ0ME6Gdk5OhNvjtIofftCA
5S5KjEZo0Q1GuV8V24zU7sjHV4TQw7BatPG1
-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:21 2024 by rpki-client on console-fra.rpki-client.org