Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
File:                     jgLuuAftAReViBxh9nHaBBktLEk.cer (raw, json)
Hash identifier:          L+cyxtCqLIESD8HW7Yy/7fb/S2xNonOxDpBUn8y7C9c=
Subject key identifier:   8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B8B2855C6E2F2665E01069D86E2E8BE49
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Nov 2023 13:52:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.21.0/24

Validation:               Failed, certificate revoked on Mon 13 Nov 2023 10:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8b:28:55:c6:e2:f2:66:5e:01:06:9d:86:e2:e8:be:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  1 13:52:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e02eeb807ed011795881c61f671da04192d2c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:8e:58:5a:96:26:b2:77:42:f2:f5:18:2a:
                    9b:25:9c:80:c7:4a:9e:8b:f7:26:93:ed:d3:cb:1d:
                    21:33:15:53:35:22:a2:e3:bd:7c:77:04:88:00:35:
                    fa:e1:9e:ec:85:ab:bd:c5:f5:5a:19:0a:9e:58:31:
                    85:90:87:ab:d4:dd:13:03:40:6c:c2:7b:62:2f:ae:
                    70:bd:4a:cf:cd:65:ef:5c:ed:b2:62:1c:99:0b:e0:
                    04:fe:4b:62:ae:81:d4:2d:8f:33:c6:53:9f:78:e4:
                    3f:3c:bb:3c:84:90:4e:f3:60:47:be:4a:3c:63:f5:
                    33:e4:44:50:58:28:39:4f:a1:3c:5f:9e:ac:9d:87:
                    d3:70:6c:4c:43:96:36:ab:33:05:bf:a0:ff:60:0a:
                    af:54:c4:ca:0f:54:2a:4b:b0:a5:33:35:64:9c:78:
                    2a:c2:b2:c7:86:34:f4:4b:db:ff:bc:08:72:ea:6e:
                    80:5c:1e:63:c0:93:a8:e0:2f:bc:13:ac:3a:29:8d:
                    77:c2:3e:16:42:e9:ba:07:8b:ba:ed:9a:5f:2d:b2:
                    5f:2a:cd:41:30:ee:d5:1f:71:66:0f:81:3f:ce:61:
                    77:8a:ee:fd:da:e2:6a:2f:24:a3:9d:d8:cf:c9:a1:
                    eb:f4:97:4b:a7:4e:81:73:21:4c:b1:6b:b5:31:19:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:44:1f:3f:91:3e:8c:92:8a:81:3b:37:0d:6c:7b:95:8f:68:
         0e:05:4f:b8:4c:98:30:76:94:06:c1:81:c6:e4:da:a7:75:67:
         68:b4:80:5b:77:18:a8:1f:7c:0b:78:11:4a:18:66:a5:2f:be:
         22:d7:19:b9:cf:c1:cf:aa:b6:22:20:17:f2:e2:06:d6:7f:dd:
         a6:dc:1f:05:c1:4a:ed:7f:59:d1:15:e4:38:64:2d:cd:91:86:
         ac:21:10:a7:e1:2e:29:b0:59:b0:27:f4:4e:94:ec:48:9d:d8:
         2f:6f:c0:c3:e5:a5:34:3d:33:20:5b:dd:32:8c:e9:57:b9:4c:
         7a:82:c2:07:9f:c9:a5:9a:0b:2b:32:7a:9d:06:0d:4a:4b:93:
         de:44:23:24:43:e4:32:db:27:86:d1:a5:a9:4a:75:71:4d:6f:
         e2:78:50:a4:1a:f5:cb:5a:5e:e3:1f:98:0a:84:d3:f6:0c:62:
         d3:c8:2b:dc:e6:54:f2:4d:47:df:97:37:aa:3f:f5:4f:ab:dd:
         24:41:39:5b:6b:74:93:46:72:c9:44:8d:e0:1b:41:a0:dd:4e:
         b3:58:a7:7f:b1:33:a5:35:40:e1:04:57:81:b0:62:34:c0:5a:
         9e:88:2f:87:92:53:5a:e5:d4:7d:36:62:04:d6:06:05:c7:c1:
         8a:db:54:ce
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYuLKFXG4vJmXgEGnYbi6L5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMTAxMTM1MjM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTAyZWViODA3ZWQwMTE3OTU4ODFjNjFmNjcxZGEwNDE5MmQyYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryWOWFqWJrJ3QvL1GCqbJZyAx0qe
i/cmk+3Tyx0hMxVTNSKi4718dwSIADX64Z7shau9xfVaGQqeWDGFkIer1N0TA0Bs
wntiL65wvUrPzWXvXO2yYhyZC+AE/ktiroHULY8zxlOfeOQ/PLs8hJBO82BHvko8
Y/Uz5ERQWCg5T6E8X56snYfTcGxMQ5Y2qzMFv6D/YAqvVMTKD1QqS7ClMzVknHgq
wrLHhjT0S9v/vAhy6m6AXB5jwJOo4C+8E6w6KY13wj4WQum6B4u67ZpfLbJfKs1B
MO7VH3FmD4E/zmF3iu792uJqLySjndjPyaHr9JdLp06BcyFMsWu1MRm8aQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFI4C7rgH7QEXlYgcYfZx2gQZLSxJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzNiZDVl
Mi00ZjZiLTRhOTgtYjQwNi0xNjIzMTI4ZmY2NTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvM2JkNWUy
LTRmNmItNGE5OC1iNDA2LTE2MjMxMjhmZjY1MS8xL2pnTHV1QWZ0QVJlVmlCeGg5
bkhhQkJrdExFay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAkhMVMA0GCSqGSIb3DQEBCwUAA4IBAQBvRB8/
kT6MkoqBOzcNbHuVj2gOBU+4TJgwdpQGwYHG5NqndWdotIBbdxioH3wLeBFKGGal
L74i1xm5z8HPqrYiIBfy4gbWf92m3B8FwUrtf1nRFeQ4ZC3NkYasIRCn4S4psFmw
J/ROlOxIndgvb8DD5aU0PTMgW90yjOlXuUx6gsIHn8mlmgsrMnqdBg1KS5PeRCMk
Q+Qy2yeG0aWpSnVxTW/ieFCkGvXLWl7jH5gKhNP2DGLTyCvc5lTyTUfflzeqP/VP
q90kQTlba3STRnLJRI3gG0Gg3U6zWKd/sTOlNUDhBFeBsGI0wFqeiC+HklNa5dR9
NmIE1gYFx8GK21TO
-----END CERTIFICATE-----