Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
File:                     2jqEPf4emgiI_5tbQWQnRQvWjcE.cer (raw, json)
Hash identifier:          haVt9V+IbGG1XCkFnN2i9Y/DHW71GCXSjE7gHFQdu18=
Subject key identifier:   DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942368F173675BB0F3257A99C083811C40
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201818
Validation:               Failed, certificate revoked on Wed 26 Feb 2025 09:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:68:f1:73:67:5b:b0:f3:25:7a:99:c0:83:81:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:33:05:0b:1e:a8:25:9d:56:5e:97:2f:7c:
                    05:6c:8f:60:36:b0:34:f0:b2:15:2c:1b:ee:75:e4:
                    f9:85:a7:e0:ae:35:79:22:cc:b7:de:5c:66:72:ed:
                    62:03:88:5b:6d:71:3d:af:b6:af:44:5b:2c:2c:ac:
                    ff:26:76:6b:5f:f7:26:3f:3b:c4:c5:1c:26:bb:6d:
                    11:18:6f:11:1b:87:96:30:dc:f5:9c:dd:77:71:f3:
                    04:58:8a:bc:f4:0d:ef:38:8f:15:b8:d6:37:35:80:
                    62:ac:36:7e:ad:ba:35:a3:c0:88:a9:70:a1:ac:1a:
                    ee:05:10:2d:59:d9:31:ea:f9:36:6d:54:6a:87:ec:
                    b9:a6:ac:b9:2c:52:af:ef:44:94:00:0d:55:81:c8:
                    a8:81:88:fc:4e:b1:11:c1:23:c9:62:33:77:ef:9d:
                    e9:4e:d5:b0:3f:f5:ff:29:44:eb:dd:63:93:2e:2c:
                    95:57:ae:10:89:d1:b7:28:33:28:5c:df:a8:1a:60:
                    19:b1:69:a3:59:84:f2:41:7e:79:81:8c:d4:8a:32:
                    ae:0b:b9:2c:53:c9:cd:e6:7b:93:3f:a0:9a:43:74:
                    f4:48:dd:af:33:76:2c:30:7c:10:7b:f8:6e:6b:05:
                    20:9b:94:95:b8:d9:b6:7f:74:59:bd:ac:fa:1e:2e:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201818

    Signature Algorithm: sha256WithRSAEncryption
         88:c7:03:3c:a3:a2:86:39:44:9a:cf:d0:0c:fa:00:fe:65:51:
         8a:da:d4:fb:50:87:3a:ad:f2:1d:5e:21:75:3c:05:22:2d:e9:
         80:0f:8a:0e:c1:9c:e3:3c:07:54:a9:f4:3a:6b:c2:a9:e0:61:
         d1:c4:5e:b3:ec:c4:ae:95:54:b6:fb:61:68:e3:ab:65:58:52:
         12:95:5b:6b:ec:a6:1e:c6:0f:87:32:a3:45:2b:b5:60:97:de:
         a3:0a:28:cc:9b:cf:21:e5:9a:69:eb:88:4e:8f:a8:83:ff:af:
         af:02:aa:2b:58:7c:29:9d:7c:dd:a7:80:f2:d5:fd:39:aa:38:
         3a:fa:63:21:de:d0:d1:02:1c:10:ef:0f:e8:6c:c9:39:a5:fd:
         db:b1:09:03:53:2a:b4:14:38:76:02:e9:96:ec:d6:7e:9c:cb:
         11:1b:ac:6a:a1:52:a4:d3:fc:cc:ff:54:cb:c3:44:96:c4:24:
         52:4d:b7:3e:eb:6a:f0:0e:5d:7d:a1:26:18:96:62:02:fe:80:
         99:34:1c:52:ae:d3:d9:40:b0:ae:1d:39:07:bb:cf:ea:34:6b:
         03:26:1b:b2:ac:d1:86:6e:6b:d9:c1:ab:b2:5f:37:4e:f4:a7:
         24:87:83:e4:10:79:76:17:48:2b:42:32:54:0a:2f:4a:fb:a9:
         9a:6d:cc:61
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQjaPFzZ1uw8yV6mcCDgRxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTNhODQzZGZlMWU5YTA4ODhmZjliNWI0MTY0Mjc0NTBiZDY4ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzUzBQseqCWdVl6XL3wFbI9gNrA0
8LIVLBvudeT5hafgrjV5Isy33lxmcu1iA4hbbXE9r7avRFssLKz/JnZrX/cmPzvE
xRwmu20RGG8RG4eWMNz1nN13cfMEWIq89A3vOI8VuNY3NYBirDZ+rbo1o8CIqXCh
rBruBRAtWdkx6vk2bVRqh+y5pqy5LFKv70SUAA1VgciogYj8TrERwSPJYjN3753p
TtWwP/X/KUTr3WOTLiyVV64QidG3KDMoXN+oGmAZsWmjWYTyQX55gYzUijKuC7ks
U8nN5nuTP6CaQ3T0SN2vM3YsMHwQe/huawUgm5SVuNm2f3RZvaz6Hi706wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNo6hD3+HpoIiP+bW0FkJ0UL1o3BMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlL2FhZTI5
ZS0xZmY0LTQ0MTUtOTRhOS1mN2YyOTM3ZGQzMDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvYWFlMjll
LTFmZjQtNDQxNS05NGE5LWY3ZjI5MzdkZDMwNS8xLzJqcUVQZjRlbWdpSV81dGJR
V1FuUlF2V2pjRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMUWjANBgkqhkiG9w0BAQsFAAOCAQEAiMcDPKOihjlE
ms/QDPoA/mVRitrU+1CHOq3yHV4hdTwFIi3pgA+KDsGc4zwHVKn0OmvCqeBh0cRe
s+zErpVUtvthaOOrZVhSEpVba+ymHsYPhzKjRSu1YJfeowoozJvPIeWaaeuITo+o
g/+vrwKqK1h8KZ183aeA8tX9Oao4OvpjId7Q0QIcEO8P6GzJOaX927EJA1MqtBQ4
dgLpluzWfpzLERusaqFSpNP8zP9Uy8NElsQkUk23Putq8A5dfaEmGJZiAv6AmTQc
Uq7T2UCwrh05B7vP6jRrAyYbsqzRhm5r2cGrsl83TvSnJIeD5BB5dhdIK0IyVAov
Svupmm3MYQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:36 2025 by rpki-client