Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UMekmcJkv7FWKWdef73c2Dae8U8.cer
File:                     UMekmcJkv7FWKWdef73c2Dae8U8.cer (raw, json)
Hash identifier:          jiBwzOPXD/7hopWJytzwssliZRIBm6rfIYyfUKSU8qk=
Subject key identifier:   50:C7:A4:99:C2:64:BF:B1:56:29:67:5E:7F:BD:DC:D8:36:9E:F1:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B69226DC88D659D0C1FB32A956AF26
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6d/04a207-c0b7-4b7a-a26f-3e7400467a43/1/UMekmcJkv7FWKWdef73c2Dae8U8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6d/04a207-c0b7-4b7a-a26f-3e7400467a43/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:51:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197462
Validation:               Failed, certificate revoked on Mon 27 Jan 2025 08:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:92:26:dc:88:d6:59:d0:c1:fb:32:a9:56:af:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:51:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=50c7a499c264bfb15629675e7fbddcd8369ef14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:40:8f:a4:36:7f:a6:68:5d:a0:58:fc:f4:
                    0f:62:1d:10:ef:d7:b7:00:9e:34:7c:85:99:c7:16:
                    e0:2e:7f:c0:e4:b4:c5:2f:be:6d:d2:f2:c5:ab:84:
                    10:af:b5:73:d7:25:de:25:26:73:25:83:94:62:9e:
                    65:c8:a0:d4:a7:98:7f:06:77:47:65:ce:a0:e5:cd:
                    ca:0c:cd:8d:92:3a:9e:9f:d1:66:ae:16:c3:26:b9:
                    78:73:1e:0d:49:31:d1:f4:af:63:6f:e0:de:33:54:
                    75:f1:b4:a9:33:ce:7f:d2:40:ad:ce:11:c3:d1:87:
                    09:b6:e4:ec:42:48:c0:2e:10:41:c2:4e:60:be:1d:
                    c8:94:bb:1c:8b:29:ca:5e:80:99:2d:0b:a7:4c:f5:
                    9b:ae:a0:74:b3:6d:45:da:dc:60:a7:f2:13:36:8e:
                    89:b6:1e:ce:d0:33:a3:74:0b:a5:36:cd:29:f6:1b:
                    94:22:f4:ff:d4:72:f3:18:01:78:1a:d2:96:e3:81:
                    8b:63:88:44:41:42:a9:27:63:30:9e:c5:7b:8e:03:
                    a1:58:32:d8:08:49:00:15:2c:52:91:5e:f7:f9:bf:
                    67:c2:52:a3:10:7b:67:74:cb:84:94:8c:42:0d:1c:
                    ba:83:0b:ca:83:db:b1:a5:01:a5:a9:f3:86:80:02:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C7:A4:99:C2:64:BF:B1:56:29:67:5E:7F:BD:DC:D8:36:9E:F1:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/04a207-c0b7-4b7a-a26f-3e7400467a43/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/04a207-c0b7-4b7a-a26f-3e7400467a43/1/UMekmcJkv7FWKWdef73c2Dae8U8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197462

    Signature Algorithm: sha256WithRSAEncryption
         1e:28:42:af:fa:61:1e:88:8d:24:bb:7a:19:18:2f:09:57:f8:
         c6:87:31:1f:8b:73:77:43:c0:0b:9a:d2:f5:9e:f2:d7:a8:65:
         b2:33:83:69:3b:14:95:08:f1:4d:7e:cb:45:8b:3d:5f:4d:7a:
         1b:72:43:e6:ac:b2:9c:a0:aa:44:3c:dc:50:8f:b1:03:67:15:
         36:a7:6c:b2:fb:b4:b3:d4:55:08:e5:64:b1:76:59:92:4b:e6:
         e8:81:10:12:83:cc:cf:b0:92:f2:f7:65:d3:93:5b:07:22:be:
         88:00:a8:f4:2b:94:c0:37:c4:29:07:c4:12:5b:24:77:85:8b:
         b8:7a:5d:cc:52:1f:70:8c:51:82:c7:cb:1c:2d:50:00:ce:9f:
         d6:e8:54:95:0a:dc:f3:c7:8f:14:56:04:cb:94:a3:b9:7e:e4:
         7b:5d:7f:a4:84:9f:b0:e6:34:c9:5d:b5:f5:78:8f:06:3f:4f:
         2e:77:44:87:22:60:3f:bb:ce:62:57:c3:c4:d3:ad:65:97:df:
         a7:92:02:7b:07:ba:a2:e9:19:ac:a5:ad:76:27:6e:e3:74:9c:
         06:db:fb:29:97:65:02:4a:f7:61:09:fc:d2:36:46:6f:76:12:
         18:73:bf:52:e0:41:26:12:73:6e:8e:23:ad:c1:bc:10:1d:c7:
         7d:29:10:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:36:20 2025 by rpki-client