Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RtP70uSQ8BbJrlAFRVOSRKwJCzg.cer
File:                     RtP70uSQ8BbJrlAFRVOSRKwJCzg.cer (raw, json)
Hash identifier:          f0QPma32NxGM+mxvvlwtNiHIfFZK8d3mOmLfuKK5vw4=
Subject key identifier:   46:D3:FB:D2:E4:90:F0:16:C9:AE:50:05:45:53:92:44:AC:09:0B:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0191DEC40D05D53308A2798501DF9FE34053
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/01/41f965-321f-4e7c-b24b-aa501394f5c3/1/RtP70uSQ8BbJrlAFRVOSRKwJCzg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/01/41f965-321f-4e7c-b24b-aa501394f5c3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 11 Sep 2024 01:47:56 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 202322
Validation:               Failed, certificate revoked on Mon 04 Nov 2024 13:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:de:c4:0d:05:d5:33:08:a2:79:85:01:df:9f:e3:40:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 11 01:47:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=46d3fbd2e490f016c9ae500545539244ac090b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:5d:9d:08:54:65:39:e3:6a:26:c4:6c:19:
                    12:14:ea:da:0c:16:66:6e:a0:f8:74:ad:2c:fd:36:
                    17:17:7c:90:3f:e0:c9:ac:aa:f0:37:d8:08:c8:05:
                    28:eb:ce:ed:8d:14:51:38:31:fa:d9:92:40:96:7f:
                    bd:dd:f2:ee:04:0f:05:43:1f:06:81:5d:fb:cf:3e:
                    14:2b:4d:2b:a0:42:10:a6:02:e2:9d:13:29:63:12:
                    84:54:36:16:44:ee:15:af:c9:7f:a4:0f:b5:ac:77:
                    22:62:c6:79:ef:ba:65:fa:a2:4c:5b:36:58:6b:22:
                    98:62:92:6f:e3:32:e6:89:da:cd:66:c7:64:4a:c6:
                    99:4d:f2:2e:5c:e7:e1:6e:e6:45:b5:7f:28:f0:b2:
                    24:8c:e0:0a:c6:23:23:52:0e:72:a7:0c:3e:9a:01:
                    68:3c:32:4a:2b:ab:85:c6:36:e1:58:89:0b:f0:62:
                    4d:74:73:98:78:54:58:0a:52:89:12:a2:02:0c:1a:
                    77:c4:c0:dc:cc:02:19:59:65:c5:8e:3f:65:ed:4e:
                    bc:c5:20:1d:6d:bf:95:ac:4c:f4:1b:29:63:24:69:
                    38:20:c8:4c:e8:77:12:98:84:94:44:4a:fd:33:ed:
                    a9:ae:f3:02:14:84:f1:76:e9:47:8f:35:3e:13:c8:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D3:FB:D2:E4:90:F0:16:C9:AE:50:05:45:53:92:44:AC:09:0B:38
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41f965-321f-4e7c-b24b-aa501394f5c3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41f965-321f-4e7c-b24b-aa501394f5c3/1/RtP70uSQ8BbJrlAFRVOSRKwJCzg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202322

    Signature Algorithm: sha256WithRSAEncryption
         b2:1a:6f:67:7a:0e:17:ee:3d:27:8d:7f:82:ea:3d:aa:67:95:
         5c:72:3b:f5:a9:99:db:50:d1:be:df:cb:15:f0:da:d4:27:11:
         ef:08:0d:15:ff:d8:c8:70:b1:07:b8:ad:3d:9b:77:94:dd:97:
         c8:61:34:b7:b9:17:fe:46:a0:48:bf:d2:63:d1:2a:1c:ec:d1:
         19:82:f4:aa:ff:2b:78:2a:2d:ae:d9:1f:0e:a6:42:2b:a8:25:
         f7:45:00:60:50:62:b1:2b:4c:36:b3:33:19:66:1e:fc:76:d4:
         47:49:01:d6:1e:d2:c1:0c:74:e4:63:2a:f7:0f:b6:a0:db:5c:
         c4:09:a0:99:2a:8c:ae:22:1d:99:73:27:66:da:39:07:b5:e7:
         69:a6:30:b9:d1:00:25:bd:b5:9a:92:bb:17:ed:3e:2e:e1:58:
         b3:c3:e1:de:8c:31:2c:c8:45:5c:92:83:ac:d5:cb:a3:ab:50:
         71:9e:c0:aa:70:d6:56:95:74:c5:fa:66:df:f7:bd:27:df:9b:
         1e:25:69:f1:12:56:38:37:a0:2c:1a:fc:d6:b9:69:30:14:7c:
         05:d7:f0:c8:a7:32:eb:b7:a1:39:65:94:8e:fd:5f:f6:f7:fc:
         41:36:e4:c0:81:3c:ff:84:9c:42:45:59:5a:18:6f:6a:5d:05:
         6e:df:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:28:13 2025 by rpki-client