Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XOpIaZvRUBgukZEQh8QIxKuhzTA.cer
File:                     XOpIaZvRUBgukZEQh8QIxKuhzTA.cer (raw, json)
Hash identifier:          WYDj4jaeBJuvYvkiCEAqD8AxSHxXo438KMHGx+leA5A=
Subject key identifier:   5C:EA:48:69:9B:D1:50:18:2E:91:91:10:87:C4:08:C4:AB:A1:CD:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC84EAE6E7A7D93440C4210CC644A6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197740
Validation:               Failed, certificate revoked on Fri 10 Jan 2025 10:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:84:ea:e6:e7:a7:d9:34:40:c4:21:0c:c6:44:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5cea48699bd150182e91911087c408c4aba1cd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:08:58:8a:c9:c0:1d:c5:8c:b5:b3:80:bf:
                    db:5d:fd:c1:c7:6c:0c:12:05:7f:8a:be:36:fb:d2:
                    f2:d1:94:c8:21:64:1d:78:11:20:3f:3e:52:4d:2e:
                    bf:14:a4:ba:4e:33:98:46:f5:c8:4c:fa:cf:0b:71:
                    10:72:3b:df:d2:32:6c:32:ca:dd:2b:aa:62:ab:38:
                    fc:0d:4c:70:13:45:73:e4:8b:ea:05:de:73:b4:82:
                    8d:00:d7:52:eb:19:d7:ca:74:d0:9c:aa:b7:6e:0f:
                    a9:25:35:18:79:eb:bc:b5:a3:33:04:e1:18:e0:1b:
                    57:a0:d7:c6:82:da:d4:ac:52:26:65:ce:22:3a:38:
                    05:ad:bd:fc:76:ec:86:7e:f6:90:67:93:d8:65:05:
                    aa:8a:7e:7f:02:47:10:7d:aa:3d:42:d2:d4:39:a9:
                    e2:17:e5:3d:94:e0:89:0f:39:28:80:7d:ff:29:0c:
                    88:22:45:cb:54:1d:33:33:2c:9a:50:d2:5b:01:10:
                    e2:a3:fb:96:f2:ef:ba:1c:ba:da:a9:d1:77:e4:7e:
                    a2:26:fa:b7:d3:06:37:a3:8e:e2:d7:1a:21:a8:51:
                    ac:fa:c8:32:a2:19:39:43:8f:d0:2e:fd:0b:52:82:
                    af:b5:24:72:5c:a4:30:c7:11:ef:c0:48:71:b2:d0:
                    ea:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EA:48:69:9B:D1:50:18:2E:91:91:10:87:C4:08:C4:AB:A1:CD:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197740

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:74:6f:ef:4a:c6:19:15:ea:4e:07:27:21:3e:48:b6:21:
         43:5e:69:ef:14:2a:e5:9d:a3:e7:95:a3:6d:d9:8e:0d:29:fe:
         ce:19:a5:34:77:78:43:b3:bd:37:7f:d3:53:9e:89:9c:31:38:
         e0:d2:a2:c2:ad:d8:fe:04:4c:53:de:41:08:0b:e2:70:6d:68:
         b5:51:ff:5d:da:49:c1:b1:4b:6f:63:fd:e5:88:d6:22:98:b6:
         b8:f1:ee:72:37:2e:ab:62:21:6a:f4:9b:5d:7f:8e:d4:3b:ad:
         e9:79:ed:66:80:56:25:35:60:b8:0f:6d:7d:02:70:d7:10:8d:
         06:4c:a0:04:a2:97:8a:54:39:69:18:47:b6:68:2e:ae:bd:bc:
         30:4c:68:b9:c0:05:2b:18:be:41:b9:62:b0:6c:76:68:d2:ed:
         b7:c6:0e:ec:f9:97:5d:d5:0e:66:c3:d9:cb:15:b1:7f:ca:a0:
         d7:43:a0:1a:1a:a7:04:b5:6e:b7:b5:00:42:11:2c:2a:5a:33:
         29:c5:6f:bd:a7:14:67:ad:b0:ee:d2:1b:70:4c:d2:7a:13:d9:
         4d:9c:23:d2:f5:0d:d6:d2:33:87:aa:fc:98:ef:64:ad:a0:0f:
         0e:61:ee:6e:c1:d2:65:e5:8d:15:8d:01:c5:9e:1e:4b:51:1e:
         0e:34:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:58:50 2025 by rpki-client