Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.cer
File:                     MqNUd_Ow3WY3wp0-G9_A2qxxvmE.cer (raw, json)
Hash identifier:          FnO3AiOjBSqAH3Evf6lcYdEthpXx+cEDPeqIGQb/f8c=
Subject key identifier:   32:A3:54:77:F3:B0:DD:66:37:C2:9D:3E:1B:DF:C0:DA:AC:71:BE:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A373E4FDAB303B182E970973D4928
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208765
Validation:               Failed, certificate revoked on Thu 23 Jan 2025 14:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:37:3e:4f:da:b3:03:b1:82:e9:70:97:3d:49:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=32a35477f3b0dd6637c29d3e1bdfc0daac71be61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:90:bd:b0:87:c3:b2:25:42:8e:f0:9c:4d:
                    d1:60:f4:71:a1:90:92:83:4b:e0:5b:51:3b:b2:4e:
                    17:c8:a9:1d:6a:c9:d9:fd:f1:93:08:69:0b:37:c8:
                    4b:13:2e:30:01:10:0c:f7:47:17:fe:b5:2e:4b:7d:
                    7b:f9:e0:61:68:13:21:cf:92:63:06:54:a2:98:21:
                    7c:28:a6:6c:27:8b:92:80:18:d1:b0:bc:4a:97:52:
                    c4:21:6d:ca:09:87:39:d6:96:3d:1a:6c:ca:2c:72:
                    2f:ca:0b:67:e2:6b:73:7c:f2:da:2e:fd:b7:87:dd:
                    e9:6f:78:cf:f8:2b:3b:b6:96:8f:1a:64:35:70:53:
                    07:33:ed:a6:9b:13:62:1e:98:06:39:9c:ef:e6:24:
                    4f:2c:b0:e5:8c:7c:15:5d:b4:1b:70:45:56:9f:85:
                    02:06:bb:9c:34:b4:d0:a4:23:ba:85:d3:3f:d0:25:
                    a0:6a:ec:76:77:09:ee:72:81:0f:70:9b:c5:7e:21:
                    fb:7b:e5:14:db:6a:07:f6:e5:03:f8:7b:30:1a:6c:
                    0d:93:69:b4:ba:6a:e6:6f:aa:24:21:f6:25:11:ae:
                    f6:81:54:14:8f:76:d3:fd:1a:62:55:fa:75:c5:86:
                    dc:9e:ff:93:fe:82:d0:60:07:ab:fc:c1:b3:24:92:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A3:54:77:F3:B0:DD:66:37:C2:9D:3E:1B:DF:C0:DA:AC:71:BE:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208765

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:5a:c1:cc:90:45:d0:3b:f7:58:59:bc:5f:3e:17:5e:cd:
         c3:f9:be:32:ee:16:0f:33:9e:b5:3b:3d:11:fe:54:97:63:80:
         25:c6:92:c9:9c:03:0b:e5:6b:07:60:c4:96:6d:f6:4d:e3:85:
         01:b8:05:2a:2c:fb:ad:61:d3:9a:b9:47:3a:b5:2a:9c:7b:60:
         48:a7:02:f6:d5:5f:7e:da:97:f7:47:93:40:71:15:f1:d8:8f:
         10:c2:22:2b:97:eb:31:3a:e2:22:a5:a5:dd:fa:6b:a0:59:27:
         af:32:c2:fe:55:13:85:f4:a0:ea:0c:83:f7:67:19:87:ab:ec:
         e2:6e:7d:e2:05:dc:0a:c0:b2:4d:73:00:54:9a:f5:06:1e:7f:
         55:c5:8e:c8:23:34:43:81:75:0b:98:5d:8e:37:10:d9:ab:80:
         9f:69:2a:39:d1:8e:dd:f1:0c:b6:32:64:93:9f:89:9c:8f:f1:
         46:07:52:a8:40:99:e8:78:e4:2b:97:cd:c4:cf:5e:24:51:08:
         24:5c:3e:eb:50:08:3e:27:d1:51:4e:92:c8:53:50:06:d7:37:
         8b:68:b1:82:f9:b6:17:84:ee:e1:1c:2c:f7:0b:29:5d:40:1c:
         1a:00:be:94:10:d7:c6:89:36:7e:30:ff:16:aa:31:3a:e3:73:
         6e:49:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:00 2025 by rpki-client