Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0CDh0pos-Lxy5pyxaKQE9iv71-Q.cer
File:                     0CDh0pos-Lxy5pyxaKQE9iv71-Q.cer (raw, json)
Hash identifier:          diDc3xF5EE3XFNqIBo1M6XTMmM0oAd8lTpWRkxQ545s=
Subject key identifier:   D0:20:E1:D2:9A:2C:F8:BC:72:E6:9C:B1:68:A4:04:F6:2B:FB:D7:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194CE18D5E6F858559701B02852F23440B6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/88/b74ffb-0f97-4a29-8072-8c7210b4bd8d/1/0CDh0pos-Lxy5pyxaKQE9iv71-Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/88/b74ffb-0f97-4a29-8072-8c7210b4bd8d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 03 Feb 2025 23:15:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212963
Validation:               Failed, certificate revoked on Mon 03 Feb 2025 23:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ce:18:d5:e6:f8:58:55:97:01:b0:28:52:f2:34:40:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  3 23:15:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d020e1d29a2cf8bc72e69cb168a404f62bfbd7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:ed:aa:13:69:22:ab:cc:8b:31:88:86:47:
                    e5:ae:4f:7e:c8:22:09:7a:04:c9:79:1d:66:97:af:
                    01:10:b2:81:3f:0e:50:0f:ef:fb:c0:a7:46:a0:61:
                    ae:e8:a2:48:f3:eb:8c:26:da:e5:3e:6e:aa:7c:7e:
                    fd:f8:a7:0a:27:3c:09:aa:43:49:86:be:dc:d2:20:
                    48:4b:89:69:d9:cb:0a:8c:f4:2b:ff:71:c3:5d:3f:
                    27:41:17:f0:4a:b5:6b:e6:30:27:49:97:e7:1e:1c:
                    cd:0a:02:44:8a:1e:78:3f:ba:fc:54:09:e0:02:aa:
                    70:b3:69:65:44:ba:12:7c:d6:a9:26:e6:4a:fe:7e:
                    1d:68:d7:13:5a:4e:5d:a3:78:fc:85:aa:12:30:99:
                    a7:e7:ff:13:e6:91:e0:4e:a0:2a:7b:b2:65:51:60:
                    95:82:7c:81:57:36:78:99:73:50:c7:65:65:ac:60:
                    37:44:9d:bc:8a:f8:e8:17:cf:9e:33:47:cb:c3:e4:
                    59:5d:3b:7a:c4:74:cb:e1:ff:45:c8:4f:74:f1:18:
                    d8:f3:4a:8a:96:a0:48:c6:3a:0a:dc:e4:ae:f5:0e:
                    e2:4f:4b:a4:da:2a:86:c9:c0:78:bf:af:70:d0:7c:
                    5e:30:d4:d9:87:3c:09:75:f4:89:e7:69:c7:f0:76:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:20:E1:D2:9A:2C:F8:BC:72:E6:9C:B1:68:A4:04:F6:2B:FB:D7:E4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74ffb-0f97-4a29-8072-8c7210b4bd8d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74ffb-0f97-4a29-8072-8c7210b4bd8d/1/0CDh0pos-Lxy5pyxaKQE9iv71-Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212963

    Signature Algorithm: sha256WithRSAEncryption
         9e:37:7f:11:dc:be:91:7c:4a:a4:7b:8f:9c:3f:20:ce:32:ca:
         3f:2a:0c:b1:f3:23:c3:3e:99:8a:53:16:57:97:88:fe:90:5f:
         93:7c:19:8d:29:7b:22:22:6a:72:3a:2e:41:91:ac:8d:f8:50:
         9c:ee:8c:b7:5a:c7:48:9a:7d:96:42:6a:94:eb:65:93:87:43:
         24:bd:3c:32:34:09:08:0a:c8:6e:68:44:ea:9f:57:fd:51:3a:
         a1:1d:b8:f8:22:d1:ce:00:d7:70:e4:23:b8:86:f6:8c:26:d3:
         57:ca:3a:38:12:ce:b2:59:5d:e2:d2:1b:3e:88:b7:39:7d:b9:
         41:fb:a6:73:3a:66:aa:72:85:90:8c:dd:7c:6f:36:cd:41:0d:
         cd:23:20:2c:d4:4a:28:7d:37:d8:30:3b:39:fe:e0:73:71:09:
         e9:21:5f:f9:9e:55:31:53:55:28:6a:ee:67:da:e0:41:af:81:
         f0:43:f1:6f:e1:0d:8c:51:71:5f:94:ef:57:df:00:43:a0:ec:
         4a:e4:37:0a:d8:53:b2:47:41:d3:0b:d3:33:0e:b5:c1:fb:ab:
         0f:7a:2e:85:cf:0e:a6:09:20:3d:f3:88:9a:4b:d2:8e:9f:5b:
         4e:05:9f:4b:18:ad:f9:9c:2e:4c:c3:34:b5:cb:b1:ce:9a:ca:
         55:ba:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:17:32 2025 by rpki-client