Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GiJsa6b9gxH_DNM7QSFXCbKwJkg.cer
File:                     GiJsa6b9gxH_DNM7QSFXCbKwJkg.cer (raw, json)
Hash identifier:          LARBbdTdbRVsuw5f8wRqtvbSrRPem/fHx48PtbKuUI8=
Subject key identifier:   1A:22:6C:6B:A6:FD:83:11:FF:0C:D3:3B:41:21:57:09:B2:B0:26:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC03F87606BC67FB832B3F5AAB1364
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/GiJsa6b9gxH_DNM7QSFXCbKwJkg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216405
Validation:               Failed, certificate revoked on Mon 20 Jan 2025 11:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:03:f8:76:06:bc:67:fb:83:2b:3f:5a:ab:13:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1a226c6ba6fd8311ff0cd33b41215709b2b02648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:55:70:e9:ac:96:57:29:14:33:0a:0b:c4:
                    1f:0c:74:09:89:a7:54:cf:5a:d8:4e:b8:bf:41:b0:
                    c5:59:18:07:72:85:d4:59:88:f2:91:be:8a:e3:72:
                    42:a5:18:6b:99:12:ab:cd:6c:ae:2b:70:e6:a4:98:
                    08:61:ce:74:53:29:21:6b:a0:d9:c9:99:3f:6b:be:
                    73:c3:24:30:ce:c6:79:49:68:f9:50:8d:74:1e:fd:
                    58:c5:1b:f7:93:2e:b1:0c:d4:cc:a6:20:21:03:54:
                    e2:f3:de:4e:a2:c3:13:96:e7:e6:f5:98:a2:0b:21:
                    4f:6b:19:05:fe:c5:07:98:db:7b:62:9b:26:2a:91:
                    15:f2:63:13:8c:a7:0e:06:06:98:e4:f5:b7:5b:c4:
                    95:58:e2:2e:0f:48:18:2d:33:ef:e6:e1:0a:21:cc:
                    d0:3e:24:3a:4a:48:c8:d9:23:bf:f7:71:58:f4:de:
                    1c:72:d3:9a:7e:3a:d2:60:b8:10:ac:ff:74:88:37:
                    d4:e1:42:bd:e2:d2:18:31:4b:98:ae:ea:e7:34:63:
                    3c:69:87:5c:e6:95:28:f2:26:cf:48:9a:96:5a:da:
                    69:97:98:e0:39:82:77:81:69:ec:79:27:bb:59:b9:
                    da:fc:2a:2d:5f:ad:f7:a6:8b:7e:f1:f6:3a:df:d0:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:22:6C:6B:A6:FD:83:11:FF:0C:D3:3B:41:21:57:09:B2:B0:26:48
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/GiJsa6b9gxH_DNM7QSFXCbKwJkg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216405

    Signature Algorithm: sha256WithRSAEncryption
         89:55:9d:b7:b0:2f:c8:08:52:e6:81:2c:33:b5:a9:47:69:18:
         f2:54:e4:a0:b4:f5:f8:c7:f7:f6:56:71:04:df:7e:72:8d:79:
         0c:f0:ab:b9:20:0b:05:ef:11:a4:23:76:1d:b2:28:44:74:54:
         71:5b:d7:6c:5b:2d:cb:d3:44:cd:b5:5b:11:cc:de:67:bf:d3:
         56:20:1d:ef:36:fb:b6:53:be:fa:2b:ec:90:4d:44:55:3c:fe:
         e0:21:e8:37:f0:ab:f9:20:8a:4c:9e:75:a7:44:03:93:38:8b:
         a0:e7:27:04:a6:c8:83:26:23:9e:8a:e6:34:1e:1a:7a:b4:37:
         04:b6:ec:f4:06:61:ea:4e:83:f8:0a:26:e7:60:96:fe:47:79:
         cf:7c:5e:8a:be:41:76:c4:37:e8:f5:09:b8:b9:9e:30:5d:b4:
         5b:a6:27:8a:a3:b6:ce:96:49:b2:64:bb:2f:80:5a:6a:a4:29:
         85:8f:3d:9f:92:91:99:86:b7:25:89:a2:51:6a:10:f2:ec:42:
         14:b7:93:26:1c:4a:90:03:37:cd:50:f7:e3:2d:52:39:c2:01:
         d2:f8:c0:b5:a3:47:51:12:cd:d3:32:76:fb:2e:8e:3a:a7:a0:
         0f:15:51:bf:44:d8:05:c9:4c:77:ff:de:80:83:80:e8:0c:f4:
         bf:be:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:33:06 2025 by rpki-client