Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.cer
File:                     EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.cer (raw, json)
Hash identifier:          sCsn/LBvyso4nnFGJxUJQ2aVaXNc+OgFiRCrE3p2G1U=
Subject key identifier:   12:AB:6E:54:C9:04:EB:32:69:58:57:CA:86:64:37:83:76:45:70:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C315A1CB5883A370E663964532C5F3407
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5a/a8064e-2c04-4441-965d-e45423f27ed9/1/EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5a/a8064e-2c04-4441-965d-e45423f27ed9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 03 Dec 2023 20:23:58 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 215923

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:31:5a:1c:b5:88:3a:37:0e:66:39:64:53:2c:5f:34:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  3 20:23:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12ab6e54c904eb32695857ca86643783764570aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:02:c1:73:b0:ec:0f:b5:dc:21:7b:e2:d9:
                    ac:00:b5:1e:18:f5:54:91:ef:2c:a3:fd:6a:0b:f2:
                    c8:30:28:62:bc:d8:8c:af:40:9b:35:79:a7:bb:96:
                    50:96:19:c8:7a:e2:d4:99:d3:98:1e:11:a5:0f:0e:
                    15:a7:03:46:af:66:9c:4c:63:ac:2e:34:8e:06:fd:
                    22:9c:0d:38:83:8d:d6:fd:6a:fd:c8:5c:ef:29:38:
                    60:fd:a8:d4:bd:be:1a:16:f5:31:60:ad:86:d7:aa:
                    f9:74:76:2e:63:22:71:b5:5c:75:09:b8:3f:8f:42:
                    7b:84:79:17:32:72:3f:59:9e:d5:61:31:47:6c:4d:
                    95:89:60:44:10:c8:61:85:04:05:62:60:60:14:4e:
                    cb:49:be:57:6c:d6:fd:ed:c1:ac:e5:f4:b1:d8:d1:
                    8a:f6:45:01:f3:e6:70:05:f8:04:09:6f:46:63:3a:
                    9c:48:99:b5:dd:16:a9:ef:75:1e:fd:59:94:77:33:
                    70:3f:b8:44:4c:92:30:e0:eb:01:17:39:99:73:88:
                    fa:f5:60:bf:16:1f:c2:38:b1:61:8b:dd:fd:2b:27:
                    a1:d6:af:44:b5:a1:14:5c:29:7b:2a:9b:ba:e2:f5:
                    e9:a1:ba:3d:72:5d:50:67:e4:64:1f:02:2b:74:36:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AB:6E:54:C9:04:EB:32:69:58:57:CA:86:64:37:83:76:45:70:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a8064e-2c04-4441-965d-e45423f27ed9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a8064e-2c04-4441-965d-e45423f27ed9/1/EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215923

    Signature Algorithm: sha256WithRSAEncryption
         9b:66:4a:55:92:b1:26:25:54:d4:c1:6f:51:72:e4:3a:27:50:
         97:b6:fa:09:bd:04:2d:77:ce:14:12:7e:c1:8f:39:28:0c:af:
         65:f6:cc:d3:61:65:eb:8e:ac:a1:1d:48:b4:d1:ab:7e:99:af:
         f5:01:15:36:44:56:c3:a4:3c:ee:e5:4a:1b:58:6c:7b:5e:e5:
         76:3d:2d:8b:58:a0:e0:11:ec:4e:dd:53:d7:a0:69:2e:cf:87:
         ad:94:59:76:30:70:d4:db:58:a9:0c:e9:32:2e:af:28:cb:30:
         96:87:49:c7:bd:63:cb:9f:cc:62:39:b8:e1:7b:40:2d:38:ab:
         fe:71:63:0a:cd:95:ac:db:b0:ef:88:0a:08:21:cf:78:7c:4e:
         f5:28:a5:49:44:68:fe:bd:76:ab:ee:f2:ce:c9:01:e9:d8:00:
         7e:eb:75:1e:71:37:96:2a:80:89:61:07:fd:50:08:7d:78:ce:
         56:95:3e:d6:06:04:a7:b3:fc:96:99:b2:22:07:6b:cc:32:db:
         6b:dc:cb:ff:74:fd:90:92:f7:bd:d2:4e:ee:8d:68:aa:62:a6:
         fb:26:0a:40:a5:b3:84:40:0f:ec:de:52:af:66:a8:46:4d:8b:
         f1:9c:78:40:2d:df:5b:55:b3:d0:20:2e:b4:df:76:50:de:d1:
         8f:d7:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net