Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8UfZKpvp-zI8Ds4YTgLT7eGg_eQ.cer
File:                     8UfZKpvp-zI8Ds4YTgLT7eGg_eQ.cer (raw, json)
Hash identifier:          ANTOSSxluI4W74+31XPoapqlP3IszTjDFmpAzAVqqpw=
Subject key identifier:   F1:47:D9:2A:9B:E9:FB:32:3C:0E:CE:18:4E:02:D3:ED:E1:A0:FD:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D6560A503C774C10C0F04679406861
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/141e46-8aa9-4143-9786-8fbcbc2ba271/1/8UfZKpvp-zI8Ds4YTgLT7eGg_eQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/141e46-8aa9-4143-9786-8fbcbc2ba271/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57450
Validation:               Failed, certificate revoked on Wed 08 Jan 2025 11:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:56:0a:50:3c:77:4c:10:c0:f0:46:79:40:68:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f147d92a9be9fb323c0ece184e02d3ede1a0fde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:44:a2:2f:98:80:f4:f2:e6:7a:f8:29:8e:
                    fa:94:dd:b3:bd:22:f4:f6:3c:8d:22:43:60:36:c7:
                    52:b7:bb:c3:a1:38:b4:05:19:d4:9a:0e:22:25:05:
                    7d:74:43:9c:2a:6f:2f:97:12:95:70:e3:35:42:c5:
                    7e:d3:db:75:f7:c0:a3:1a:f5:95:9b:bd:97:dc:8e:
                    15:e7:c6:07:eb:27:eb:4f:71:50:79:0d:ff:93:8a:
                    b5:88:95:8f:72:75:43:ef:3c:58:ec:f7:26:25:a6:
                    7b:d5:ac:d6:1e:36:b7:5c:7b:0b:0a:6a:47:0f:53:
                    d4:18:cc:48:74:f5:29:ba:b8:22:d6:8c:74:e2:04:
                    91:29:0f:23:65:78:80:28:04:27:3d:41:05:45:59:
                    01:d9:c1:66:a6:1f:82:60:a5:26:b3:70:3f:f7:e5:
                    e5:9a:2b:2d:08:54:8e:ee:f1:c4:c8:78:86:84:9e:
                    09:7c:e3:da:1b:ed:41:f2:e0:95:30:09:c8:f4:6f:
                    4e:f6:8a:ba:77:4a:a1:e8:aa:3a:bf:a6:a8:77:ea:
                    bc:5e:9b:35:51:69:3d:87:3f:88:f0:2a:99:0b:78:
                    49:06:73:16:b2:48:ef:93:18:a5:c9:57:40:6e:99:
                    9f:dd:e8:fc:3b:71:ca:5c:d9:47:8f:0e:bf:0a:23:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:47:D9:2A:9B:E9:FB:32:3C:0E:CE:18:4E:02:D3:ED:E1:A0:FD:E4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/141e46-8aa9-4143-9786-8fbcbc2ba271/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/141e46-8aa9-4143-9786-8fbcbc2ba271/1/8UfZKpvp-zI8Ds4YTgLT7eGg_eQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57450

    Signature Algorithm: sha256WithRSAEncryption
         27:cf:da:d0:25:40:61:be:e5:bd:7d:5b:47:d1:97:77:73:b9:
         d9:f0:86:66:97:17:50:36:91:48:ef:06:5e:4e:0c:ce:37:71:
         ce:52:df:e8:dc:32:9f:cb:fa:06:db:90:e5:c8:fd:89:31:b9:
         c9:bb:8d:d6:f6:96:0d:01:77:e2:02:c9:98:67:6a:96:cc:ae:
         f2:12:b7:8f:4f:bf:d7:12:85:5d:98:40:dd:1b:36:e0:e6:83:
         42:ec:00:98:bd:36:83:9a:1d:82:3f:fe:79:dd:7d:c4:4d:39:
         b6:c2:b2:6c:4b:14:2a:cf:8b:05:36:f0:db:dd:28:c2:56:2b:
         a5:d5:e8:26:56:3b:61:9c:20:af:f5:ec:20:d7:13:a2:75:dd:
         07:d4:ec:2b:6a:27:cc:80:82:1e:86:96:bc:4b:5b:6a:f9:02:
         d1:46:ad:07:79:0f:27:4d:99:b4:64:3d:4e:7c:7b:b6:79:85:
         57:92:5a:ad:6b:0d:85:86:da:73:0d:69:f0:90:2e:d1:98:5f:
         e6:3e:77:38:42:20:c4:9e:48:e0:6a:60:d1:3e:78:88:8d:22:
         9d:1e:9d:8c:23:59:9a:16:ed:f1:6d:89:24:ef:15:0b:aa:bf:
         e9:1d:b9:4d:67:e7:6c:fb:29:5b:bb:40:ca:f6:ca:37:ab:7b:
         42:b0:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:37:02 2025 by rpki-client