Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6IXs_O00-YSXSMR65u9bhrGbUQ8.cer
File:                     6IXs_O00-YSXSMR65u9bhrGbUQ8.cer (raw, json)
Hash identifier:          RtBDF9Vi5HdNNDnamY+IG9DyVSeq8dyoY1jjtEmQjDY=
Subject key identifier:   E8:85:EC:FC:ED:34:F9:84:97:48:C4:7A:E6:EF:5B:86:B1:9B:51:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0197CEB0391BB3F0BDCF33B21DBF42AE1E87
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/E885ECFCED34F9849748C47AE6EF5B86B19B510F.mft
caRepository:             rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 03 Jul 2025 05:09:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47272
                          IP: 2001:67c:d84::/48
                          IP: 2001:67c:d88::/48
                          IP: 2001:67c:d8c::/48
                          IP: 2001:67c:d90::/48
Validation:               Failed, certificate revoked on Thu 03 Jul 2025 15:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:b0:39:1b:b3:f0:bd:cf:33:b2:1d:bf:42:ae:1e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul  3 05:09:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e885ecfced34f9849748c47ae6ef5b86b19b510f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a6:bf:07:46:9c:a0:73:c7:c0:a5:a7:f5:29:
                    73:7c:ef:ac:d6:ea:13:09:b3:73:26:30:45:40:64:
                    07:59:f5:ed:31:ec:e9:fc:27:27:bb:30:fb:22:89:
                    3f:b8:71:17:78:e5:a4:00:51:cd:ba:d1:20:13:79:
                    6e:bd:31:df:5a:64:78:1f:f4:4a:22:8c:6b:9c:4d:
                    c0:0c:55:c3:84:cf:af:12:37:0d:06:44:16:8c:17:
                    4e:58:24:6b:16:ad:51:6a:ed:bf:b9:57:4c:72:67:
                    90:b4:7a:77:4c:80:dc:21:35:25:0d:a4:8a:34:dc:
                    a9:13:89:cc:ae:3e:f6:06:e7:39:d8:30:68:09:ca:
                    c9:2f:b3:dc:a9:2e:1a:52:ed:9a:8c:b8:ae:96:12:
                    bc:53:e6:59:59:db:22:1f:80:5d:6d:ce:39:90:97:
                    72:9a:2a:79:45:bc:dd:65:b5:f6:f8:f5:c3:07:e2:
                    f5:e8:77:f9:37:b5:dd:bc:30:a0:ea:fc:d5:65:9d:
                    02:ae:b5:52:64:f9:26:23:d6:d9:e6:74:e3:03:6a:
                    4f:b1:82:1d:5d:89:72:ef:e3:05:68:62:80:17:6a:
                    6c:7e:b3:17:69:76:a2:88:95:e3:bc:04:a8:67:97:
                    81:f8:bb:f2:1c:b7:fa:57:a2:4b:6f:09:07:38:c4:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:85:EC:FC:ED:34:F9:84:97:48:C4:7A:E6:EF:5B:86:B1:9B:51:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/E885ECFCED34F9849748C47AE6EF5B86B19B510F.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:d84::/48
                  2001:67c:d88::/48
                  2001:67c:d8c::/48
                  2001:67c:d90::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47272

    Signature Algorithm: sha256WithRSAEncryption
         75:cd:62:a0:6c:84:4d:80:8c:ef:76:36:9a:87:cb:66:06:8c:
         42:a8:25:e4:e1:72:06:c8:c1:56:9a:77:31:f4:0b:3c:82:5b:
         9a:e2:4f:d7:6d:16:ec:50:08:2a:20:9e:6b:b6:17:33:9c:59:
         3f:f2:23:2f:79:d1:87:fe:9f:08:7f:8e:96:b4:17:a9:3a:64:
         03:4b:d4:9e:e0:00:b3:dd:0a:7a:52:04:52:35:d1:25:a2:2c:
         67:4d:83:0f:6a:e1:62:27:0c:57:d5:09:af:cf:b7:08:e7:70:
         00:75:a3:cb:f0:cb:36:d1:60:5c:eb:19:5d:9e:a5:4e:e3:fc:
         84:7c:a9:92:f5:ad:15:ed:2b:89:3e:ef:a4:00:fa:99:29:15:
         97:b6:e4:6c:ae:dc:b6:67:74:cc:40:d0:98:57:c7:bf:85:5f:
         b5:3d:6a:e9:8b:c4:9b:de:3e:42:e9:c0:4b:c7:85:89:0d:68:
         ce:89:10:16:f9:86:ca:b7:84:9c:33:79:6c:d9:33:5b:36:15:
         42:48:94:6d:ac:68:44:87:e1:9f:26:a5:07:c2:f2:9a:a5:65:
         97:2c:9d:f0:ce:c3:64:03:0d:3d:e4:31:f5:69:9d:92:ba:ed:
         ae:ba:74:cd:b5:5d:41:a4:24:d6:d3:0a:85:e9:44:4e:34:d1:
         07:43:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:25:52 2025 by rpki-client