Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5sb6_bae4Rba7mdCy2I0gV324no.cer
File:                     5sb6_bae4Rba7mdCy2I0gV324no.cer (raw, json)
Hash identifier:          Z123o8mFITEWknMc03in5EQFBJLYyNLBR/KO5fwm/Qw=
Subject key identifier:   E6:C6:FA:FD:B6:9E:E1:16:DA:EE:67:42:CB:62:34:81:5D:F6:E2:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9A3E92818126C11DB15C35ED56DAA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/cd5188-1700-48ef-b086-ca3133d218af/1/5sb6_bae4Rba7mdCy2I0gV324no.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/cd5188-1700-48ef-b086-ca3133d218af/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212242
Validation:               Failed, certificate revoked on Mon 06 Jan 2025 08:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:a3:e9:28:18:12:6c:11:db:15:c3:5e:d5:6d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e6c6fafdb69ee116daee6742cb6234815df6e27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e3:52:85:b7:cf:74:90:a4:21:76:71:2d:41:
                    55:1d:08:75:dc:ef:c2:08:84:a8:44:c3:ee:32:3d:
                    e1:e1:ad:3b:ae:fe:a5:0f:67:df:cf:9e:1a:16:a3:
                    e5:4c:a3:dc:3e:13:02:35:82:85:48:3e:2d:54:1a:
                    13:28:42:1b:10:d6:71:11:42:bf:4a:85:96:60:a0:
                    ac:54:fe:aa:ad:c1:f1:6b:f2:d3:55:df:30:8d:f2:
                    78:4d:33:c9:04:36:5f:2f:49:38:5b:5f:32:44:2b:
                    2a:43:2c:9e:cd:7f:57:97:cc:31:7e:e4:7f:81:a6:
                    c5:6b:63:b5:36:38:34:c9:33:c6:1f:4e:86:0e:c5:
                    72:70:87:a6:62:ab:26:fa:21:1b:70:65:fe:c4:53:
                    80:f1:94:e2:c6:bc:71:57:69:f3:4c:5a:b6:b5:58:
                    e0:1a:29:25:6e:23:ba:9b:19:5b:1e:57:e8:a4:22:
                    f6:4b:ed:ee:89:f7:08:04:b1:ba:89:06:3d:3a:d1:
                    da:d9:e9:71:e7:97:f7:85:0a:dc:1f:95:4c:c2:53:
                    bf:29:3e:c6:9a:92:c0:44:98:78:e4:fc:f4:82:5e:
                    6d:75:f8:4f:f3:3c:b3:95:7c:43:77:84:4a:66:38:
                    92:87:b1:ac:83:6c:10:df:4d:ca:29:e1:67:7a:89:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C6:FA:FD:B6:9E:E1:16:DA:EE:67:42:CB:62:34:81:5D:F6:E2:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cd5188-1700-48ef-b086-ca3133d218af/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cd5188-1700-48ef-b086-ca3133d218af/1/5sb6_bae4Rba7mdCy2I0gV324no.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212242

    Signature Algorithm: sha256WithRSAEncryption
         1a:95:14:74:20:0f:85:7f:0b:6a:c6:02:75:c3:f7:1c:d0:25:
         fc:28:53:91:89:59:77:e6:6d:5e:7a:e9:fe:e6:da:e3:e8:21:
         e8:f7:18:7a:75:0d:7e:02:90:2f:cf:ee:02:e8:20:03:89:2f:
         8e:e9:a7:e0:09:1a:a2:ce:f6:4b:78:82:d7:92:7f:5b:e1:64:
         77:c0:8d:08:9c:b2:1d:32:fc:49:c5:3d:fe:af:0f:fc:ec:23:
         e0:a0:79:27:90:2f:67:5b:38:32:63:5b:a5:03:8a:b4:45:e5:
         16:52:c0:ff:cb:ee:7d:79:9a:80:ab:9e:16:f9:5a:80:63:ef:
         0d:75:53:7b:b5:ad:ce:d9:4c:39:12:01:0e:b5:51:45:8f:3c:
         1b:51:14:b1:f1:31:92:ca:c4:be:bd:09:07:9a:a3:1f:a0:f4:
         be:98:6b:f1:e2:5f:9e:64:39:9c:b9:f0:3e:7e:57:1e:49:3c:
         76:ba:34:c5:65:62:f4:07:85:f6:ce:f0:e7:c5:f4:7e:04:de:
         e0:34:75:7a:01:79:c7:63:74:04:ec:89:46:53:15:d0:22:3a:
         ad:b0:75:a0:c3:aa:81:a2:83:fe:80:8f:04:21:14:20:65:5d:
         a2:d5:d2:6c:0b:83:64:57:13:65:f6:68:c4:0a:b2:a0:6b:1d:
         5a:02:39:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:17 2025 by rpki-client