Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QQOCeXMyJKlDYLrFryeFfy6xjrk.cer
File:                     QQOCeXMyJKlDYLrFryeFfy6xjrk.cer (raw, json)
Hash identifier:          CQMly0CANJXpMqfXep4hZc+J/fnKzLL2Khvq6QggbmI=
Subject key identifier:   41:03:82:79:73:32:24:A9:43:60:BA:C5:AF:27:85:7F:2E:B1:8E:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0190B6A34DC2164CD32AE5E5D7D344F87AF7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/977793-6647-4cdb-ac51-95ce7af82f01/1/QQOCeXMyJKlDYLrFryeFfy6xjrk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/977793-6647-4cdb-ac51-95ce7af82f01/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 13:44:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 58318
Validation:               Failed, certificate revoked on Mon 22 Jul 2024 12:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:b6:a3:4d:c2:16:4c:d3:2a:e5:e5:d7:d3:44:f8:7a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 15 13:44:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=41038279733224a94360bac5af27857f2eb18eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:a0:d2:34:6e:b1:3b:eb:b6:fc:b2:ca:bb:
                    6c:8b:95:7b:d6:b5:8e:b5:d1:3f:70:15:3c:2e:da:
                    ef:90:57:9c:fa:b2:28:08:aa:14:9c:a9:60:68:14:
                    96:68:10:fb:77:bf:5d:85:b0:40:de:17:56:d5:b8:
                    97:e4:5b:05:e7:0b:c5:12:4f:af:15:90:d5:05:0c:
                    00:4f:02:3c:0f:b8:e9:96:aa:e1:17:97:d0:5e:ee:
                    06:c0:b9:45:f8:28:6c:17:65:cd:ba:8b:aa:ee:56:
                    d5:45:59:38:49:e4:c9:65:dd:a5:73:af:25:50:e4:
                    89:03:50:d5:5d:bc:d5:13:73:4a:85:5b:d0:7e:c6:
                    aa:e6:a6:2c:60:b7:5e:2d:ec:c0:be:75:67:e3:88:
                    bc:ab:86:19:70:be:c5:68:b0:f7:d7:60:1c:d6:a0:
                    10:fe:db:66:e5:a7:45:a1:2b:67:19:e4:19:46:03:
                    2b:2e:65:83:df:4f:49:f3:7c:8d:15:15:45:ff:7f:
                    6d:42:51:dc:6a:b2:4f:64:d8:f4:f9:80:28:0b:bf:
                    78:b1:47:51:5c:cf:51:88:d6:3c:e7:0a:a4:fa:c9:
                    fe:90:87:bd:c9:99:25:7f:e7:23:f5:3b:7e:35:29:
                    8a:07:c7:ef:0d:65:de:01:fb:a8:fd:10:af:d9:19:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:03:82:79:73:32:24:A9:43:60:BA:C5:AF:27:85:7F:2E:B1:8E:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/977793-6647-4cdb-ac51-95ce7af82f01/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/977793-6647-4cdb-ac51-95ce7af82f01/1/QQOCeXMyJKlDYLrFryeFfy6xjrk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58318

    Signature Algorithm: sha256WithRSAEncryption
         10:b8:b8:7a:3f:54:bc:43:04:87:8e:d1:7b:c1:3b:23:88:ae:
         1d:d2:5b:b6:92:f0:c2:29:b0:b4:36:aa:1a:2b:c6:7d:29:97:
         df:48:a4:99:17:45:81:c8:f4:5e:de:40:e6:12:86:4e:b0:53:
         00:41:b0:a8:1c:21:1d:44:35:f8:b0:c9:6e:ee:60:7f:e3:89:
         d8:e2:19:0a:a6:59:0e:32:b5:b4:ac:66:e8:51:86:63:84:37:
         f8:86:db:4d:66:65:6b:fd:8d:b4:b2:e0:7e:32:a7:59:7f:b1:
         ac:7e:cb:17:aa:a3:2f:7f:c8:ec:88:54:6a:2d:30:37:76:e3:
         10:47:61:2b:b2:33:46:bd:41:5f:81:fa:4d:e9:c4:16:40:c5:
         c8:d8:29:6e:cc:39:06:5f:40:12:95:d9:d8:84:97:62:72:5d:
         22:2e:aa:46:88:44:d2:2d:56:54:02:eb:ac:6e:04:57:99:dc:
         6f:48:ca:52:f3:1b:79:46:0a:6c:ad:d3:ff:82:82:ef:db:c1:
         66:bb:cf:a2:85:fa:c3:3c:5a:b0:bc:a1:4d:94:eb:2b:98:aa:
         3c:21:ed:20:a4:3b:f2:43:d0:fb:16:66:95:d4:14:41:4f:d4:
         dc:d1:14:6d:1e:a7:97:69:c6:c9:9a:f3:9e:ab:5a:90:25:f9:
         65:74:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:32:56 2025 by rpki-client