Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L9XXanm6KQxBItgHxb5ekmgKKwU.cer
File:                     L9XXanm6KQxBItgHxb5ekmgKKwU.cer (raw, json)
Hash identifier:          t6jA8IVrAjXxn73F9iiAxDFpgoR/V08ojWHwfualdXY=
Subject key identifier:   2F:D5:D7:6A:79:BA:29:0C:41:22:D8:07:C5:BE:5E:92:68:0A:2B:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC79552C3900140AB2AC52F35FFB9B6D0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/6a14c0-523c-47ce-92d4-03b896d68112/1/L9XXanm6KQxBItgHxb5ekmgKKwU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/6a14c0-523c-47ce-92d4-03b896d68112/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 00:31:41 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 38962
Validation:               Failed, certificate revoked on Tue 27 Feb 2024 10:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:95:52:c3:90:01:40:ab:2a:c5:2f:35:ff:b9:b6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:31:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2fd5d76a79ba290c4122d807c5be5e92680a2b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:e7:7e:de:0d:55:73:9a:cc:96:3c:90:c8:
                    29:3c:a8:e9:37:1c:cf:76:20:fe:08:47:2f:8f:e8:
                    cb:bd:0d:a0:c5:19:0e:4d:7f:3e:ae:0e:20:1e:ad:
                    65:1d:ca:75:65:64:b3:64:21:b8:d7:38:63:21:c5:
                    3b:ae:d9:94:73:db:ad:12:33:f2:5b:3e:36:37:76:
                    a5:94:51:d8:41:8a:f5:0a:37:40:23:45:3a:d0:d4:
                    f0:b0:46:42:9c:3c:bb:16:48:56:b1:a0:c2:07:0a:
                    c6:30:0b:97:a0:e5:ae:f8:4b:d1:3b:13:3a:6f:b4:
                    3f:97:0b:cf:85:b9:f0:4a:4a:b7:9e:fb:a8:3c:e9:
                    3a:c0:62:f1:3c:03:4f:71:3f:a2:a2:27:78:31:f4:
                    83:bc:5d:9b:41:db:0d:a2:3a:67:10:19:39:bb:fb:
                    22:4d:90:f0:76:19:8c:c5:c5:90:9a:38:10:65:ea:
                    93:53:06:3b:1d:c6:b0:1d:e3:61:2e:e8:7d:9c:e6:
                    84:e8:92:85:1f:7b:15:8f:c1:2c:ab:28:34:2e:59:
                    15:fd:4d:51:df:4d:97:65:c2:df:8f:ef:dc:cf:23:
                    ef:81:2a:16:45:a3:24:9f:96:a6:ea:a0:f2:d7:08:
                    71:2c:d9:dc:92:cb:a0:ba:5d:e7:ce:32:37:d2:9b:
                    ab:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D5:D7:6A:79:BA:29:0C:41:22:D8:07:C5:BE:5E:92:68:0A:2B:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6a14c0-523c-47ce-92d4-03b896d68112/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6a14c0-523c-47ce-92d4-03b896d68112/1/L9XXanm6KQxBItgHxb5ekmgKKwU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38962

    Signature Algorithm: sha256WithRSAEncryption
         64:ec:8c:2e:4c:e5:7f:64:ac:b8:45:26:03:d5:09:52:0a:9f:
         07:59:5e:33:8b:6a:fe:36:f1:d1:f1:6d:76:60:7c:49:6d:5c:
         05:19:0c:9d:78:42:07:b9:4f:be:6a:be:66:fb:4f:e4:6d:7b:
         a9:82:d8:eb:cb:8f:ea:be:a9:e2:48:da:f3:73:02:43:a8:b6:
         ce:28:f9:23:28:d6:1b:a6:84:59:1e:a3:84:99:ca:a7:08:71:
         21:72:f3:e7:70:93:51:1e:22:62:b6:72:fa:74:9c:b4:84:ef:
         47:bd:92:70:53:63:a4:37:1a:85:19:fb:8c:b8:0b:8c:35:4b:
         84:af:60:c5:28:28:ef:b3:da:fd:89:4a:17:fe:2a:99:07:fb:
         bb:6c:b8:2c:e2:cb:75:ad:48:7e:96:02:b3:de:42:2c:47:ef:
         31:7f:62:b0:af:c7:7c:84:77:42:dd:cd:e3:29:89:c7:25:3c:
         0e:2f:ed:99:f4:ce:43:06:b4:27:d7:1f:d9:0b:22:00:9a:06:
         70:07:dd:47:07:aa:8a:bb:5a:3a:37:e2:8d:a1:c6:b1:a7:8b:
         26:59:0c:2a:38:5a:51:ac:c6:7d:75:b7:e8:43:b8:02:62:30:
         6e:66:a2:00:5b:b6:cc:e3:23:c0:a0:44:82:8a:dd:03:c6:3c:
         14:ea:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:55 2025 by rpki-client