Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dvbJ0kpLguxXuKjynF353O6apqk.cer
File:                     dvbJ0kpLguxXuKjynF353O6apqk.cer (raw, json)
Hash identifier:          fVDFZgBGxunaMsvnN2zzL4o5w8AGsIFMOoOH/v56juY=
Subject key identifier:   76:F6:C9:D2:4A:4B:82:EC:57:B8:A8:F2:9C:5D:F9:DC:EE:9A:A6:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019860E6FC178F8543CDE1D59BC91E58338C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.signalx.ro/repo/signalx-rpki/2/76F6C9D24A4B82EC57B8A8F29C5DF9DCEE9AA6A9.mft
caRepository:             rsync://rpki.signalx.ro/repo/signalx-rpki/2/
Notify URL:               https://rpki.signalx.ro/rrdp/notification.xml
Certificate not before:   Thu 31 Jul 2025 14:33:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206788
                          IP: 2001:67c:28d4::/48
Validation:               Failed, certificate revoked on Sat 02 Aug 2025 01:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:60:e6:fc:17:8f:85:43:cd:e1:d5:9b:c9:1e:58:33:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 31 14:33:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=76f6c9d24a4b82ec57b8a8f29c5df9dcee9aa6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e4:a2:f8:03:69:f2:43:96:a1:3b:03:f8:03:
                    b4:9a:80:e1:79:f2:49:69:73:08:b4:e6:49:26:06:
                    5c:14:6f:2b:44:af:7d:70:41:2c:68:8d:58:45:3e:
                    1f:0e:76:59:33:a9:08:b5:f8:96:d0:36:76:28:d8:
                    79:3b:44:e2:f9:05:c1:02:df:f2:90:38:63:46:24:
                    1f:55:7a:59:a7:db:14:d0:94:1f:a3:af:9e:d6:a4:
                    7b:63:16:da:b9:64:71:91:f3:6c:73:73:fd:c9:e5:
                    58:f6:29:74:f4:d9:5d:54:44:c0:e5:7b:47:6f:33:
                    a1:c8:3d:66:69:ee:e8:a9:b4:f6:f0:06:cd:c6:9f:
                    4e:e3:36:c3:ab:b9:35:20:1c:d7:61:7a:92:f3:9b:
                    dc:f0:23:0d:90:33:1a:d2:e9:82:02:a4:4b:5d:e0:
                    51:4a:3d:37:8d:6d:c2:46:39:89:d0:2d:88:06:a1:
                    68:8d:6e:34:ce:68:81:09:b0:33:b2:fd:be:0f:ef:
                    23:f4:b2:de:5d:f3:0e:1e:33:7b:0e:c3:ba:b0:7e:
                    44:20:aa:cb:02:f5:75:93:5a:0e:af:68:9d:29:57:
                    37:b3:45:99:71:0b:7d:ea:77:a1:76:24:28:55:eb:
                    b1:1c:b9:5b:1a:44:53:2e:cc:84:51:b2:e1:da:33:
                    5c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F6:C9:D2:4A:4B:82:EC:57:B8:A8:F2:9C:5D:F9:DC:EE:9A:A6:A9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/2/
                RPKI Manifest - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/2/76F6C9D24A4B82EC57B8A8F29C5DF9DCEE9AA6A9.mft
                RPKI Notify - URI:https://rpki.signalx.ro/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:28d4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206788

    Signature Algorithm: sha256WithRSAEncryption
         99:12:2a:48:3f:b6:60:7a:53:02:b6:0f:7f:67:09:37:83:b3:
         42:af:74:93:95:11:30:97:25:73:2c:96:36:95:de:b0:b5:d8:
         d7:93:c5:9a:d7:3a:62:90:51:a4:02:ca:c8:8f:4b:ce:b9:3f:
         d2:7a:2e:36:67:67:75:77:92:a1:8b:3a:de:da:7c:c5:2d:86:
         db:05:43:45:84:ea:f8:28:84:76:90:73:61:d8:a6:0b:c6:d8:
         f6:c6:83:b7:7d:76:f6:34:8b:71:fc:6a:2c:51:ec:e5:a6:0e:
         34:17:4d:50:bd:a5:58:e5:ba:f0:1a:4c:05:89:b2:17:2c:4a:
         75:c9:e8:a8:8d:3b:88:ef:ce:67:db:f6:f4:36:09:da:9e:c2:
         d1:0d:df:41:c7:6b:83:77:f3:79:df:09:40:01:7f:6c:ea:5c:
         a1:03:15:13:22:fe:d8:27:f2:05:5f:51:85:69:35:e1:59:ed:
         89:ec:30:39:a1:fc:17:43:2c:40:91:0b:f4:05:9e:d6:55:ab:
         6d:d3:7e:e5:1b:61:c5:5c:64:a5:5f:27:40:f2:22:62:a3:19:
         7d:0c:37:dd:61:67:5d:64:34:45:db:95:22:da:75:46:fd:5a:
         06:4a:37:c5:82:88:36:e4:2f:de:ee:f3:38:d8:8a:6e:df:c2:
         61:ab:32:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 23:01:44 2025 by rpki-client