Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87tROvtQTgpc3KysWGRGJw5TqyU.cer
File:                     87tROvtQTgpc3KysWGRGJw5TqyU.cer (raw, json)
Hash identifier:          tnQY2YiuEHIWcg+Dk2QleCHl8eTh/hQoXT+NdjOT1AE=
Subject key identifier:   F3:BB:51:3A:FB:50:4E:0A:5C:DC:AC:AC:58:64:46:27:0E:53:AB:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D995FA9E7DAC0357FAFBA32C005E6C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214127
Validation:               Failed, certificate revoked on Mon 03 Mar 2025 09:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:95:fa:9e:7d:ac:03:57:fa:fb:a3:2c:00:5e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f3bb513afb504e0a5cdcacac586446270e53ab25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:92:c6:af:1c:df:e7:46:0f:f8:c3:51:48:4a:
                    db:6b:bb:db:ac:65:96:1b:10:cb:62:67:b2:6a:ca:
                    98:4d:96:8c:76:a3:4a:2b:e7:ed:75:c2:1c:a2:ad:
                    42:12:1c:da:48:e8:45:b3:ab:55:14:80:dc:9d:45:
                    5b:1b:d5:a4:26:2f:83:b5:2b:b5:a7:ba:a4:01:1f:
                    a7:71:d4:b0:88:5d:2c:73:4a:bc:1f:8d:71:80:f1:
                    3e:9a:98:a5:0c:e4:2d:d1:b7:0c:4d:4a:aa:46:10:
                    e0:70:ae:23:1f:e7:04:d3:79:ce:c4:78:ca:8a:13:
                    14:7b:09:a5:56:d1:ed:6a:8b:37:b8:a8:fc:56:8e:
                    a7:be:23:ce:57:98:31:dd:3a:f4:0c:ae:07:e4:50:
                    c1:81:a7:00:75:d0:80:88:99:75:ee:d3:14:cb:a5:
                    61:70:58:29:1b:cd:c7:39:83:fd:37:c5:e5:8f:17:
                    ab:0e:39:52:75:a7:f9:e6:96:61:0a:ec:a3:28:df:
                    9e:34:71:70:ff:a3:0a:e9:2e:f8:14:1d:50:02:0e:
                    cc:0b:b4:68:38:cd:cd:b8:bf:f4:f2:de:c7:d9:9d:
                    f9:52:14:40:11:b6:e0:e2:c8:b6:1c:b1:1e:16:26:
                    a5:30:7a:84:99:c1:34:df:e7:77:d8:13:6d:4a:04:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BB:51:3A:FB:50:4E:0A:5C:DC:AC:AC:58:64:46:27:0E:53:AB:25
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214127

    Signature Algorithm: sha256WithRSAEncryption
         65:bc:12:f7:e4:93:a8:d9:22:32:f5:fa:fc:85:0f:d6:f1:0c:
         b7:84:fd:09:49:7e:e8:87:47:cd:50:b7:ec:a3:04:bc:64:77:
         c9:da:76:37:84:c0:8c:57:e1:76:52:e6:e8:fb:79:70:47:79:
         a6:88:e1:31:4f:e1:ed:87:95:a1:eb:5b:92:c8:5d:8c:6a:58:
         ef:3a:81:d9:95:ea:4c:04:f4:0e:87:d1:b3:79:df:25:d0:38:
         3b:63:1c:d6:cd:e7:ae:1e:d3:db:47:8e:9f:df:ab:ef:13:68:
         8c:ac:8b:56:8a:fa:7f:d6:96:71:d1:93:56:6d:27:9f:b9:67:
         a4:e3:cc:bd:3e:04:16:34:be:71:31:7c:48:11:af:21:e5:6a:
         46:e3:57:b9:7d:cb:97:bb:39:22:27:d9:22:61:7d:ce:ce:50:
         2c:b8:06:3a:a4:14:57:2b:b5:c0:04:f7:fb:b5:1c:e2:0f:1a:
         1d:11:ad:d5:13:6d:7b:be:48:8c:01:ec:17:ef:cb:54:be:78:
         79:d5:16:d6:67:af:be:d0:4c:ff:3c:ea:36:26:64:94:69:eb:
         d7:a4:7f:b3:ca:4c:ed:62:1c:1d:a6:e0:11:c7:5c:de:f8:e5:
         43:97:28:40:fe:09:f6:d2:a2:ce:98:a3:a3:50:36:6d:ca:96:
         41:88:ad:c4
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQm2ZX6nn2sA1f6+6MsAF5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2JiNTEzYWZiNTA0ZTBhNWNkY2FjYWM1ODY0NDYyNzBlNTNhYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JLGrxzf50YP+MNRSErba7vbrGWW
GxDLYmeyasqYTZaMdqNKK+ftdcIcoq1CEhzaSOhFs6tVFIDcnUVbG9WkJi+DtSu1
p7qkAR+ncdSwiF0sc0q8H41xgPE+mpilDOQt0bcMTUqqRhDgcK4jH+cE03nOxHjK
ihMUewmlVtHtaos3uKj8Vo6nviPOV5gx3Tr0DK4H5FDBgacAddCAiJl17tMUy6Vh
cFgpG83HOYP9N8XljxerDjlSdaf55pZhCuyjKN+eNHFw/6MK6S74FB1QAg7MC7Ro
OM3NuL/08t7H2Z35UhRAEbbg4si2HLEeFialMHqEmcE03+d32BNtSgQucwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPO7UTr7UE4KXNysrFhkRicOU6slMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2JhOWJj
Zi03ZGRhLTQ1YjUtYjdhYS03N2FiZDdjZjhkNmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvYmE5YmNm
LTdkZGEtNDViNS1iN2FhLTc3YWJkN2NmOGQ2Zi8xLzg3dFJPdnRRVGdwYzNLeXNX
R1JHSnc1VHF5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNEbzANBgkqhkiG9w0BAQsFAAOCAQEAZbwS9+STqNki
MvX6/IUP1vEMt4T9CUl+6IdHzVC37KMEvGR3ydp2N4TAjFfhdlLm6Pt5cEd5pojh
MU/h7YeVoetbkshdjGpY7zqB2ZXqTAT0DofRs3nfJdA4O2Mc1s3nrh7T20eOn9+r
7xNojKyLVor6f9aWcdGTVm0nn7lnpOPMvT4EFjS+cTF8SBGvIeVqRuNXuX3Ll7s5
IifZImF9zs5QLLgGOqQUVyu1wAT3+7Uc4g8aHRGt1RNte75IjAHsF+/LVL54edUW
1mevvtBM/zzqNiZklGnr16R/s8pM7WIcHabgEcdc3vjlQ5coQP4J9tKizpijo1A2
bcqWQYitxA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:29:13 2025 by rpki-client