Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
File:                     0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer (raw, json)
Hash identifier:          GbxAJdCIslwmlrsNYWpWJTanTuBbgMQBsGFp1whEIgQ=
Subject key identifier:   D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B4FBF343D1A3B318F6247A07D88E5B663
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 24 Dec 2025 09:44:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2a14:3c80::/29
Validation:               Failed, certificate revoked on Wed 24 Dec 2025 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4f:bf:34:3d:1a:3b:31:8f:62:47:a0:7d:88:e5:b6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 24 09:44:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:46:92:55:0f:fd:09:d7:9f:e1:b9:4c:3c:d9:
                    c1:7d:bb:c1:25:94:da:96:f2:28:ba:1c:1f:42:3c:
                    d4:3c:a0:60:b3:e7:51:14:39:f0:dd:e6:08:ff:75:
                    27:17:17:3e:a8:55:89:ff:d5:1c:5c:73:9e:25:18:
                    d2:a0:60:68:5f:7f:21:ba:7d:b8:d6:94:5d:86:0c:
                    fd:e0:e8:73:e1:93:3f:09:dd:e5:43:af:c4:98:31:
                    01:7a:91:d6:cf:46:bf:a6:59:88:aa:a8:28:a4:f1:
                    04:9f:15:55:50:c8:aa:aa:be:a5:5b:17:63:63:4c:
                    fe:55:9e:63:90:11:2a:1d:cb:1b:b5:c8:f9:6e:6c:
                    24:92:a7:2f:a3:33:36:47:f8:b5:d1:9f:d7:e4:2d:
                    88:ff:fb:16:d0:99:3b:4d:e7:5a:2d:2a:48:87:c2:
                    25:e2:19:23:f1:89:c4:81:6b:c9:c4:2d:90:a0:d4:
                    82:49:fe:ae:16:96:9c:3a:00:2f:4e:00:72:f9:35:
                    88:c5:5a:c1:ab:50:f7:1f:cb:32:33:66:ec:d6:2e:
                    8a:f0:8f:c5:ee:d8:d3:0f:e3:6f:95:9b:fe:7b:9a:
                    82:9e:ab:2a:1b:95:d7:2b:b5:ac:23:02:7f:ce:3f:
                    f4:32:5b:1c:23:91:bc:e3:36:90:29:6d:53:e1:34:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:3c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5f:58:70:92:c1:5f:a8:d3:2c:4c:b5:c7:4a:ea:8f:76:4e:42:
         69:37:32:c8:a6:c2:96:e6:0b:ec:b3:b1:e0:e1:44:79:d5:ca:
         7e:a7:e2:49:5c:83:4a:03:e1:0f:12:2c:67:06:11:aa:e5:f4:
         2c:fc:9f:0e:3b:2e:d3:43:48:2b:ad:31:1f:3e:52:50:32:55:
         ff:73:d1:53:29:0e:50:57:13:fc:8b:f5:92:cd:99:0e:3a:71:
         ac:fd:cc:23:a5:cc:77:29:e2:f4:b6:e1:3d:80:e6:14:72:35:
         b3:d9:2b:60:d4:38:0c:aa:90:45:a9:ea:37:8c:88:41:35:53:
         54:32:55:9e:e9:e2:c1:cc:8e:01:04:8a:bd:07:41:04:21:65:
         64:3c:28:82:f9:64:3b:e0:e0:18:c0:13:dd:2f:72:35:12:40:
         6e:1b:89:0a:b5:79:3b:ba:5a:33:22:27:f2:d5:b9:eb:08:71:
         bc:0c:b2:3c:af:ef:b6:3a:a9:f2:35:d5:07:5f:68:d8:00:50:
         9d:f5:fe:06:8b:0f:43:28:3c:c1:62:8f:08:07:fc:f8:b5:33:
         7e:f6:66:c6:88:05:d7:f7:3d:6c:4e:63:7b:1d:95:23:0a:2f:
         56:e7:98:49:f9:c3:60:d7:8b:49:70:67:1b:0f:0e:3c:26:fe:
         e8:71:b8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:42:18 2026 by rpki-client