Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
File:                     wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer (raw, json)
Hash identifier:          PCXtmw0G+AYhGZnBFj7kzUaFLPWpU2phCN415ZfMdp8=
Subject key identifier:   C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01968BAAB20873D3D30C8CD772ABB15608E1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 May 2025 11:45:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 38915
                          IP: 178.21.216.0/21
                          IP: 2a00:1de0::/32
Validation:               Failed, certificate revoked on Thu 01 May 2025 13:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:aa:b2:08:73:d3:d3:0c:8c:d7:72:ab:b1:56:08:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  1 11:45:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c13a8d7e3549fadf56b4e83fa49c16b73c9940b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:44:bd:e6:d2:61:e9:b0:e6:64:ef:7e:1d:
                    84:8e:ca:57:39:21:8c:99:22:78:ba:15:c4:52:29:
                    95:f0:4a:17:75:39:95:4b:d5:e8:9d:58:72:ae:b3:
                    1c:69:ac:28:90:bb:f8:53:05:ca:cc:c6:fd:bf:5e:
                    b4:11:ad:c6:2f:8b:61:34:7c:ff:0f:55:12:8f:e6:
                    f7:a2:45:13:a5:51:11:6f:9e:1e:89:69:0d:a5:a7:
                    a9:66:07:b7:cb:8d:da:89:8f:b7:33:80:d6:ce:c7:
                    91:50:69:9d:83:51:6e:de:4e:b0:c8:fc:bd:2f:d8:
                    0d:2f:7c:93:e5:1f:74:55:43:a2:45:76:e2:c7:01:
                    6a:be:64:6b:b6:34:79:8b:18:43:9e:54:d1:ca:77:
                    2a:05:7d:f7:f6:e6:06:5b:10:ad:06:0b:86:dc:be:
                    15:6a:3a:e3:8a:f0:d7:c6:52:a5:f3:bf:4b:b4:37:
                    57:f9:cd:e7:85:fc:14:c5:6a:56:3a:84:56:6e:db:
                    4e:26:d7:7a:8c:44:d3:08:68:9c:44:29:f6:98:75:
                    2d:b4:c5:78:ea:95:42:44:03:e6:44:2a:27:32:82:
                    db:48:ba:cc:00:3f:49:35:9d:66:ab:45:1a:f2:4c:
                    b7:76:99:30:3e:5a:1f:ab:a5:dc:08:ce:b3:39:f9:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.21.216.0/21
                IPv6:
                  2a00:1de0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38915

    Signature Algorithm: sha256WithRSAEncryption
         50:5a:23:8b:a8:f0:49:7c:4e:ec:00:42:7c:f9:6d:74:67:f2:
         d4:5e:85:04:14:dc:4f:e6:5e:90:fc:a2:6d:80:a4:a7:ce:7e:
         a6:6c:17:da:f1:e9:db:03:cb:a4:e4:12:3b:5d:1f:47:d4:17:
         9c:c9:1b:dc:0d:61:84:74:21:38:c1:36:89:95:8d:ba:fa:db:
         33:69:29:c3:9c:8c:8c:31:ff:7f:b3:c7:73:6b:1f:0e:91:84:
         87:7a:92:1a:c3:a5:d4:cd:c7:4c:e1:42:d8:14:e2:77:5e:55:
         6b:50:74:8a:40:57:e3:08:54:ee:07:b9:e1:21:fa:2b:bf:d1:
         8d:5c:60:88:de:3b:73:d9:29:ac:db:00:c4:fa:10:3d:d0:c7:
         d3:40:bb:dd:1c:9b:4e:3c:b3:df:f7:2b:82:c3:27:1f:87:12:
         dd:6b:dc:72:61:e5:f1:2f:08:53:5b:2d:2a:3a:d0:1d:12:79:
         fe:94:63:89:a7:df:2f:52:f0:e1:ca:cb:34:20:53:12:23:c6:
         28:f7:3d:cd:28:30:fc:7e:4c:08:1d:e3:fc:a0:07:1a:76:a7:
         21:37:97:65:01:05:00:c6:59:6d:ea:2c:ce:67:8e:fc:f7:20:
         95:35:8c:f2:63:49:a6:d3:73:44:39:21:14:73:c1:35:7e:d7:
         be:db:37:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----