Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3edtMFKVeG1Q5jSpan25PzEWzNc.cer
File:                     3edtMFKVeG1Q5jSpan25PzEWzNc.cer (raw, json)
Hash identifier:          LJxI1gSe+V8OLemQBFx3Jvfs6z3KRGJnrj3ySg9GQI0=
Subject key identifier:   DD:E7:6D:30:52:95:78:6D:50:E6:34:A9:6A:7D:B9:3F:31:16:CC:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194214439E0538635130122ECB5358D3DC4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216320
Validation:               Failed, certificate revoked on Wed 08 Jan 2025 11:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:39:e0:53:86:35:13:01:22:ec:b5:35:8d:3d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dde76d305295786d50e634a96a7db93f3116ccd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:55:1a:33:06:ce:b8:d0:c5:96:b6:b3:97:
                    f2:01:fe:4a:e9:17:0a:71:3e:f7:48:a9:54:13:57:
                    1e:0d:f0:13:e6:2c:08:0c:7f:d8:e9:8e:24:3f:1c:
                    40:2a:17:04:da:e9:6a:77:80:7c:0e:f3:a5:f0:3a:
                    b0:db:fd:51:2b:e4:af:62:8b:03:3e:e6:31:78:cb:
                    ad:03:d1:b3:5c:7e:58:de:5c:c8:3b:df:9f:d0:0c:
                    90:11:2a:d3:e4:39:69:2e:38:01:9b:fe:c9:44:cf:
                    41:99:c7:6f:d1:02:af:5a:82:37:a6:52:8d:c4:1e:
                    45:ae:8e:58:a5:c9:e5:e8:2e:ab:34:a3:6b:6a:6e:
                    04:cf:b6:6f:4f:bd:d7:58:dc:7c:b3:f3:ae:29:09:
                    07:e5:bd:7b:68:6e:eb:3e:65:49:e9:60:8f:5f:9c:
                    ca:e2:e9:b6:b3:83:9c:1d:dd:15:72:56:49:39:1e:
                    8d:a8:f5:65:c5:b8:ae:5e:5d:e0:0b:26:4e:db:f9:
                    88:1c:06:3a:a6:58:e1:85:f6:69:51:dc:81:ff:fa:
                    3e:89:5a:9f:96:c7:06:df:79:4a:83:5b:51:5b:5c:
                    d8:a6:4b:ea:14:f7:44:a2:b4:5b:79:da:b7:90:06:
                    d5:f1:2b:ab:e6:4c:bb:d7:66:ed:04:81:0c:33:9c:
                    41:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E7:6D:30:52:95:78:6D:50:E6:34:A9:6A:7D:B9:3F:31:16:CC:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216320

    Signature Algorithm: sha256WithRSAEncryption
         73:96:d6:e1:38:82:e5:0b:87:e5:bd:0d:a5:43:17:e4:7e:a6:
         14:ea:39:d8:49:0b:a9:ad:68:27:83:90:9d:37:9a:16:6a:3c:
         5f:3c:20:83:d5:33:c1:76:09:b3:37:89:d3:35:6b:9c:eb:ca:
         d6:d5:88:93:7a:cd:23:3d:29:ed:69:99:aa:2f:0d:90:7a:2b:
         fa:91:ba:0d:6c:a8:be:f2:5d:14:1a:23:7e:02:b5:a4:6f:cb:
         0e:16:63:90:79:e8:b8:65:a7:16:4d:2c:3c:4b:b2:8f:1c:09:
         ab:2e:de:3b:41:52:51:de:63:8d:53:c7:5c:e3:9b:cb:73:2c:
         a7:e0:1d:1a:be:22:a5:06:0b:03:ae:a1:58:10:4e:d5:28:88:
         6a:00:d1:f5:be:d3:4d:9e:19:1b:90:a2:33:01:b6:71:63:69:
         a0:83:f4:ad:bc:ca:0d:68:e5:51:30:58:48:30:29:51:53:ad:
         89:ac:33:07:c5:6c:99:de:bb:c0:fb:90:fb:8e:a0:2e:f1:9a:
         9a:fa:ab:25:1f:11:96:ea:96:cb:54:7b:61:2e:0a:96:32:12:
         41:d6:ed:3f:2d:a0:33:3a:0a:1f:6b:70:1f:9e:f2:3d:01:b6:
         56:24:fe:58:b7:2d:39:d9:c3:04:af:73:a2:21:eb:2f:09:37:
         26:0d:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:32:51 2025 by rpki-client