Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kJf5cjfvNm3lq211ju5UPgjVf1w.cer
File:                     kJf5cjfvNm3lq211ju5UPgjVf1w.cer (raw, json)
Hash identifier:          uYslvPBXCwxS0S+FwaARpzATDitfItUTmyk8kDHo2gw=
Subject key identifier:   90:97:F9:72:37:EF:36:6D:E5:AB:6D:75:8E:EE:54:3E:08:D5:7F:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01921EFC7CD631081D51C066BD624CFA6A0B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/kJf5cjfvNm3lq211ju5UPgjVf1w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 13:05:16 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2a03:bc80::/29
Validation:               Failed, certificate revoked on Mon 07 Oct 2024 10:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:1e:fc:7c:d6:31:08:1d:51:c0:66:bd:62:4c:fa:6a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 23 13:05:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9097f97237ef366de5ab6d758eee543e08d57f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:eb:0c:0b:56:51:6d:67:dc:69:65:0c:2a:
                    ec:27:9c:fe:ff:e8:08:07:96:4e:9a:ee:55:f8:05:
                    14:1a:b6:19:73:21:02:d5:a9:86:e6:12:b2:22:4a:
                    d8:a2:16:30:04:18:d6:2f:60:08:de:75:04:92:d3:
                    67:40:ac:c4:0f:7c:35:c4:b6:b4:94:f1:63:67:76:
                    99:05:07:52:ef:2b:61:98:95:e9:98:2e:05:f6:34:
                    7e:4f:5d:4e:cb:38:5c:e7:bb:a4:79:5c:05:fa:07:
                    7d:b2:b2:99:bd:91:6c:18:eb:96:b4:1f:a3:8f:f4:
                    8e:37:5d:89:39:54:9d:33:c2:1b:4a:b0:ac:66:65:
                    f4:08:89:9c:a3:73:df:65:fa:8c:41:3d:07:0b:3c:
                    88:ac:0e:3f:04:3d:bd:75:4c:8a:48:4e:92:b9:3e:
                    3a:4b:86:08:f0:1f:79:dd:aa:0d:50:39:10:11:8f:
                    e1:ba:55:fb:88:99:02:6d:29:d3:79:a3:ab:c0:76:
                    96:2d:f2:c4:04:7b:f3:88:bc:20:4e:29:49:87:58:
                    cc:87:96:e9:2e:61:ab:d3:a9:54:48:5a:ae:9c:5f:
                    2a:59:b4:ac:df:45:6d:79:0b:8c:5e:00:c2:db:40:
                    09:85:6d:a1:8e:96:f6:85:6d:aa:2d:9e:d3:d5:2c:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:97:F9:72:37:EF:36:6D:E5:AB:6D:75:8E:EE:54:3E:08:D5:7F:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/kJf5cjfvNm3lq211ju5UPgjVf1w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:bc80::/29

    Signature Algorithm: sha256WithRSAEncryption
         93:35:ee:8b:80:8b:96:59:87:11:9d:ab:96:b8:c1:a5:61:5c:
         4e:ac:d6:8e:ff:96:a1:e3:33:48:36:ee:a8:b4:d8:bc:1a:3f:
         5f:09:47:e7:e6:62:8f:91:93:b2:05:df:b6:20:d8:1d:5f:2e:
         5a:3a:f9:c5:04:c6:f7:8e:59:52:85:d6:ac:52:bc:da:cd:4f:
         81:cc:5d:e9:73:2b:e6:0a:b6:32:37:7f:b1:8f:28:98:6a:0e:
         1b:d8:c5:0b:2f:0b:f0:f8:c1:c3:76:d6:7e:1d:6d:48:aa:71:
         6d:b8:41:a3:9a:5d:c7:a6:a7:d7:03:06:39:fe:b2:be:3d:d8:
         47:f7:ab:df:e5:18:7b:3f:58:af:e9:22:ce:ef:a6:30:d8:9d:
         b9:f5:8f:5b:05:10:0b:50:4b:74:1e:60:ad:27:2a:db:e5:6d:
         02:67:cc:15:e1:6f:18:a3:11:78:3e:79:1a:df:66:5a:c1:1d:
         5e:8e:bd:30:d7:67:6e:e4:07:0d:2d:62:89:21:97:3c:0e:15:
         55:46:4c:e8:1f:64:02:ff:bf:c9:33:9e:c9:0f:42:1e:71:2d:
         a4:1b:60:32:0c:be:88:e5:08:68:52:56:42:c5:32:38:62:cb:
         52:56:bf:f9:14:61:84:5a:d9:4f:8e:0b:46:e2:85:8c:f6:e9:
         67:2c:53:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:55:24 2025 by rpki-client