Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eqGomGyJZ2Gvx_j4gevDBCDodms.cer
File:                     eqGomGyJZ2Gvx_j4gevDBCDodms.cer (raw, json)
Hash identifier:          IGVf6a1xe+5pdA4Ak/evPPbcO20iWt9KD9SyGgqyeEs=
Subject key identifier:   7A:A1:A8:98:6C:89:67:61:AF:C7:F8:F8:81:EB:C3:04:20:E8:76:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BC7379635EE0D9F4CA404564502A00
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/eqGomGyJZ2Gvx_j4gevDBCDodms.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:33:39 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 193.31.240.0/21

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 12:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:73:79:63:5e:e0:d9:f4:ca:40:45:64:50:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:33:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7aa1a8986c896761afc7f8f881ebc30420e8766b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:74:89:0c:7d:ce:f3:5b:0b:69:ab:02:a7:
                    f1:ad:3d:c4:5e:26:f4:27:73:36:84:1b:58:60:1b:
                    23:31:d2:40:c4:e5:57:14:b7:a5:22:f9:f0:b3:f6:
                    d4:ca:62:18:20:49:e9:61:f5:eb:df:b4:5e:e2:16:
                    4d:5a:39:32:b6:72:44:c8:2f:f3:b3:f6:d1:79:0f:
                    50:b7:f6:a8:da:3e:dd:f3:a4:80:28:14:76:86:8c:
                    36:08:ef:74:af:6d:f6:2a:ae:63:8f:b9:23:e3:a0:
                    52:82:38:e8:1b:77:2b:12:79:ec:95:ec:0e:8c:62:
                    80:4d:d3:91:bd:18:8b:03:05:b4:aa:6f:5c:df:26:
                    7b:fb:c3:b3:35:4e:4a:39:d0:9b:ae:aa:a4:c7:1b:
                    ef:2e:07:cd:82:62:7b:9f:ce:18:b7:94:30:c1:fc:
                    0e:a7:c5:2d:a0:91:bc:3c:cc:db:f3:fd:1e:bc:0e:
                    ba:66:a1:4e:6e:63:0e:b7:7f:cb:c4:d6:35:82:46:
                    eb:54:7a:9d:03:49:cc:6e:aa:3d:fb:ee:4f:6b:b2:
                    98:12:f1:32:10:c6:ef:0f:01:1a:a0:82:89:52:c2:
                    e1:ac:53:56:cb:5b:b5:70:a0:99:09:fe:76:df:41:
                    33:40:79:d1:48:cd:5b:a6:aa:68:11:d3:41:2d:6b:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A1:A8:98:6C:89:67:61:AF:C7:F8:F8:81:EB:C3:04:20:E8:76:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/eqGomGyJZ2Gvx_j4gevDBCDodms.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.31.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:e3:a0:6e:a8:0e:0a:68:5a:9a:88:59:82:15:21:4b:04:
         a1:54:b8:ac:c1:53:44:11:6d:6a:8e:ee:34:69:b0:23:df:03:
         44:f3:73:3a:a4:77:68:1f:89:b8:f8:de:ec:3f:90:24:b0:75:
         d1:16:b1:58:00:a3:86:00:bf:38:d3:ba:89:bf:34:8f:ef:4e:
         4a:39:8d:9b:31:b1:44:29:ba:45:20:9e:f0:4d:c7:eb:2f:01:
         45:30:59:e4:ab:f6:35:42:93:46:e9:16:0a:a3:83:0a:39:2e:
         44:e1:e7:e4:2f:20:ce:0d:87:4f:3b:31:5d:90:3e:88:07:5d:
         84:d0:77:90:d5:92:37:72:43:71:09:58:b3:61:47:cb:8f:d5:
         39:f3:a0:05:ed:a4:7b:88:c2:aa:cc:d2:0a:43:95:e1:53:6a:
         dc:21:0e:2b:e2:6c:f7:f6:98:3a:37:a4:0d:fe:fa:af:75:cd:
         8c:dd:c7:ee:fa:8b:ad:25:72:7e:19:53:9a:95:b5:d1:8a:4c:
         cb:f3:73:ce:b6:92:f2:00:f7:dd:0b:3e:3b:c2:71:2f:fd:e4:
         82:26:c6:8a:9c:ea:58:67:36:83:c3:0d:80:0d:b6:fb:6c:84:
         76:39:d7:f2:cd:e2:54:ae:47:a6:5b:58:7d:d6:8f:7d:01:0f:
         53:1e:2c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:48 2024 by rpki-client on console-ams.rpki-client.org