Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q7FleujHzIoUq5qohFzUurULpBw.cer
File:                     q7FleujHzIoUq5qohFzUurULpBw.cer (raw, json)
Hash identifier:          6wwIePshlsc5vJbOkelRbEO+YVHiUnHZSTLxGhVxDeA=
Subject key identifier:   AB:B1:65:7A:E8:C7:CC:8A:14:AB:9A:A8:84:5C:D4:BA:B5:0B:A4:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9CE3C3D5F789EBF8A2406CF3B5FAA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210773
Validation:               Failed, certificate revoked on Mon 06 Jan 2025 11:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:ce:3c:3d:5f:78:9e:bf:8a:24:06:cf:3b:5f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=abb1657ae8c7cc8a14ab9aa8845cd4bab50ba41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:a0:1c:32:9d:ab:6c:94:a7:94:ad:8a:2e:36:
                    85:75:0a:8b:29:6e:9b:e0:bc:6d:16:d7:52:91:07:
                    bb:88:1e:75:85:02:a2:b4:db:77:b3:00:12:e5:d5:
                    e2:87:1d:3e:9a:f1:a2:6c:2d:4b:44:ae:dd:fa:a3:
                    72:56:8c:d5:0a:f8:11:37:66:23:8b:c0:44:69:76:
                    91:f8:72:0d:d0:7f:8c:db:37:e6:43:b2:41:f1:53:
                    65:88:87:73:61:7e:fc:d1:0f:96:83:93:fe:56:8a:
                    29:ae:f7:59:33:48:bd:7a:33:dc:44:31:34:42:fa:
                    fe:86:14:81:e0:3e:10:16:fd:73:1f:3b:b5:d1:ac:
                    29:63:e1:c3:ac:21:5e:33:37:9c:da:5b:54:72:c4:
                    35:f8:d2:af:38:5c:97:0f:af:bb:13:5d:4b:ec:4e:
                    74:07:cd:a3:43:2a:aa:4f:cd:6a:df:e5:fb:a7:bd:
                    1a:a6:bb:b6:bd:f7:5e:df:31:f5:9b:fd:72:69:17:
                    eb:ae:c6:9b:25:8c:58:cb:a3:2c:0c:6c:63:29:00:
                    a7:7f:ca:a6:56:a0:54:05:df:b6:0c:c8:b3:b1:fe:
                    1e:92:21:11:c8:14:de:82:b7:9b:d2:6c:fd:5f:48:
                    36:00:e4:52:c7:d4:b9:28:9d:28:c8:d0:c0:09:6d:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B1:65:7A:E8:C7:CC:8A:14:AB:9A:A8:84:5C:D4:BA:B5:0B:A4:1C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210773

    Signature Algorithm: sha256WithRSAEncryption
         26:ae:5b:1a:db:18:13:8b:1f:c1:3e:22:f9:b7:1d:e2:fd:97:
         65:68:94:ab:03:ce:4e:b7:9c:86:3e:2a:88:d7:40:60:00:c7:
         a5:fb:1e:26:54:38:fc:82:80:75:37:58:88:58:46:1f:c5:f8:
         a7:78:36:59:1b:57:65:bf:bd:2e:f3:e7:2b:5b:ee:5a:69:d4:
         c5:cc:0f:16:63:f3:75:77:9d:04:0b:9d:c2:e5:8a:01:41:58:
         61:0c:d3:08:e4:96:6b:20:fc:d5:78:83:96:09:97:bd:99:89:
         3a:4c:94:2b:27:0f:70:f5:a5:81:94:9f:0c:7c:7c:15:12:29:
         42:b3:84:95:1c:ef:54:7c:ad:07:27:fc:6e:6f:5a:99:fd:67:
         1c:db:00:4f:3d:8f:23:7e:8e:58:62:96:d9:a6:95:90:4f:4b:
         6b:10:40:c3:21:69:bf:cc:90:92:00:4d:13:c7:70:5d:74:45:
         db:8d:bc:88:a6:33:0a:8c:7c:f9:45:4a:df:b4:11:42:d2:3d:
         7a:d5:f0:38:9f:9d:5c:a4:8b:37:61:96:af:92:7c:e1:f0:ed:
         81:34:a9:55:ba:54:b5:ab:87:73:49:5d:25:31:b8:15:16:87:
         c9:96:97:ea:e5:b6:86:6b:5e:70:48:21:55:08:2e:a4:ed:e6:
         01:13:f9:14
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQm2c48PV94nr+KJAbPO1+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmIxNjU3YWU4YzdjYzhhMTRhYjlhYTg4NDVjZDRiYWI1MGJhNDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/KAcMp2rbJSnlK2KLjaFdQqLKW6b
4LxtFtdSkQe7iB51hQKitNt3swAS5dXihx0+mvGibC1LRK7d+qNyVozVCvgRN2Yj
i8BEaXaR+HIN0H+M2zfmQ7JB8VNliIdzYX780Q+Wg5P+VooprvdZM0i9ejPcRDE0
Qvr+hhSB4D4QFv1zHzu10awpY+HDrCFeMzec2ltUcsQ1+NKvOFyXD6+7E11L7E50
B82jQyqqT81q3+X7p70apru2vfde3zH1m/1yaRfrrsabJYxYy6MsDGxjKQCnf8qm
VqBUBd+2DMizsf4ekiERyBTegreb0mz9X0g2AORSx9S5KJ0oyNDACW2aRwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFKuxZXrox8yKFKuaqIRc1Lq1C6QcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzFiMjRm
NS05NTg0LTQyZjgtYjc0MC0wZThlMWJjMmQxOTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMWIyNGY1
LTk1ODQtNDJmOC1iNzQwLTBlOGUxYmMyZDE5MC8xL3E3RmxldWpIeklvVXE1cW9o
RnpVdXJVTHBCdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM3VTANBgkqhkiG9w0BAQsFAAOCAQEAJq5bGtsYE4sf
wT4i+bcd4v2XZWiUqwPOTrechj4qiNdAYADHpfseJlQ4/IKAdTdYiFhGH8X4p3g2
WRtXZb+9LvPnK1vuWmnUxcwPFmPzdXedBAudwuWKAUFYYQzTCOSWayD81XiDlgmX
vZmJOkyUKycPcPWlgZSfDHx8FRIpQrOElRzvVHytByf8bm9amf1nHNsATz2PI36O
WGKW2aaVkE9LaxBAwyFpv8yQkgBNE8dwXXRF2428iKYzCox8+UVK37QRQtI9etXw
OJ+dXKSLN2GWr5J84fDtgTSpVbpUtauHc0ldJTG4FRaHyZaX6uW2hmtecEghVQgu
pO3mARP5FA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:48 2025 by rpki-client