Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mYyRekX-DfOt1DMxy7S5UHwcv_s.cer
File:                     mYyRekX-DfOt1DMxy7S5UHwcv_s.cer (raw, json)
Hash identifier:          THihALS5J2E404jzcVHVECEY6aVLGhwM9JgN4ai6CFg=
Subject key identifier:   99:8C:91:7A:45:FE:0D:F3:AD:D4:33:31:CB:B4:B9:50:7C:1C:BF:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0197416A9803D0308FC9186C580E5B29A30A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c3/4f73bf-b18b-47ed-b571-58d0029af976/1/mYyRekX-DfOt1DMxy7S5UHwcv_s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c3/4f73bf-b18b-47ed-b571-58d0029af976/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 05 Jun 2025 18:46:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207530
Validation:               Failed, certificate revoked on Thu 05 Jun 2025 20:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:41:6a:98:03:d0:30:8f:c9:18:6c:58:0e:5b:29:a3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  5 18:46:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=998c917a45fe0df3add43331cbb4b9507c1cbffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:c4:e8:e6:58:01:e4:ef:5f:6e:e6:b1:1a:
                    b2:d1:3c:be:22:cd:63:0a:b2:66:37:86:ec:ee:07:
                    83:f6:27:94:d0:09:c3:e3:9d:5c:0f:73:39:a4:93:
                    d5:ef:77:2d:44:63:b5:7c:8b:cc:25:e4:98:87:9c:
                    51:ef:87:3f:11:45:0f:9c:f3:74:b8:d4:80:43:f6:
                    9b:6a:e5:e6:1a:5d:15:f5:cd:cc:6d:e8:34:1d:8a:
                    a1:57:a7:a9:87:be:f8:c7:e4:c1:70:4c:76:84:3c:
                    cd:1f:37:d1:e0:f5:89:19:1e:4a:1d:ef:fb:6a:58:
                    79:9f:02:73:4a:83:d1:1c:9d:ee:06:44:08:47:e0:
                    67:11:43:e1:4a:37:ed:2c:04:31:d7:38:b1:8c:42:
                    d3:bd:d8:47:c8:a3:16:22:b3:9e:85:19:ad:f8:23:
                    f5:0e:47:0f:70:e4:8e:5b:33:fe:46:c0:8b:5b:c2:
                    bb:96:9a:b4:e9:56:93:87:82:c1:d3:04:ac:a5:2a:
                    71:6d:aa:ab:e8:15:07:f8:c3:e1:23:5b:6a:84:70:
                    99:af:b5:52:83:5e:cc:a8:bb:2e:70:e1:d7:ca:40:
                    3a:b7:82:c5:bf:51:19:cf:a3:3b:e3:73:52:98:d6:
                    0c:d0:07:2e:9a:81:31:8e:58:ce:8c:c0:bd:6c:cf:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8C:91:7A:45:FE:0D:F3:AD:D4:33:31:CB:B4:B9:50:7C:1C:BF:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4f73bf-b18b-47ed-b571-58d0029af976/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4f73bf-b18b-47ed-b571-58d0029af976/1/mYyRekX-DfOt1DMxy7S5UHwcv_s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207530

    Signature Algorithm: sha256WithRSAEncryption
         48:25:98:57:9e:46:6a:b2:13:18:61:6b:f3:17:bf:bc:b0:db:
         ba:94:b1:75:5f:cd:f1:59:bf:61:d3:18:b3:76:10:c5:4f:2f:
         19:d6:5f:67:1b:aa:f1:c1:a8:d0:5a:6b:93:11:3e:20:5f:65:
         94:e2:4a:85:17:94:0e:8a:93:52:d4:7b:ca:9f:b2:0c:51:18:
         f9:c1:ca:ac:36:c0:44:f5:58:6f:64:ad:c1:74:42:e4:7c:0a:
         3c:9b:ef:b5:7a:1d:ce:90:8f:ae:82:32:ca:10:0c:6e:59:6b:
         7d:e0:57:4c:5b:94:81:ee:17:c0:07:6c:37:c6:3f:13:83:c5:
         ef:03:d3:03:f5:6d:a6:de:cb:23:a0:2a:2a:a4:2a:a4:72:8a:
         86:a7:35:0c:41:be:df:40:a0:ec:ec:c5:37:17:82:ed:60:9d:
         f5:a5:f4:1c:2d:28:82:bf:a6:22:84:a5:4b:33:81:e5:0f:13:
         6a:a9:ae:cf:b3:8f:f5:dd:c7:85:43:ac:98:6d:c5:64:c5:a9:
         54:09:ff:72:8c:c5:e6:83:d4:99:ba:99:98:64:24:1a:f8:a8:
         dc:15:77:6b:39:b0:d8:18:c2:77:a4:7b:c1:d4:db:26:7b:a9:
         08:3b:75:2e:4f:42:cf:0a:42:b3:34:95:f7:03:70:f7:0b:10:
         d6:82:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:33:17 2025 by rpki-client