Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XSvcBbOGzcqZqhwmOOCX2fVKZBM.cer
File:                     XSvcBbOGzcqZqhwmOOCX2fVKZBM.cer (raw, json)
Hash identifier:          1+KxOPl2kH98y1hJyIcFaEnZbvn4f7jTP73/PINxrSs=
Subject key identifier:   5D:2B:DC:05:B3:86:CD:CA:99:AA:1C:26:38:E0:97:D9:F5:4A:64:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258E7ADD77AE2BFB7AE0314D4C3A6F8C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/XSvcBbOGzcqZqhwmOOCX2fVKZBM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215829
Validation:               Failed, certificate revoked on Tue 07 Jan 2025 10:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:7a:dd:77:ae:2b:fb:7a:e0:31:4d:4c:3a:6f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5d2bdc05b386cdca99aa1c2638e097d9f54a6413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:8e:33:0b:ad:0b:04:3d:a7:ac:8f:3e:b1:
                    26:99:40:53:09:5e:23:b4:28:70:81:1d:80:62:86:
                    39:3f:22:80:f3:88:16:ac:05:5d:0f:62:4b:26:f5:
                    b0:20:2d:18:d3:0f:39:ff:93:08:bc:2a:17:8c:f8:
                    69:13:56:55:b4:ff:99:54:ff:0a:ac:2e:5a:19:27:
                    3c:d7:de:f0:3b:53:5f:83:59:da:eb:d0:af:ae:00:
                    9b:85:b4:9d:ce:c5:72:ec:a2:41:8a:44:0a:4e:53:
                    8b:8c:f9:3a:db:2c:e1:31:8e:8e:fe:07:24:92:51:
                    6f:1b:27:6a:a5:2b:7d:f3:66:cf:c6:21:84:3c:8f:
                    ca:ef:1e:3e:84:12:68:0f:44:5a:2b:21:40:17:50:
                    c1:06:5c:42:c3:65:91:c7:fb:f0:83:c6:7c:4a:de:
                    79:57:95:09:0f:b1:56:68:b4:3c:43:2e:43:ae:f8:
                    24:d9:18:a7:00:52:bd:55:db:a7:49:07:55:2d:f6:
                    bd:f8:4b:a6:fe:de:13:f1:ea:1f:c6:94:2e:4c:f9:
                    66:ba:10:83:6f:10:aa:77:6b:2d:7c:c6:03:f8:6f:
                    1f:3a:d7:e0:dc:bb:ec:d9:cb:b4:88:4d:c0:05:d0:
                    5d:4e:d1:e9:a4:0f:2a:06:ab:a7:a6:66:fa:b7:c9:
                    3f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2B:DC:05:B3:86:CD:CA:99:AA:1C:26:38:E0:97:D9:F5:4A:64:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/XSvcBbOGzcqZqhwmOOCX2fVKZBM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215829

    Signature Algorithm: sha256WithRSAEncryption
         0e:db:c4:4d:d3:e0:b6:27:6a:26:b5:4d:1d:60:40:2d:84:9b:
         4c:56:ca:f3:b9:6f:78:22:b1:59:1c:ed:66:ef:f3:89:80:8f:
         f6:c1:46:27:0b:4c:1d:60:3b:ed:d1:07:d8:83:ed:a4:da:f1:
         a6:46:0a:0d:40:f5:bf:e0:fa:80:b1:99:12:17:3c:0f:6b:41:
         c1:24:11:fd:69:43:5b:25:19:4e:05:8f:e4:90:a1:64:8e:e0:
         f9:cf:b4:9f:f7:b0:95:64:be:ca:02:63:fc:17:2d:a3:24:9a:
         f0:dc:69:dc:79:b1:2c:19:31:3b:c1:61:96:d7:1f:83:00:16:
         9c:8e:22:19:f8:a7:7a:c8:d9:23:d4:e5:ed:16:45:03:85:64:
         1f:c0:ba:8a:b2:fd:e1:b1:04:56:33:71:6d:51:a3:1a:a7:07:
         d6:ec:e2:0f:ce:fa:91:56:c4:fb:9b:e0:d2:d6:41:0e:46:95:
         3f:3a:43:9e:43:4d:30:e7:eb:1a:c4:86:f4:7a:48:e6:d2:fd:
         90:39:0f:2f:27:9c:b7:17:1c:1c:36:1e:c5:41:43:a8:83:e2:
         54:0a:61:e4:75:10:ad:5d:fb:95:63:de:c1:45:16:85:90:c2:
         87:b3:d4:55:9b:97:2f:67:fa:82:e2:66:bf:9e:4d:4c:41:fb:
         08:a1:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:06:19 2025 by rpki-client