Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7F4esePUCDzQChwAfbeS9xRLTQQ.cer
File:                     7F4esePUCDzQChwAfbeS9xRLTQQ.cer (raw, json)
Hash identifier:          MSg3uZ/MQLo2ygdy+AFm1t/fN3s16cIGAtDQorAhSP0=
Subject key identifier:   EC:5E:1E:B1:E3:D4:08:3C:D0:0A:1C:00:7D:B7:92:F7:14:4B:4D:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428268B81D39A8152396175F17708B64A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:53:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214495
Validation:               Failed, certificate revoked on Mon 06 Jan 2025 21:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:8b:81:d3:9a:81:52:39:61:75:f1:77:08:b6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:53:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ec5e1eb1e3d4083cd00a1c007db792f7144b4d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6e:92:01:1a:64:94:e1:d6:0a:3d:15:22:ba:
                    32:36:6e:eb:4d:47:41:f1:2b:cb:f8:8e:36:a2:8d:
                    d3:4c:42:ce:5e:49:27:62:66:6b:b2:fc:ea:9f:40:
                    1e:de:c9:e9:4b:79:98:85:a3:d7:01:28:48:2f:a3:
                    28:08:51:fc:28:9a:fe:40:98:cb:53:13:c9:88:6f:
                    b9:a8:8f:52:c4:83:d9:18:19:aa:ba:20:d0:b0:5b:
                    4b:23:d2:fb:62:07:7d:37:d0:d0:e8:0c:8d:ff:65:
                    08:e1:94:89:f3:fc:42:ab:cb:6a:9a:df:1b:1f:42:
                    7d:e6:11:a9:47:8b:03:01:0e:5b:26:81:88:a1:08:
                    09:aa:79:f7:1a:4b:09:d2:6c:51:f0:21:0c:7b:bc:
                    5f:83:b0:9d:f0:51:d7:80:08:45:fc:f5:5e:fe:e3:
                    3c:13:e0:29:a8:27:ab:eb:d4:7a:e5:48:76:39:b4:
                    8b:4e:b0:c9:27:89:88:df:cd:1e:7f:e9:40:ac:cb:
                    03:19:34:fe:41:81:b3:cf:c9:6a:56:97:35:d6:00:
                    7a:14:50:eb:6e:a6:31:02:4a:f2:76:8e:56:fd:70:
                    6c:d6:2a:73:4b:e6:92:e3:55:d8:bd:67:d6:d8:96:
                    55:02:9f:23:99:f0:a3:89:39:59:0d:7f:df:c7:8f:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5E:1E:B1:E3:D4:08:3C:D0:0A:1C:00:7D:B7:92:F7:14:4B:4D:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214495

    Signature Algorithm: sha256WithRSAEncryption
         35:06:98:b2:5f:9c:a4:e1:78:87:f3:b5:cd:c1:eb:ce:0c:78:
         c9:f9:21:2b:42:09:c1:fe:65:d1:01:7f:15:96:2b:93:47:5e:
         4e:ec:d0:7f:15:79:3d:fc:f9:95:7e:37:66:04:bc:df:8d:79:
         cd:24:8b:eb:95:47:bb:46:1b:0a:45:2f:88:07:86:17:fc:ce:
         1f:f4:e5:0c:ea:9f:37:eb:66:bd:e3:d1:52:87:32:a3:f7:20:
         74:58:c2:3f:f1:4c:fd:fb:65:97:bf:e5:a5:c0:52:ab:b5:68:
         99:37:94:1c:68:df:a1:70:e9:a1:f0:2f:21:01:1b:1f:94:de:
         ae:ee:11:57:7d:49:d9:53:6b:a7:1b:35:cd:68:27:0c:4a:03:
         9c:99:9f:98:04:a9:41:28:58:98:e9:ca:ca:65:5f:8d:f7:7e:
         eb:75:8a:03:f8:57:62:7b:b3:32:7e:35:34:18:6d:a4:10:60:
         f2:e4:1e:b5:a9:d9:91:a7:9d:3a:b7:d7:9e:6d:24:25:b2:85:
         49:d2:c3:33:d1:2b:00:83:5b:4f:35:ef:f0:77:25:66:27:16:
         05:28:d6:f9:e4:07:af:71:48:22:ea:3d:9f:5f:6d:7c:1a:af:
         05:06:d1:1d:05:16:6d:4a:c8:1d:4f:64:95:fc:e8:19:43:c2:
         0f:14:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:48:51 2025 by rpki-client