Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j0Pkp7hetdjNNr7S_wWk_AM0pyA.cer
File:                     j0Pkp7hetdjNNr7S_wWk_AM0pyA.cer (raw, json)
Hash identifier:          XPv/3TvU83tv4QGJqZVn4aU4lvO7b7+xeZdnFSvXGAM=
Subject key identifier:   8F:43:E4:A7:B8:5E:B5:D8:CD:36:BE:D2:FF:05:A4:FC:03:34:A7:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228E249C4E49106E4BDDDB40F7A00BDD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/77/ca0206-f4dd-47d1-90e7-eadee6fcce85/1/j0Pkp7hetdjNNr7S_wWk_AM0pyA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/77/ca0206-f4dd-47d1-90e7-eadee6fcce85/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201245
Validation:               Failed, certificate revoked on Tue 07 Jan 2025 09:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:24:9c:4e:49:10:6e:4b:dd:db:40:f7:a0:0b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8f43e4a7b85eb5d8cd36bed2ff05a4fc0334a720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:aa:bb:79:ec:ac:f8:b6:d2:f4:a7:aa:4a:
                    10:15:e3:e4:76:ce:02:e3:37:06:66:5f:43:c7:97:
                    0c:c0:3d:2f:29:1c:25:f3:4e:19:e3:7f:77:24:66:
                    c6:7c:d3:af:0b:d8:f0:62:52:2e:e2:4e:ae:b2:19:
                    53:93:66:4d:aa:14:36:ae:56:3c:02:85:53:44:0b:
                    bb:71:d4:56:78:1f:f7:d6:f7:52:e1:c3:3b:36:04:
                    b3:cc:74:5e:39:1e:72:02:d3:ee:45:b6:75:74:a3:
                    e7:59:9c:34:87:64:b6:76:31:24:63:49:d8:33:a6:
                    e4:c4:a4:84:3b:c7:e4:66:9c:99:95:41:8e:7e:76:
                    98:07:7d:9b:c4:7f:a2:34:1d:35:f6:f0:a0:df:cf:
                    f6:80:a2:23:16:02:81:28:b8:dd:c8:a0:a1:44:54:
                    0d:7b:65:ef:17:c4:48:1d:c2:7c:6b:60:a6:a1:7d:
                    2c:f8:f4:76:b6:65:bc:d0:88:53:71:44:e8:9f:b2:
                    48:88:7c:54:5e:b6:c5:61:02:ba:35:56:69:49:82:
                    f6:a9:66:4b:a3:b8:e8:85:40:a8:a1:f3:40:96:a2:
                    d5:7f:39:75:3d:95:a0:45:fb:ac:9c:b3:3c:c8:ff:
                    4e:85:0b:53:28:8a:e4:17:5a:34:09:6e:9b:25:f5:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:43:E4:A7:B8:5E:B5:D8:CD:36:BE:D2:FF:05:A4:FC:03:34:A7:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ca0206-f4dd-47d1-90e7-eadee6fcce85/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ca0206-f4dd-47d1-90e7-eadee6fcce85/1/j0Pkp7hetdjNNr7S_wWk_AM0pyA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201245

    Signature Algorithm: sha256WithRSAEncryption
         6f:7e:4c:b8:fa:bf:e3:b9:1f:4c:5d:59:a1:84:72:44:08:ea:
         71:5c:e8:71:3f:bb:1a:0b:bf:9f:f3:78:ad:4f:e6:d7:03:cf:
         5d:98:10:f8:c0:da:0d:7c:ae:0e:34:39:41:91:e1:4c:f9:ea:
         ce:40:c7:5c:c8:db:a6:c7:21:e0:a6:86:9b:4f:d9:1f:78:46:
         c6:79:e0:76:3b:d2:a9:02:a9:07:4b:7e:e7:21:ac:ad:d5:ff:
         7a:0f:bc:60:27:7b:ae:31:ed:5b:82:74:ea:42:0b:06:3c:60:
         62:3e:1c:9a:a2:08:b8:6e:88:ca:4a:c7:5a:90:83:ec:d3:b5:
         e3:eb:9e:49:df:2c:21:29:08:f4:e0:3b:49:ca:49:a4:58:37:
         53:61:cd:5a:c3:9a:25:1f:3d:27:7d:eb:70:f4:d7:9b:cd:cd:
         d1:2f:66:6b:aa:9e:b4:36:88:56:95:42:9c:93:88:43:7b:9b:
         b8:67:96:37:58:95:b5:26:f7:b2:e2:d6:b4:67:3d:5e:f7:ee:
         82:7d:ba:82:0b:98:2f:f8:6f:b2:7c:28:c8:9e:73:da:12:88:
         8b:0c:2c:e4:aa:31:c0:b3:c6:17:1b:64:15:b7:38:58:a7:06:
         4e:15:27:d2:2e:fb:7b:94:85:8d:80:92:cb:8d:c3:4b:d2:6e:
         5b:d5:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:29:43 2025 by rpki-client