Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z14i55iuMWnaqxzrpnC9of_3tRc.cer
File:                     z14i55iuMWnaqxzrpnC9of_3tRc.cer (raw, json)
Hash identifier:          maEP4EtmfJaTUo8DZYIwI3KwtsQZv9gN4jbIHK/poks=
Subject key identifier:   CF:5E:22:E7:98:AE:31:69:DA:AB:1C:EB:A6:70:BD:A1:FF:F7:B5:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0193DE5D86C59BF1B286BA880BF2AC8D2B04
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/z14i55iuMWnaqxzrpnC9of_3tRc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 19 Dec 2024 10:01:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2a13:28c0::/29
Validation:               Failed, certificate revoked on Mon 23 Dec 2024 15:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:de:5d:86:c5:9b:f1:b2:86:ba:88:0b:f2:ac:8d:2b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 19 10:01:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cf5e22e798ae3169daab1ceba670bda1fff7b517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:42:b8:f2:1b:d8:86:63:9b:23:60:2b:45:
                    84:f2:9f:80:dc:f2:41:0f:9a:08:7a:01:98:14:2f:
                    ee:85:9f:1c:e3:92:a1:6c:d0:4d:07:01:c5:fe:ec:
                    9d:04:c0:83:e8:91:1f:1a:6a:8b:bf:90:dd:8c:5d:
                    95:86:50:06:cd:ba:63:7f:95:ef:11:8e:db:54:b9:
                    82:a4:a5:80:94:8e:fc:56:c9:e8:f2:ba:cd:4a:26:
                    ec:24:01:20:e7:f4:b4:f5:01:5d:db:a0:08:0e:cd:
                    17:67:d5:34:f3:d0:1d:ad:d1:66:4f:2c:66:97:c2:
                    12:a3:28:e5:5b:04:30:20:db:68:c7:a1:74:23:3a:
                    57:67:13:48:44:08:0d:78:0f:73:89:2d:c8:d6:05:
                    73:54:b7:90:5d:28:e8:e9:54:7f:d2:d0:45:57:67:
                    97:10:13:0a:10:35:aa:ae:6d:95:62:d9:c1:00:b3:
                    cc:23:f4:ed:5a:30:97:08:7c:42:f7:27:cc:75:70:
                    9b:b3:61:ce:26:40:df:c3:93:c5:5e:f3:cb:a9:e5:
                    67:29:b0:d5:4d:72:2d:c9:7b:2f:75:de:09:14:17:
                    6f:f7:a2:be:6a:52:a9:41:af:fb:ee:17:74:de:bd:
                    74:7d:f0:9b:84:f9:de:55:0a:9d:b1:f6:67:2d:84:
                    9d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5E:22:E7:98:AE:31:69:DA:AB:1C:EB:A6:70:BD:A1:FF:F7:B5:17
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/z14i55iuMWnaqxzrpnC9of_3tRc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:28c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:8a:04:04:3c:a7:45:ed:c3:0f:2b:f5:c1:1f:7c:4d:6e:
         1c:a3:10:62:c2:96:da:f7:fd:f7:6e:43:73:e9:89:88:4a:ed:
         8f:9e:6e:91:51:3e:ec:df:d9:5f:9a:67:4a:ab:ef:d5:8d:96:
         c1:73:5b:ad:d5:30:e1:f7:eb:e5:43:cb:47:32:11:2f:8c:6b:
         64:f4:23:02:a5:0b:23:71:83:69:c0:c7:0f:bb:58:15:76:ee:
         40:8a:3b:f5:06:b4:97:3e:a7:76:3a:91:27:44:17:c5:4f:72:
         c6:06:2f:d6:7c:44:c8:8f:1a:f6:18:f1:9e:77:40:5d:41:4e:
         75:09:c4:0e:b7:12:77:07:d0:f9:ec:bc:ba:8f:9c:ac:4c:48:
         fa:b8:3b:04:6f:c9:65:bf:57:e0:2c:45:8f:90:a2:f5:d9:eb:
         0f:2b:8a:12:d5:28:c8:34:a4:a6:31:47:61:2c:15:35:25:0f:
         c9:6f:88:98:07:8b:d5:e5:23:50:d4:e6:2c:93:e9:f1:fb:d7:
         09:ba:ec:b9:87:ba:8c:32:78:bd:fb:c1:07:9a:14:00:39:aa:
         90:51:03:88:56:bc:bd:35:35:94:b9:92:09:c9:8d:c6:cf:89:
         86:4a:91:8e:47:d7:01:d0:41:a2:ac:f6:11:34:da:35:3c:55:
         d6:3e:a6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:38 2025 by rpki-client