Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lpNUGUJnQr91j4SE65ldaakM3oM.cer
File:                     lpNUGUJnQr91j4SE65ldaakM3oM.cer (raw, json)
Hash identifier:          LzjEFRDYUMdm3bPf/s7bTkcKyr8rcDfegZLkrtz0pTY=
Subject key identifier:   96:93:54:19:42:67:42:BF:75:8F:84:84:EB:99:5D:69:A9:0C:DE:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA47895FC3C8B427FB444070B47657
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/50f086-30c4-4d8e-97d3-fa8dcc5cc5d1/1/lpNUGUJnQr91j4SE65ldaakM3oM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/50f086-30c4-4d8e-97d3-fa8dcc5cc5d1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203083
Validation:               Failed, certificate revoked on Thu 09 Jan 2025 10:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:47:89:5f:c3:c8:b4:27:fb:44:40:70:b4:76:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=96935419426742bf758f8484eb995d69a90cde83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:95:49:2c:98:a8:32:89:c1:9b:98:32:af:
                    63:a3:dc:77:8b:ef:17:78:8b:96:5e:04:d8:0c:88:
                    b8:ea:ef:21:b9:49:93:be:c4:06:46:2d:5f:92:2e:
                    da:fe:cf:bb:c5:cb:e5:70:7c:2c:90:a5:c1:10:1d:
                    15:65:6e:c8:39:f0:74:3b:83:a3:9e:3c:ed:c0:b8:
                    35:82:41:df:24:96:0b:3e:73:50:0e:ec:1e:d5:e3:
                    39:1b:d2:0f:03:60:a5:de:0b:31:79:fc:37:3c:cf:
                    22:a8:a6:c3:35:36:c5:ac:ac:4c:7a:0d:51:35:d1:
                    f8:d0:b3:4c:1e:81:03:95:0a:00:f5:83:49:63:78:
                    8c:01:48:00:2d:25:eb:77:01:76:f6:60:df:15:63:
                    6c:f7:ce:c7:e8:c3:51:9a:da:49:dc:03:3c:f0:5b:
                    68:53:60:b1:58:5d:e7:76:df:d8:9c:1b:60:db:17:
                    75:21:08:70:28:d6:ae:d0:d5:c6:de:16:85:85:8d:
                    72:7a:6b:9e:50:76:1b:7c:52:e5:f4:18:2a:9a:c6:
                    c6:91:73:7c:cf:f8:d9:b5:2f:8d:6a:b0:84:2d:29:
                    cc:97:90:c9:f5:90:21:03:ab:d1:c5:97:ac:7d:dc:
                    8b:f5:40:d1:f9:88:f6:5a:2d:47:1c:fc:35:b7:2c:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:93:54:19:42:67:42:BF:75:8F:84:84:EB:99:5D:69:A9:0C:DE:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/50f086-30c4-4d8e-97d3-fa8dcc5cc5d1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/50f086-30c4-4d8e-97d3-fa8dcc5cc5d1/1/lpNUGUJnQr91j4SE65ldaakM3oM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203083

    Signature Algorithm: sha256WithRSAEncryption
         4a:6f:78:57:0a:aa:06:4f:0c:15:29:3e:08:b3:cd:e8:d0:08:
         1e:07:b5:79:68:a4:6b:ce:76:4b:44:71:0e:a8:3b:bd:16:02:
         39:08:db:b5:65:80:58:d9:1f:c4:e0:c8:74:7a:2d:35:4c:c5:
         06:14:98:73:38:a4:c1:4d:9a:66:d7:58:32:7c:77:43:40:9f:
         57:8d:cc:ae:7e:e4:7b:f1:c0:b6:63:eb:b2:2e:ae:af:57:d3:
         e9:99:4c:38:94:b7:63:f3:fb:05:26:0d:1c:9c:49:85:34:a8:
         e2:e7:a5:21:d0:b2:67:1c:f4:34:9a:88:d1:ca:ce:42:ca:90:
         13:9c:0a:e3:f1:f3:71:91:e2:75:c1:73:2c:f6:04:34:06:c8:
         44:0e:40:f4:8f:ea:02:da:a2:97:67:39:83:54:63:ae:41:44:
         1c:45:a2:91:f0:49:48:5c:c4:65:67:6f:bc:5f:9c:d5:50:12:
         bc:00:81:5f:19:9d:cf:d8:86:4c:7a:9e:19:f7:89:2b:95:79:
         08:0e:15:21:40:3d:45:39:74:19:58:10:b3:af:45:74:64:e7:
         f0:66:8d:a1:a4:16:bd:9f:6e:45:52:5a:6f:ea:ca:92:01:eb:
         d1:d4:4a:5a:3b:32:bb:12:f7:6a:0e:94:b1:07:e5:9e:94:e5:
         84:ea:58:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:19:12 2025 by rpki-client