Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer
File:                     cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer (raw, json)
Hash identifier:          hrr53EE5qSjyhqA+B9rdWkFXwe/ZJUL1johxQMX2lbU=
Subject key identifier:   70:E5:A0:61:31:56:70:B5:BF:26:E2:77:C9:2C:38:94:D7:2C:D3:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F137166120EB17EEB01616B1E56113A41
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 29 Jun 2026 12:53:46 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 185.247.126.0/24
Validation:               Failed, certificate revoked on Mon 13 Jul 2026 14:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:71:66:12:0e:b1:7e:eb:01:61:6b:1e:56:11:3a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 29 12:53:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=70e5a061315670b5bf26e277c92c3894d72cd3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:da:1b:93:ee:e4:32:af:59:ff:2a:92:13:37:
                    ed:b8:ab:6b:f1:15:a5:b5:69:20:66:3e:01:1e:f0:
                    b7:51:fc:ce:1f:20:bf:ec:92:00:6d:ee:ad:4d:8f:
                    b6:f7:cd:85:49:23:59:8b:06:bc:4d:60:ed:0e:1d:
                    0f:2d:ff:38:fc:14:22:76:ec:88:94:d8:30:5c:b9:
                    f5:85:13:42:14:68:ae:db:33:09:79:b4:b7:dd:28:
                    b8:79:ad:d6:fe:c0:56:40:35:f2:b0:1b:03:8f:4a:
                    74:05:48:b7:1f:cf:b0:47:9c:ec:2b:cc:16:5a:47:
                    f5:64:65:7d:1e:c9:61:b8:4f:d0:d8:74:8a:59:31:
                    6f:88:ff:8f:e2:5b:58:95:1a:6a:6b:67:06:5e:c4:
                    12:34:32:95:b7:fe:39:e4:15:e5:59:2e:ca:3f:a0:
                    3b:ae:fb:8c:21:fc:a2:1f:3c:87:83:d1:2e:50:6e:
                    13:df:48:30:7b:6f:19:d1:e3:0e:18:64:5e:a4:cb:
                    32:f7:d8:17:c2:23:0a:2d:e5:b6:bf:19:bc:bc:60:
                    78:50:7d:6e:b9:88:50:ca:90:90:de:50:ec:b2:b4:
                    e3:87:f5:89:3b:f7:04:a2:e6:7e:5b:4f:9f:b7:f4:
                    49:bc:c5:7c:c9:35:b4:f5:08:a3:e2:b8:5d:04:1b:
                    13:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E5:A0:61:31:56:70:B5:BF:26:E2:77:C9:2C:38:94:D7:2C:D3:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.247.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:98:0e:39:4e:a4:a8:d6:8c:3e:b5:69:bd:45:93:04:1a:fe:
         04:bc:0c:64:78:f4:48:09:8d:b4:7a:e1:c8:93:ff:8c:3e:62:
         30:45:aa:ca:34:16:31:e1:e5:80:be:87:71:fe:50:b7:9b:a2:
         18:dd:96:50:72:e0:6e:5b:9c:c6:95:5d:4c:25:f0:2f:06:05:
         05:dc:85:2f:49:cd:58:5e:17:a3:e7:ef:4b:93:2f:e8:fc:05:
         5f:ae:c4:3a:9b:e2:97:36:6c:1a:a7:fc:a4:1c:57:f3:59:d4:
         d3:ac:bd:c9:eb:95:aa:1c:fb:f1:bf:48:bc:dd:34:2d:fa:38:
         71:11:c6:1d:8d:bf:d3:fc:44:75:0a:e7:2f:34:47:ee:dc:90:
         94:a5:e8:04:28:ef:9a:3b:04:8c:c7:6f:f5:2c:ee:1d:72:5d:
         19:22:06:a9:0b:43:2d:a0:68:de:d2:72:a8:c3:5a:82:65:29:
         57:9c:3f:fd:cb:5b:5a:22:65:23:59:d5:2c:8b:f9:8d:07:e0:
         7b:dc:ca:f7:fe:6f:32:72:03:d0:0c:56:63:5c:1a:c0:20:67:
         7e:07:99:c0:b3:cc:00:48:a2:64:78:16:81:81:13:cf:de:de:
         70:29:bd:3d:ee:36:53:7d:7e:2c:19:7f:13:82:ce:ba:f2:97:
         d7:5f:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:57:46 2026 by rpki-client