Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XEjolmuNGs5fPiAK-tBV07zYfcs.cer
File:                     XEjolmuNGs5fPiAK-tBV07zYfcs.cer (raw, json)
Hash identifier:          hYHltgHTOSe8BoyghvPw1DkyQ3p0iT4laGb7grffte8=
Subject key identifier:   5C:48:E8:96:6B:8D:1A:CE:5F:3E:20:0A:FA:D0:55:D3:BC:D8:7D:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942520B8777B59C59EB589563793CBE23C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/XEjolmuNGs5fPiAK-tBV07zYfcs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203044
Validation:               Failed, certificate revoked on Wed 08 Jan 2025 12:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:20:b8:77:7b:59:c5:9e:b5:89:56:37:93:cb:e2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5c48e8966b8d1ace5f3e200afad055d3bcd87dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:5c:2e:6e:2b:a5:dc:2b:6d:58:d6:c7:6b:
                    47:48:50:3e:ca:a3:70:8e:48:9f:15:d9:23:f8:94:
                    53:b4:e6:9f:de:e7:e0:97:3b:2a:f8:fc:89:0e:0f:
                    80:71:a2:34:c7:0c:43:dd:c9:b7:f6:61:7c:5b:13:
                    d6:12:f0:9e:c3:2b:5d:2f:0d:20:f3:71:1a:bb:ba:
                    4d:db:78:26:69:ab:b8:f0:03:75:e5:2c:84:bd:2e:
                    4c:f2:96:a7:ae:75:4a:b5:fb:29:d7:7b:5e:f7:f9:
                    15:01:aa:72:a0:8e:ce:71:54:50:f0:e8:2a:fb:a1:
                    8a:6d:f8:e6:9d:e1:b1:e4:49:c1:fe:e4:71:5f:18:
                    1d:58:ea:eb:d2:ae:3d:ec:b9:18:0a:95:fc:a7:46:
                    d5:88:ca:9b:92:8b:d1:93:b3:ef:5e:77:2c:47:36:
                    c8:2d:a1:ec:fb:ae:8e:1c:ce:49:87:00:c6:6e:eb:
                    59:2d:eb:b8:ca:6f:8b:80:05:be:bb:fd:ae:22:fa:
                    25:a3:5a:81:31:b7:58:84:7e:22:ae:2b:15:9a:40:
                    de:8d:a1:54:b5:16:d1:f9:b5:43:57:45:fa:e8:98:
                    89:57:91:97:5e:4e:9f:91:a8:87:2e:aa:65:1d:a9:
                    ec:56:e3:78:bc:e7:70:72:1f:e6:20:61:25:20:b6:
                    0d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:48:E8:96:6B:8D:1A:CE:5F:3E:20:0A:FA:D0:55:D3:BC:D8:7D:CB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/XEjolmuNGs5fPiAK-tBV07zYfcs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203044

    Signature Algorithm: sha256WithRSAEncryption
         57:e1:f7:2c:51:90:6c:69:37:9c:9f:74:fa:de:96:09:ed:ef:
         88:fd:56:3a:2b:da:25:be:bb:bc:6d:e2:06:1e:d2:6a:cc:4f:
         a2:c9:99:77:8c:5d:f9:53:2c:2c:91:20:d6:66:a9:49:e9:9d:
         cf:4d:b6:dd:da:53:51:73:41:39:c7:14:8a:b1:9c:70:43:7f:
         b1:ba:3f:eb:f1:ad:9c:89:fd:0e:78:69:0b:d4:f3:10:30:eb:
         cc:e4:1b:1e:fa:ba:f3:64:d8:ae:eb:a6:ab:2b:f7:5c:10:ef:
         93:2b:0e:d2:d1:7e:aa:76:10:24:9b:ac:43:be:9f:79:77:7d:
         45:b2:6d:0e:29:94:7f:d6:b7:f4:80:40:14:64:f7:92:8d:2d:
         0c:fa:f6:47:d1:b8:41:a2:92:70:49:30:66:64:92:c7:ca:7d:
         bd:5b:e8:9a:1c:51:5a:e3:07:c1:62:5d:d0:2a:e2:89:4d:a5:
         4a:a1:98:d4:ac:e6:b0:1b:65:f1:d8:26:40:22:bc:ee:75:af:
         6e:08:1a:e2:fb:58:bc:3a:6e:46:6c:1e:61:01:04:9b:9d:ac:
         b1:2c:75:b6:2f:18:81:bb:c5:6b:85:d5:ec:62:c1:59:5c:60:
         c2:f1:7b:89:42:6a:0c:4d:7a:8f:30:41:9d:f6:9e:3b:9f:f0:
         8b:44:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:32:53 2025 by rpki-client