Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6Ui055-P6jty_wIpWFD1TpHfPk.cer
File:                     a6Ui055-P6jty_wIpWFD1TpHfPk.cer (raw, json)
Hash identifier:          RkZa5bpLJYPxvyBrxmSS+uarqHA9/aiYHl++nd0movE=
Subject key identifier:   6B:A5:22:D3:9E:7E:3F:A8:ED:CB:FC:08:A5:61:43:D5:3A:47:7C:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194C47E9B1BB19263A507C1F5D1C83CCDC3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/04db4a-1a07-4409-81e0-e77dd3cf51ea/1/a6Ui055-P6jty_wIpWFD1TpHfPk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/04db4a-1a07-4409-81e0-e77dd3cf51ea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 02 Feb 2025 02:30:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216099
Validation:               Failed, certificate revoked on Sun 02 Feb 2025 11:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:7e:9b:1b:b1:92:63:a5:07:c1:f5:d1:c8:3c:cd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  2 02:30:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6ba522d39e7e3fa8edcbfc08a56143d53a477cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:36:83:2f:3f:6b:80:19:48:0a:f1:ae:70:
                    2e:29:af:dd:dc:f8:e5:4c:09:61:21:7d:11:c3:b6:
                    3e:52:89:55:20:ac:06:81:74:e9:87:9a:97:29:df:
                    97:87:76:99:44:4d:61:7d:5b:fe:0e:35:41:a6:15:
                    d4:94:52:b4:64:00:27:54:51:ae:2f:7a:81:af:c0:
                    87:25:e0:c3:18:f7:c9:42:28:d0:36:dd:f8:dc:ac:
                    99:6f:7f:ad:d4:e9:f3:3c:fb:e6:1d:d7:09:c9:06:
                    c6:73:37:55:13:5d:42:55:1e:d0:2c:4d:c0:aa:c7:
                    f7:b6:c6:5d:29:60:68:98:32:80:14:c9:9d:fc:13:
                    29:a6:3c:c2:8f:16:8b:74:31:98:cb:e8:cd:19:df:
                    7f:57:5e:df:49:a8:7a:92:51:dd:90:02:aa:7a:1a:
                    c3:5c:d4:80:2c:2a:34:71:72:b2:f9:f4:62:02:2a:
                    82:6c:88:83:b3:05:86:c6:da:9c:80:91:4a:a0:d0:
                    76:7b:c3:03:93:86:4f:c5:e4:0a:dc:34:d8:ce:21:
                    a5:b5:c9:b5:6c:e6:59:8e:c3:57:e7:46:a0:5c:3f:
                    73:58:87:89:5f:60:a6:bd:ab:77:7f:a2:49:6e:18:
                    88:40:33:bd:f2:df:0b:da:a1:62:0e:c3:4e:26:b4:
                    37:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A5:22:D3:9E:7E:3F:A8:ED:CB:FC:08:A5:61:43:D5:3A:47:7C:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/04db4a-1a07-4409-81e0-e77dd3cf51ea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/04db4a-1a07-4409-81e0-e77dd3cf51ea/1/a6Ui055-P6jty_wIpWFD1TpHfPk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216099

    Signature Algorithm: sha256WithRSAEncryption
         8e:fb:4b:3e:ba:00:db:b6:c1:7c:2f:c9:e7:8b:26:f8:b7:f9:
         2b:98:b0:f0:96:bb:87:ad:c4:5a:b8:34:e7:a1:04:cb:8c:db:
         02:e6:b7:35:98:3c:db:4b:d3:a1:b9:39:6b:70:65:0e:32:1b:
         23:ee:34:cd:01:ea:f3:15:e9:34:ec:f4:f5:03:bf:4e:74:26:
         c1:42:2e:4c:e0:2c:ec:47:54:b7:e8:69:3d:e4:79:57:f6:d7:
         7d:27:e0:d2:7f:98:cd:0b:b3:1b:30:6f:00:8b:19:e8:26:60:
         b0:d3:40:45:86:fd:b3:d0:1d:c8:c0:17:72:a4:bd:3d:fa:6f:
         09:f1:26:13:d6:2b:78:31:df:2b:2e:9e:49:f7:3e:e0:a9:70:
         11:91:93:7f:20:f9:24:dc:da:7f:f0:b4:2b:db:37:6e:70:75:
         12:65:aa:bd:f5:87:b2:88:0f:09:da:a7:98:0e:08:e1:a5:27:
         8e:0c:3e:ec:c7:ae:f9:15:a7:b8:59:ff:05:2e:4c:4e:a4:1a:
         c1:67:f3:8f:70:58:a5:81:92:61:b1:dc:3b:33:80:fe:53:b1:
         2d:3e:6b:f4:87:68:6b:93:08:27:c2:89:ea:16:3d:a8:66:72:
         63:2b:df:4b:63:6e:51:24:60:5e:0f:73:5e:8d:40:4d:34:04:
         8d:a6:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:40:54 2025 by rpki-client