Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
File:                     EistL6i89fg2IQufSSEe5tCU0NI.cer (raw, json)
Hash identifier:          pvXde76VZARDOWlwT41858r9XeDHJAzhYpOcsUg3mFI=
Subject key identifier:   12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD10015EC65307A79C641C76D743229
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.170.65.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:00:15:ec:65:30:7a:79:c6:41:c7:6d:74:32:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:77:e6:54:58:af:bb:1a:71:73:28:8b:38:
                    08:dd:6a:7c:c4:89:7b:65:63:d3:70:75:65:8e:7b:
                    18:b5:f0:61:08:f2:27:0c:71:b4:40:c8:d6:c2:d7:
                    71:e8:17:3c:a5:6e:b4:1e:3a:2b:01:97:71:e1:71:
                    c9:1f:0c:80:1b:63:e1:78:4b:fc:ef:a2:fd:63:a1:
                    16:a4:5b:7f:a4:cc:5f:b0:0b:61:2f:42:62:65:e3:
                    10:00:14:5f:52:d7:1f:1d:35:e5:98:cc:40:7c:36:
                    58:63:68:2a:f1:49:d1:ae:48:75:27:0c:ac:6a:4b:
                    82:0b:e0:34:9e:24:ef:fe:c4:4b:16:77:80:f6:8d:
                    b1:de:61:f7:e9:65:a7:c4:b6:da:3d:64:bb:cc:85:
                    01:4f:c3:6b:23:6c:bb:1c:1f:70:0a:33:ac:8a:21:
                    9d:e5:2a:b7:26:88:35:04:8f:28:36:f1:b1:e9:d9:
                    26:ac:dd:ab:de:86:3b:79:9a:d3:25:3b:f8:d7:4f:
                    24:0f:c3:42:6d:b3:74:38:dc:ef:67:38:d6:d1:e9:
                    41:49:71:28:d4:dd:2a:3b:32:c4:15:5c:b4:08:26:
                    c3:b4:bc:32:3b:aa:5d:8f:3f:d3:8e:b3:5c:32:6d:
                    60:94:e8:1c:35:d0:3e:f1:26:55:cf:84:ea:91:f8:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:1f:17:33:8f:f7:87:ed:58:4e:57:6e:70:2f:7d:0f:a8:1c:
         70:00:42:9c:05:93:f1:75:ba:7d:ac:ba:f9:8c:62:d3:61:ae:
         22:87:6f:ab:88:b1:3f:a3:2b:e3:dd:75:28:7e:02:b6:78:33:
         a1:6b:1a:10:a4:3e:c2:80:54:94:a3:55:f3:fb:56:67:97:fb:
         64:87:24:5a:6b:a0:de:5c:c9:09:af:8e:0e:2c:00:49:f0:67:
         fd:0c:80:4b:d7:37:10:9e:0e:cf:04:87:eb:ff:71:8c:e6:31:
         1a:9a:56:66:16:71:84:6a:03:18:b9:7f:c8:0c:ba:21:76:72:
         28:a6:70:df:d2:51:cc:d5:37:58:6b:d1:81:70:9d:58:cf:04:
         67:46:78:b8:8e:58:dc:fd:5d:7a:88:7a:d5:a8:06:15:0b:1c:
         2b:2f:04:2f:74:4c:ca:1e:9b:84:c4:34:b0:d3:bd:10:93:8d:
         8e:ac:79:5f:9d:2e:d6:45:68:ca:d0:32:4e:f6:bc:a6:a9:c2:
         85:22:11:a9:8e:52:41:03:88:43:f4:f5:be:66:e8:8d:f3:60:
         da:1c:41:3a:85:92:d5:36:31:6b:fb:59:a3:7b:6b:a1:97:df:
         36:7d:b3:98:60:ba:3a:9f:2d:81:74:54:26:09:c6:4c:a2:ba:
         bc:db:6a:3a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVr0QAV7GUwennGQcdtdDIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjJiMmQyZmE4YmNmNWY4MzYyMTBiOWY0OTIxMWVlNmQwOTRkMGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVJ35lRYr7sacXMoizgI3Wp8xIl7
ZWPTcHVljnsYtfBhCPInDHG0QMjWwtdx6Bc8pW60HjorAZdx4XHJHwyAG2PheEv8
76L9Y6EWpFt/pMxfsAthL0JiZeMQABRfUtcfHTXlmMxAfDZYY2gq8UnRrkh1Jwys
akuCC+A0niTv/sRLFneA9o2x3mH36WWnxLbaPWS7zIUBT8NrI2y7HB9wCjOsiiGd
5Sq3Jog1BI8oNvGx6dkmrN2r3oY7eZrTJTv4108kD8NCbbN0ONzvZzjW0elBSXEo
1N0qOzLEFVy0CCbDtLwyO6pdjz/TjrNcMm1glOgcNdA+8SZVz4TqkfgJUQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBIrLS+ovPX4NiELn0khHubQlNDSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwL2Q1NDYw
ZS0wZGUxLTRhNzQtOTUxYi0zZTc3ZDU2N2NjYzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvZDU0NjBl
LTBkZTEtNGE3NC05NTFiLTNlNzdkNTY3Y2NjOC8xL0Vpc3RMNmk4OWZnMklRdWZT
U0VlNXRDVTBOSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuapBMA0GCSqGSIb3DQEBCwUAA4IBAQAjHxcz
j/eH7VhOV25wL30PqBxwAEKcBZPxdbp9rLr5jGLTYa4ih2+riLE/oyvj3XUofgK2
eDOhaxoQpD7CgFSUo1Xz+1Znl/tkhyRaa6DeXMkJr44OLABJ8Gf9DIBL1zcQng7P
BIfr/3GM5jEamlZmFnGEagMYuX/IDLohdnIopnDf0lHM1TdYa9GBcJ1YzwRnRni4
jljc/V16iHrVqAYVCxwrLwQvdEzKHpuExDSw070Qk42OrHlfnS7WRWjK0DJO9rym
qcKFIhGpjlJBA4hD9PW+ZuiN82DaHEE6hZLVNjFr+1mje2uhl982fbOYYLo6ny2B
dFQmCcZMorq822o6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:24 2023 by rpki-client on console-fra.rpki-client.org