Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0vGWWWZCvHke5nS6XLoKjoBAHPE.cer
File:                     0vGWWWZCvHke5nS6XLoKjoBAHPE.cer (raw, json)
Hash identifier:          iTC2ZwS8tAkQ+w154o6Yd3yZf2Bua9HP0ID57MsCELQ=
Subject key identifier:   D2:F1:96:59:66:42:BC:79:1E:E6:74:BA:5C:BA:0A:8E:80:40:1C:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01956730904CEA5147120924570DD2BEB81C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/f3d828-c6c2-4e44-a163-2968eeb08a16/1/0vGWWWZCvHke5nS6XLoKjoBAHPE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/f3d828-c6c2-4e44-a163-2968eeb08a16/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Mar 2025 16:43:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213430
Validation:               Failed, certificate revoked on Fri 07 Mar 2025 02:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:67:30:90:4c:ea:51:47:12:09:24:57:0d:d2:be:b8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  5 16:43:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d2f196596642bc791ee674ba5cba0a8e80401cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:a6:3e:f8:a9:04:e0:77:6d:3d:48:dd:61:
                    2a:74:a6:be:5b:56:cb:58:ba:74:b8:3a:47:f0:13:
                    8d:3c:dd:c7:d0:91:0b:e0:b2:1c:dd:4e:f5:1d:60:
                    5b:36:1f:cb:5f:2c:6f:d9:1b:30:4f:35:4a:0d:3a:
                    f3:b6:7c:5e:7c:19:ac:2a:57:3e:27:d2:82:99:aa:
                    9b:4c:94:e9:36:91:21:83:9b:7b:9d:60:f5:01:12:
                    55:ed:72:e7:0d:0b:8d:16:96:15:53:3d:49:32:be:
                    1e:55:e7:17:2d:a7:50:f7:d7:cb:75:4d:45:a5:6e:
                    00:2c:1f:09:08:5e:70:44:5f:da:fc:bb:c7:e8:c6:
                    8c:08:72:a8:cf:ce:50:f7:31:aa:b1:83:ea:8a:ff:
                    a4:86:12:1a:7a:01:8e:8a:85:7d:a1:8b:5b:0e:11:
                    5b:5f:67:fc:d6:1b:bc:87:de:38:48:c0:2d:4e:74:
                    92:dc:19:1f:09:e2:00:7d:5d:e6:5b:dd:80:fc:bf:
                    9e:02:99:cb:5d:e5:3f:34:64:61:f2:ed:3f:2e:df:
                    04:e6:59:f2:50:73:14:7f:d7:ba:73:cd:ee:1a:97:
                    59:7d:4f:6c:ff:4b:12:e0:2d:6c:e3:72:89:16:96:
                    65:03:c3:ea:e3:72:d8:05:66:61:1f:1d:c3:99:35:
                    ec:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F1:96:59:66:42:BC:79:1E:E6:74:BA:5C:BA:0A:8E:80:40:1C:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f3d828-c6c2-4e44-a163-2968eeb08a16/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f3d828-c6c2-4e44-a163-2968eeb08a16/1/0vGWWWZCvHke5nS6XLoKjoBAHPE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213430

    Signature Algorithm: sha256WithRSAEncryption
         93:75:0a:b9:ad:94:8c:f2:c6:1b:76:a6:fd:6e:74:c9:af:40:
         f5:11:4d:03:40:3a:4b:89:c5:84:05:cc:1b:8c:2f:a3:d9:82:
         34:1a:0e:33:de:22:cf:5e:86:87:43:79:dc:a7:ba:93:9f:15:
         39:0f:59:7b:66:54:d7:69:b0:fa:4e:3e:0e:8b:94:7c:d2:f1:
         ae:08:c9:32:d7:74:a0:5c:5d:29:3b:da:de:bf:e5:39:8e:c9:
         a6:6e:53:9d:fb:13:54:8e:d7:93:3c:e7:19:b9:aa:08:17:10:
         57:5c:80:0f:76:8c:6c:1b:b3:72:a5:69:54:c5:0e:3d:e0:85:
         df:81:16:db:40:fe:7b:0b:a3:a7:69:16:fd:b0:4d:6d:fa:6c:
         eb:cf:a6:4e:68:7d:36:b2:ff:e3:2a:58:8f:2c:61:b0:8b:04:
         7d:6c:b1:1a:ce:67:67:43:31:f9:f3:42:c6:aa:ff:35:0f:0c:
         79:b2:54:55:f4:4f:fd:05:8c:1a:cc:9b:58:f9:87:40:7b:b3:
         d2:74:27:53:4a:90:3c:e2:4f:51:ab:15:78:26:20:b4:ea:18:
         61:5b:d6:4e:bf:58:44:41:e6:c2:3d:2e:fd:f8:80:05:e8:6a:
         d2:db:5d:10:15:53:77:ca:e0:ad:de:b0:87:8a:4e:77:f6:7b:
         39:e1:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:56:52 2025 by rpki-client