Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EdwddlMxfYae2PSo8_GvQXTGgPY.cer
File:                     EdwddlMxfYae2PSo8_GvQXTGgPY.cer (raw, json)
Hash identifier:          kNtpzYpHWr6WnFrWJagOVpkoRrvThoIRdA4Tu2FmUw8=
Subject key identifier:   11:DC:1D:76:53:31:7D:86:9E:D8:F4:A8:F3:F1:AF:41:74:C6:80:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01932BCE8832E2E0602455920CF6F2451203
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/a209b1-ef26-48fe-bc03-a9e9255c0a2e/1/EdwddlMxfYae2PSo8_GvQXTGgPY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/a209b1-ef26-48fe-bc03-a9e9255c0a2e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 14 Nov 2024 17:52:55 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214501
Validation:               Failed, certificate revoked on Sat 16 Nov 2024 11:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:2b:ce:88:32:e2:e0:60:24:55:92:0c:f6:f2:45:12:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 14 17:52:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=11dc1d7653317d869ed8f4a8f3f1af4174c680f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:5a:1a:23:61:4b:ab:b2:15:01:64:00:82:
                    e5:38:77:72:02:b4:6e:db:4c:65:07:7a:77:b6:8a:
                    f4:38:cb:24:6f:54:72:70:b3:7e:2a:56:f5:14:a9:
                    e5:4e:dc:6f:30:12:3c:56:d3:4a:58:72:ea:09:4d:
                    0c:7b:8c:7e:dc:e0:78:aa:0b:62:db:91:a8:9e:c6:
                    03:e1:77:25:26:eb:b3:be:82:fb:c4:f7:b0:8a:57:
                    d7:ee:7c:3b:38:b9:82:c7:12:25:66:d8:91:81:0d:
                    f1:04:cd:c5:e4:06:04:37:33:29:06:b2:6f:f0:08:
                    26:b4:47:15:74:7e:87:ea:b7:6b:b2:07:dc:3b:df:
                    d6:6a:a9:85:58:74:bd:ae:82:17:73:e9:8b:6f:2e:
                    83:55:3b:d6:b7:f4:ae:21:12:48:35:8c:0f:bb:e7:
                    df:62:3a:28:fa:b4:98:f1:b3:00:82:07:32:27:6c:
                    1b:6c:9d:cb:39:06:9e:ed:5f:60:1b:ae:00:5c:08:
                    e7:d0:ba:81:36:f8:48:2c:2c:ee:07:07:80:62:77:
                    90:91:ad:f1:40:c0:77:ed:ae:b7:33:38:b3:86:6f:
                    ac:1d:8b:be:79:50:55:39:b3:4b:62:ee:86:07:65:
                    fb:d3:4d:4a:ea:e9:63:cb:65:97:0e:e4:b8:03:1c:
                    95:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DC:1D:76:53:31:7D:86:9E:D8:F4:A8:F3:F1:AF:41:74:C6:80:F6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a209b1-ef26-48fe-bc03-a9e9255c0a2e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a209b1-ef26-48fe-bc03-a9e9255c0a2e/1/EdwddlMxfYae2PSo8_GvQXTGgPY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214501

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:21:df:cc:d2:4f:ef:68:ae:77:3b:ed:43:a0:bc:6e:30:
         fd:e2:d7:c2:92:68:95:ef:81:29:ae:5f:5b:b2:53:84:37:7c:
         d9:47:a7:29:19:f4:b7:0c:7f:71:3e:b5:12:ca:c0:2f:a9:b4:
         d2:38:30:e1:de:dc:c4:38:c2:94:b8:3e:09:0f:1b:8f:f8:25:
         f9:e3:bb:e3:6f:07:f2:da:ff:6f:95:1e:4d:4c:b4:9d:d4:e7:
         ee:31:cc:10:0e:c2:8d:50:b0:a2:4a:83:30:3f:07:e4:9d:03:
         92:36:63:bb:64:72:84:37:f5:9c:bf:4d:7b:59:b4:f5:83:a3:
         09:05:57:91:ad:f6:21:2e:1d:43:33:4b:b7:0d:af:81:6f:76:
         53:75:7c:18:54:63:3c:3b:03:0f:a0:d5:2a:75:8c:c1:15:58:
         de:92:f4:60:a4:35:5b:61:df:93:3c:ab:5f:87:67:3a:92:c6:
         05:d9:ec:0c:02:80:90:07:f6:af:21:ee:0f:8d:8c:14:56:56:
         1f:b7:8a:90:ca:bc:63:fe:ee:4a:dc:81:c5:ec:a3:f3:17:a2:
         30:ff:46:ba:8b:8b:66:cd:78:1b:bb:da:27:92:1b:1a:94:94:
         53:f2:e1:60:31:2c:40:31:89:3c:36:fc:d7:37:7c:01:91:e8:
         14:8f:37:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:15:55 2025 by rpki-client