Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
File:                     bT7hpSpdZbkJHeWltGT7lwMtDps.cer (raw, json)
Hash identifier:          JuS/benfx1xGLA/8oO3znhrCIMVyAmVdz1o1DPpCUz8=
Subject key identifier:   6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019367AFDF4C648871FB59E70D53FE2C7EDA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 26 Nov 2024 08:56:39 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2a00:12f0::/32
Validation:               Failed, certificate revoked on Tue 26 Nov 2024 09:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:af:df:4c:64:88:71:fb:59:e7:0d:53:fe:2c:7e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 26 08:56:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d3:7c:91:c1:86:1c:32:5f:a9:e3:7b:8e:c5:
                    f8:2b:39:f2:9a:d5:c8:24:fb:e1:ab:f9:b5:52:5b:
                    3a:b0:19:de:c1:ed:24:d8:4f:9e:0d:61:d0:1c:7d:
                    df:ce:ca:e3:66:ac:08:74:7c:9c:2d:7f:0b:9b:81:
                    01:7f:b2:2a:d1:71:02:4b:6c:21:b8:32:41:69:a3:
                    1e:31:cb:0a:36:58:ff:17:23:b8:64:25:63:4f:14:
                    13:09:6f:e1:06:89:6f:fa:57:a4:e5:23:6e:8e:f2:
                    af:6d:3b:0b:49:ee:55:09:ae:8a:5a:57:79:14:85:
                    17:93:a5:b0:33:de:d9:8c:d9:89:cf:47:c6:80:52:
                    41:9f:9d:c1:21:db:8f:0b:1f:c9:e5:c2:73:57:91:
                    16:3c:12:40:3f:70:38:38:5c:66:be:d1:eb:14:a5:
                    3a:ac:10:67:0b:0f:24:6f:68:7d:f0:a0:0c:ae:1a:
                    74:d0:5c:aa:86:c0:50:3a:d5:c4:e8:05:8a:7a:6a:
                    e9:76:b3:8c:d7:72:2d:a7:18:7e:2d:b9:c1:22:e8:
                    f7:d2:05:3b:4b:ab:1a:7b:ba:f6:09:fa:b5:7c:04:
                    77:ee:7b:d4:4f:a9:d2:48:7f:49:f7:36:83:9c:2f:
                    45:4d:cc:98:9e:5a:39:c9:24:32:9d:b9:37:d6:de:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:12f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:07:7d:c2:48:59:20:4b:e2:88:21:48:f4:11:8c:be:64:e4:
         f0:d7:ce:55:f6:04:33:6c:8a:e7:74:6d:9a:77:86:f7:58:46:
         3a:14:f1:f6:91:49:44:58:0c:ce:a5:35:e5:17:d8:86:69:18:
         a6:00:c1:ec:78:6a:b2:1f:42:55:04:75:26:33:0e:58:8a:67:
         8d:8d:7c:b5:d1:d0:22:20:d9:9a:dc:6a:ef:cd:c3:0f:07:d8:
         f6:93:41:89:58:f7:36:3e:af:d3:c3:86:61:9f:67:73:3d:23:
         f7:17:4e:43:4c:bb:e8:57:ee:e2:e5:89:02:39:f9:12:90:5f:
         0c:1f:b2:fd:56:39:d0:bf:c0:18:01:96:2e:e7:6c:c6:69:1f:
         ad:9c:29:57:1d:bf:33:03:2f:66:9a:77:ff:95:7b:66:e4:a5:
         e9:95:29:4c:73:8b:f3:26:66:ba:bd:33:05:12:34:37:5a:c7:
         16:85:c3:b0:fb:27:45:27:5b:6a:e8:4a:99:0d:7d:08:c9:7a:
         65:02:0f:3c:58:dd:8a:88:ae:76:da:00:64:27:9f:28:55:d8:
         24:e5:b8:ee:ef:b9:aa:ee:1c:2d:6c:94:20:56:02:33:bc:b0:
         47:c0:89:68:e6:bc:83:65:ed:a1:e0:1e:5b:17:86:17:06:8e:
         0a:97:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:38 2025 by rpki-client