Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eyUvEtskBrQp9XAOs46P3QsSAd8.cer
File:                     eyUvEtskBrQp9XAOs46P3QsSAd8.cer (raw, json)
Hash identifier:          YGzwoRJDQDlPXlTw+PSXjtsNk9r+B1DjN1KrTQuzORM=
Subject key identifier:   7B:25:2F:12:DB:24:06:B4:29:F5:70:0E:B3:8E:8F:DD:0B:12:01:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DBE7899A249DA4C74EAFF8FB178589
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/eyUvEtskBrQp9XAOs46P3QsSAd8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:29:32 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.201.30.0/24
                          IP: 2a12:7780::/29

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 14:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:db:e7:89:9a:24:9d:a4:c7:4e:af:f8:fb:17:85:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7b252f12db2406b429f5700eb38e8fdd0b1201df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:41:d0:61:f1:95:fb:78:c1:10:44:95:3f:
                    1d:87:5d:e9:4f:23:55:2a:c3:05:5a:28:2e:6b:79:
                    81:fe:b9:81:3e:a5:03:71:a0:33:9b:94:75:4a:8d:
                    27:b5:b6:5c:98:54:5c:ca:8d:7a:90:2b:fe:03:b8:
                    96:a7:1c:32:3f:a7:22:33:5a:62:3f:94:ae:ca:a9:
                    81:6f:66:b7:8e:07:d7:a4:1b:aa:8b:c0:e4:f5:e8:
                    38:94:b8:78:90:12:44:5e:57:6a:71:00:fa:54:d9:
                    1e:df:a9:43:d5:74:80:80:3b:8e:9a:c9:49:03:ff:
                    d3:bc:25:0b:3b:54:67:07:b7:fc:df:f9:11:7d:8c:
                    c1:94:df:cb:2f:18:78:77:7a:ec:83:d1:95:63:76:
                    9f:be:fd:93:52:3e:25:75:f9:2a:8e:d9:74:9b:0b:
                    8d:d7:30:65:8e:a1:b2:7c:14:a8:e8:ba:30:fc:66:
                    aa:b6:85:15:cf:2d:78:ed:77:bc:20:a5:4b:29:fa:
                    f2:1a:46:18:9d:c6:54:04:aa:fc:7f:21:ac:54:00:
                    c8:6c:b9:0f:5b:70:a9:ed:81:04:18:77:b4:4d:01:
                    44:a3:5f:04:6e:e8:98:d3:ad:5d:4c:65:4f:4b:54:
                    f9:54:cc:ba:8c:6c:c8:14:a8:06:6e:df:66:ee:7c:
                    c1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:25:2F:12:DB:24:06:B4:29:F5:70:0E:B3:8E:8F:DD:0B:12:01:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/eyUvEtskBrQp9XAOs46P3QsSAd8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.30.0/24
                IPv6:
                  2a12:7780::/29

    Signature Algorithm: sha256WithRSAEncryption
         2f:0c:77:a8:7b:c2:81:0e:bd:6e:a1:e9:41:b9:6c:13:a6:7c:
         8d:32:aa:b9:0d:e1:62:96:b0:2b:05:7f:91:bc:c8:fa:63:50:
         b5:95:ed:44:4f:24:da:22:d3:98:37:18:0c:09:3d:90:f9:f8:
         e4:ac:69:88:8c:72:1f:8c:c8:a3:03:b4:4b:13:cd:0e:e1:6e:
         e0:b9:cd:36:31:13:5c:4e:c2:25:65:d7:79:ea:45:f9:30:ad:
         2e:2d:cc:f3:8b:86:e4:73:2b:e8:40:e3:07:4d:46:df:a3:2a:
         12:36:8c:b4:c7:18:d2:9b:10:2f:95:53:21:1c:39:23:04:99:
         01:29:16:e7:7b:7c:10:ed:d8:92:1a:cf:db:78:11:7c:6b:25:
         2c:d5:46:81:e4:2d:13:32:ec:b3:55:55:bf:f7:0a:9b:04:16:
         41:ac:59:41:60:e1:25:7e:76:9c:4b:d4:11:29:37:da:ef:3f:
         00:e8:bb:31:60:7f:20:24:57:83:ea:c6:e1:90:fc:ee:5c:14:
         0a:e8:40:71:9e:ba:73:7a:53:fa:0b:f8:dd:89:fb:84:8b:dd:
         fd:f6:01:4d:24:6e:b6:00:cb:17:c1:85:55:28:11:ae:53:34:
         97:fa:6a:84:da:a5:9d:a8:12:5b:78:cb:4e:87:48:ef:f8:09:
         b7:20:09:3d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzF2+eJmiSdpMdOr/j7F4WJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjI1MmYxMmRiMjQwNmI0MjlmNTcwMGViMzhlOGZkZDBiMTIwMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXxB0GHxlft4wRBElT8dh13pTyNV
KsMFWigua3mB/rmBPqUDcaAzm5R1So0ntbZcmFRcyo16kCv+A7iWpxwyP6ciM1pi
P5SuyqmBb2a3jgfXpBuqi8Dk9eg4lLh4kBJEXldqcQD6VNke36lD1XSAgDuOmslJ
A//TvCULO1RnB7f83/kRfYzBlN/LLxh4d3rsg9GVY3afvv2TUj4ldfkqjtl0mwuN
1zBljqGyfBSo6Low/GaqtoUVzy147Xe8IKVLKfryGkYYncZUBKr8fyGsVADIbLkP
W3Cp7YEEGHe0TQFEo18EbuiY061dTGVPS1T5VMy6jGzIFKgGbt9m7nzB8wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHslLxLbJAa0KfVwDrOOj90LEgHfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2Q4NTU3
Yi04ZTgyLTQ3MjItODE0Ni03NzIxNWE2NTA4NzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvZDg1NTdi
LThlODItNDcyMi04MTQ2LTc3MjE1YTY1MDg3NS8xL2V5VXZFdHNrQnJRcDlYQU9z
NDZQM1FzU0FkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuckeMA0EAgACMAcDBQMqEneAMA0GCSqGSIb3
DQEBCwUAA4IBAQAvDHeoe8KBDr1uoelBuWwTpnyNMqq5DeFilrArBX+RvMj6Y1C1
le1ETyTaItOYNxgMCT2Q+fjkrGmIjHIfjMijA7RLE80O4W7guc02MRNcTsIlZdd5
6kX5MK0uLczzi4bkcyvoQOMHTUbfoyoSNoy0xxjSmxAvlVMhHDkjBJkBKRbne3wQ
7diSGs/beBF8ayUs1UaB5C0TMuyzVVW/9wqbBBZBrFlBYOElfnacS9QRKTfa7z8A
6LsxYH8gJFeD6sbhkPzuXBQK6EBxnrpzelP6C/jdifuEi9399gFNJG62AMsXwYVV
KBGuUzSX+mqE2qWdqBJbeMtOh0jv+Am3IAk9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:05 2024 by rpki-client on console-fra.rpki-client.org