Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UZAPFNiJz2-neRaxmjkeLA0fgM4.cer
File:                     UZAPFNiJz2-neRaxmjkeLA0fgM4.cer (raw, json)
Hash identifier:          seUKgfduhHVb5Yp7Uo8iCDopR6o9+5WNybRUBwcwFdg=
Subject key identifier:   51:90:0F:14:D8:89:CF:6F:A7:79:16:B1:9A:39:1E:2C:0D:1F:80:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3C201D49FEB40F69E1D81E871E6BF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210864
Validation:               Failed, certificate revoked on Mon 20 Jan 2025 14:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:c2:01:d4:9f:eb:40:f6:9e:1d:81:e8:71:e6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=51900f14d889cf6fa77916b19a391e2c0d1f80ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:65:59:07:30:6b:44:4d:22:e0:27:9e:b6:
                    e1:a1:58:b4:c9:91:44:4e:49:e3:bd:e1:d8:3f:53:
                    fb:5a:59:9f:c7:5e:15:89:1f:1b:b9:1c:80:a9:a1:
                    9d:92:a9:c6:7b:b7:c9:8f:f1:2a:ed:e0:d5:02:7e:
                    e7:28:cd:53:da:56:19:5e:e8:ff:4c:58:43:dc:5c:
                    bc:b9:30:9a:37:31:d8:91:90:07:8f:01:6f:b0:43:
                    eb:60:f2:92:04:83:b7:f0:5e:18:de:87:a8:90:dd:
                    a1:c4:79:36:62:a0:9d:10:23:95:87:07:11:d3:02:
                    38:db:65:8c:f4:d4:78:9b:c8:d2:d4:10:3c:07:c5:
                    4e:9b:ea:f6:1c:8a:6e:a5:03:70:da:cf:9e:ba:4a:
                    8e:ec:ba:01:e6:47:6a:b4:a7:60:7e:25:60:00:b7:
                    ca:f8:ba:e6:c6:37:77:68:9a:00:55:53:49:4b:48:
                    a8:f7:f9:bd:97:a3:5d:d8:03:32:d0:f1:5f:dd:02:
                    45:46:3c:b2:f8:db:79:80:ac:3a:dd:27:b9:82:f7:
                    2f:af:e4:b3:d7:e9:0d:17:b5:2a:86:85:8c:36:fd:
                    07:33:b9:bb:fe:ad:94:0b:6f:12:fc:9c:cb:6d:23:
                    ea:9b:94:83:8a:c7:e6:84:c5:68:85:53:3c:9d:36:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:90:0F:14:D8:89:CF:6F:A7:79:16:B1:9A:39:1E:2C:0D:1F:80:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210864

    Signature Algorithm: sha256WithRSAEncryption
         a3:55:20:d4:95:e1:33:7f:8a:8e:79:43:97:43:f3:c8:57:e7:
         31:54:67:a4:ff:9b:db:40:52:2f:7c:64:ca:9d:e3:54:85:41:
         18:2e:63:5f:79:02:93:31:28:b7:1c:e6:0d:c2:30:6e:24:b6:
         f9:3c:7c:f0:f6:a5:c8:2f:20:94:5f:66:d0:31:26:29:c6:d6:
         47:92:b1:72:72:1f:b9:b8:33:c4:5e:fa:d1:66:2d:74:40:47:
         76:67:87:6c:ca:7d:44:3e:f3:60:ab:c9:da:d9:ea:54:d7:8d:
         82:03:3b:1f:0d:30:2e:05:82:e0:38:09:6a:e8:9d:5f:f5:f1:
         3e:aa:e9:46:72:25:e4:cd:e7:d9:74:18:2b:e4:dc:1a:0c:38:
         07:2c:0d:c8:5d:98:ac:ab:5b:7f:1f:32:b0:4b:a3:bf:21:47:
         0f:82:54:6f:60:86:0d:76:f2:d8:e2:b9:4a:a0:ec:19:95:a2:
         8f:32:b3:1f:8e:5a:36:59:c4:a8:87:b3:57:2b:c9:b3:56:fe:
         0d:45:c7:5b:c5:84:d3:f8:81:87:29:0a:1d:77:e0:78:56:ae:
         8d:f7:2a:d0:27:e0:9f:96:2e:fc:b9:26:1a:71:6a:0c:37:37:
         c6:76:61:6b:87:ad:36:48:cb:c0:91:35:1d:3a:c2:76:90:5d:
         77:cf:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:22 2025 by rpki-client