Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eL6wfollqs5RD0Q1MkLJzE1Rojc.cer
File:                     eL6wfollqs5RD0Q1MkLJzE1Rojc.cer (raw, json)
Hash identifier:          RMEpqoXfSX6TGGroYuTVQCg0jI1pfhxjit/+vZwg0ss=
Subject key identifier:   78:BE:B0:7E:89:65:AA:CE:51:0F:44:35:32:42:C9:CC:4D:51:A2:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5001A21980A69D029BB81685B692742
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/eL6wfollqs5RD0Q1MkLJzE1Rojc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:29:27 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.198.153.0/24
                          IP: 2a12:ad80::/29

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 09:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:1a:21:98:0a:69:d0:29:bb:81:68:5b:69:27:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:29:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=78beb07e8965aace510f44353242c9cc4d51a237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:62:fe:a4:05:54:2a:78:1a:f0:c9:bd:bd:f2:
                    bb:c7:ef:ac:a2:e1:20:88:b0:98:c7:8c:29:6b:dd:
                    93:36:42:a8:3f:b9:ef:b6:21:9b:cc:a6:35:e4:27:
                    72:53:47:b7:bd:7f:6a:a2:32:1c:1d:64:6b:0b:48:
                    71:60:85:f3:37:94:1f:af:b9:2e:45:c7:af:12:e8:
                    f5:c0:57:71:d6:6c:a4:5f:0f:94:93:f0:95:82:c6:
                    f5:6c:d3:cd:2e:cf:21:6f:4b:e8:c7:59:a3:23:0b:
                    a0:f6:d6:d7:2b:81:d1:2e:14:da:f9:99:2a:82:79:
                    7d:f0:37:ae:af:08:3f:ed:0d:21:3d:76:dc:68:a6:
                    a7:db:1f:ce:f2:d1:33:c8:44:25:e0:26:63:a0:d8:
                    36:f6:ed:9c:58:ac:ca:74:76:88:c2:f6:67:1a:0a:
                    34:c0:ff:e8:3e:33:75:a8:89:e0:48:90:62:6b:dc:
                    42:42:27:1d:e9:82:76:3c:fb:cc:2c:bb:fa:00:68:
                    2b:f0:f5:26:44:9f:5c:83:65:f5:6f:65:89:f3:32:
                    75:a7:62:f7:11:dd:65:0b:00:f9:0e:6f:1e:80:bd:
                    11:25:c7:5e:6f:e8:8f:3c:a9:22:e7:3d:f0:01:87:
                    85:4e:d7:29:24:47:75:c0:d7:80:d0:11:04:5c:cb:
                    fa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BE:B0:7E:89:65:AA:CE:51:0F:44:35:32:42:C9:CC:4D:51:A2:37
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/eL6wfollqs5RD0Q1MkLJzE1Rojc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.198.153.0/24
                IPv6:
                  2a12:ad80::/29

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:72:84:ff:f9:22:6e:c1:55:17:2d:11:06:d6:c1:a5:09:
         79:68:3e:f0:f1:69:a6:7c:57:f6:24:52:62:e1:cb:87:68:30:
         ed:e3:23:eb:14:fc:cd:8f:64:02:3a:e1:40:e9:da:59:b2:fd:
         de:4d:de:57:39:8e:fe:db:a3:b3:d9:8f:6f:eb:66:43:19:f7:
         61:b7:69:12:57:d5:c6:3d:fd:c5:7d:60:1f:e8:38:83:b7:eb:
         2b:1d:b4:22:d3:4c:d4:27:de:8b:47:ec:e6:05:eb:fb:72:e8:
         7d:23:b3:d5:b4:8c:51:fd:c0:9c:c1:71:29:fb:f0:bc:9f:b0:
         15:4e:84:82:60:a0:0e:ad:a3:6c:0c:71:89:ac:39:ac:a8:ae:
         f4:54:a8:5f:cc:d7:76:dd:34:22:2d:fb:0c:e2:5f:df:7f:2b:
         e3:84:a1:5e:31:2e:f0:eb:03:5f:8d:c2:04:10:1b:fb:64:f1:
         4b:7a:c6:5f:4f:ae:11:b1:86:ab:23:a3:d1:ec:00:0f:f4:07:
         3b:f7:42:b1:49:40:f3:a9:f8:77:4e:53:eb:2f:46:74:19:03:
         a1:a7:b2:80:22:be:1c:2d:f2:db:71:94:6e:e0:91:3f:c6:a4:
         71:f9:68:62:03:60:92:49:cb:36:91:32:11:a6:7b:ab:d5:a0:
         a3:69:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:35 2024 by rpki-client on console-ams.rpki-client.org