Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gq-w1o12dTGQWAttfVTLTGJnS0o.cer
File:                     gq-w1o12dTGQWAttfVTLTGJnS0o.cer (raw, json)
Hash identifier:          pO/vD+9ucjsy8dN7rOVJJ3Xo191kYh8LMqlmt8hu70Y=
Subject key identifier:   82:AF:B0:D6:8D:76:75:31:90:58:0B:6D:7D:54:CB:4C:62:67:4B:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA570CEB9C302D443FF34E54F73516
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211905
Validation:               Failed, certificate revoked on Fri 31 Jan 2025 12:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:57:0c:eb:9c:30:2d:44:3f:f3:4e:54:f7:35:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=82afb0d68d76753190580b6d7d54cb4c62674b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b9:4a:e8:bc:6e:16:91:bb:02:43:71:41:61:
                    0b:da:1d:0e:12:91:44:83:ae:78:75:76:89:a6:8d:
                    24:c0:02:f3:38:c2:ba:65:3d:7b:6b:4f:51:c3:bb:
                    84:97:ed:2a:9c:20:d1:22:44:0c:2e:ad:0a:37:22:
                    3e:44:79:3e:22:39:e1:a8:1b:d9:02:3e:e0:8c:da:
                    c8:1d:fd:e3:7d:51:d2:f6:35:45:6b:30:39:21:1f:
                    8d:3b:fb:cc:86:52:98:e5:3e:eb:c6:f7:7b:12:6e:
                    55:ad:92:22:a5:46:ba:8a:bf:d4:a1:e2:39:e9:b9:
                    4e:73:b2:0b:3d:2c:c0:3b:1e:88:11:3a:ff:25:a0:
                    89:69:4d:21:e9:ea:d5:ab:99:fa:a9:02:65:f6:10:
                    a9:ac:e4:32:46:12:82:41:87:24:b6:d1:24:c8:00:
                    b0:aa:7a:63:d6:1b:17:85:95:1f:1e:65:61:34:73:
                    92:12:e3:9d:56:53:c0:7a:03:24:8e:cb:aa:69:c9:
                    a3:b2:d7:35:9d:a4:d3:63:72:03:a0:a9:8f:9c:a2:
                    44:65:dc:f3:a3:7a:19:e9:4d:2d:37:50:b1:91:e4:
                    bf:5f:4a:38:2f:b8:b8:af:d8:af:00:54:9a:8f:77:
                    49:f1:f2:05:89:aa:40:65:5d:44:ea:9c:2b:1a:05:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AF:B0:D6:8D:76:75:31:90:58:0B:6D:7D:54:CB:4C:62:67:4B:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211905

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:4d:eb:bd:0f:18:bd:77:0a:99:31:a8:1b:08:f5:41:d0:
         9c:98:95:28:f9:51:f8:22:42:e2:06:e2:69:fc:2b:a1:fb:07:
         01:c6:b3:b7:f6:17:d7:bb:04:ec:d7:bb:05:20:fb:d1:f3:ea:
         bf:e5:e0:50:f5:52:e0:45:9d:08:d2:6d:96:18:94:ee:94:12:
         7d:5f:63:56:6d:09:ea:57:ba:2a:a8:38:6e:36:29:2a:ec:c3:
         ef:ef:2b:85:6a:8e:c8:2c:f1:94:51:a9:6b:0e:e4:de:fb:31:
         be:db:15:92:c8:6a:f2:f6:0e:18:23:f8:1e:d3:b8:4d:51:b8:
         35:2d:91:eb:9e:8f:b0:4b:7d:1e:cf:f7:42:dd:79:f7:6c:b1:
         6e:4b:ec:57:6b:0f:3e:b5:ce:b5:0c:72:19:c6:19:3f:87:35:
         90:86:23:a6:29:d4:85:42:9a:c0:85:b0:69:40:5c:81:40:5e:
         5f:3c:c2:b5:d3:f7:70:f9:18:4d:6c:39:fc:47:2e:d4:2e:62:
         36:44:c8:59:50:15:82:4d:73:8b:86:55:7d:69:1e:82:68:6a:
         a9:8a:08:98:c2:5c:55:36:e0:2d:2c:83:13:cc:dc:f8:dc:d0:
         95:8c:56:59:c4:89:aa:67:a8:1d:a1:a0:79:dd:98:4d:bf:0d:
         7f:f8:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:07:30 2025 by rpki-client