Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p24EU-JBhqxIlkESRjDjdReqIuQ.cer
File:                     p24EU-JBhqxIlkESRjDjdReqIuQ.cer (raw, json)
Hash identifier:          V1RR575rftoPvJL8h49AaMpmJRrg1G6s+0GRIiN+TMo=
Subject key identifier:   A7:6E:04:53:E2:41:86:AC:48:96:41:12:46:30:E3:75:17:AA:22:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C68800D2881B21F225F77F8C8AB62918F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/p24EU-JBhqxIlkESRjDjdReqIuQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 13:24:31 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.3.12.0/24
                          IP: 2a14:3680::/29

Validation:               Failed, certificate revoked on Fri 15 Dec 2023 14:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:68:80:0d:28:81:b2:1f:22:5f:77:f8:c8:ab:62:91:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 14 13:24:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a76e0453e24186ac489641124630e37517aa22e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:d8:83:66:9d:f6:84:4d:33:27:31:c6:b7:
                    7e:cb:4c:2c:86:a1:b2:fd:75:60:5e:e5:97:0b:07:
                    e5:72:79:55:8c:40:ae:86:be:7d:c7:ea:f9:96:c4:
                    85:c4:31:6c:55:16:43:b6:f0:0b:07:7f:95:4d:fe:
                    51:7d:5f:50:8a:28:f7:3c:08:9c:e3:48:b5:1e:0b:
                    79:e2:f7:b8:e1:3a:88:19:67:31:14:f9:a3:d7:3a:
                    e4:b5:1e:07:74:01:7a:07:d1:f4:88:c2:f6:9f:ec:
                    9d:4a:ba:da:92:3c:bc:3a:63:10:63:1f:18:e1:be:
                    5a:34:b3:f7:c7:4e:ac:15:ae:65:e9:3a:8c:32:f9:
                    ee:9d:8f:8e:27:96:86:db:ce:f1:98:a6:6f:c4:b6:
                    93:17:8c:0b:70:1f:76:90:3e:7d:e0:60:92:51:19:
                    45:f1:75:67:f6:b7:80:be:0b:3f:52:ab:44:89:af:
                    35:ca:ce:18:33:16:e4:c4:69:70:08:b9:f9:60:19:
                    3f:d8:4a:63:50:e5:ea:d0:b2:b3:a7:76:0b:bb:b9:
                    d6:28:c3:84:c3:94:0f:6b:05:89:46:48:90:db:f6:
                    2b:80:62:5d:c2:c3:13:00:60:94:77:77:ce:67:11:
                    ab:38:68:8f:a1:f9:50:77:fc:36:e4:1c:86:f8:3e:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6E:04:53:E2:41:86:AC:48:96:41:12:46:30:E3:75:17:AA:22:E4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/p24EU-JBhqxIlkESRjDjdReqIuQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.12.0/24
                IPv6:
                  2a14:3680::/29

    Signature Algorithm: sha256WithRSAEncryption
         39:80:24:21:2a:07:dc:b2:04:d8:65:63:4d:1a:41:5c:cc:96:
         e6:d9:32:55:e1:b9:de:b6:db:23:fb:05:88:16:a2:55:13:b4:
         f6:d7:37:1c:30:5d:be:71:bb:96:c6:0a:b2:b8:a3:34:77:f3:
         ea:03:f9:61:81:be:4e:23:ea:8b:80:fe:69:cd:72:11:25:97:
         76:33:6f:0e:9f:5d:3e:4c:28:5d:a2:49:97:1c:c1:fc:ff:2f:
         19:d2:aa:c1:19:a9:61:c0:86:80:45:d8:8d:40:41:04:93:98:
         a2:7a:f6:b5:c6:e6:ff:df:e0:d6:9c:cf:d6:b6:ed:e6:f9:39:
         58:fe:c9:7a:0f:07:1f:21:a4:e6:8a:b5:d0:6c:fe:90:e8:80:
         76:50:ba:eb:ec:31:26:6e:5b:93:af:47:27:a4:7d:c1:47:dd:
         0b:ab:43:db:cf:72:bd:78:c4:b8:5e:b5:14:e6:4a:0f:dd:dd:
         bd:3b:62:e4:24:9e:8d:a6:2b:f0:a3:45:55:95:43:45:eb:ca:
         3a:4c:30:80:a5:2e:06:0a:7f:2b:69:a7:db:95:09:fa:09:a2:
         bf:24:4d:63:43:62:55:3d:db:47:03:74:db:72:ce:1f:ba:8f:
         20:d5:03:a6:6c:b7:72:07:01:cc:f3:11:a2:70:78:32:d2:38:
         cd:a2:54:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:41 2024 by rpki-client on console-fra.rpki-client.org