Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
File:                     1nYY00F5w-pSMwJkoZZBh7I83SQ.cer (raw, json)
Hash identifier:          E+3RZlINoBO7R1GjU8cXlriexapGzXaxHA6mZYhLzJ8=
Subject key identifier:   D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0199E2D3FA33CA8206B47085F2A7A8810816
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 14 Oct 2025 13:06:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2a0d:db40::/29
Validation:               Failed, certificate revoked on Tue 14 Oct 2025 13:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:e2:d3:fa:33:ca:82:06:b4:70:85:f2:a7:a8:81:08:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 14 13:06:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d67618d34179c3ea52330264a1964187b23cdd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:a0:0d:f3:29:21:62:32:3f:e6:e2:3d:bb:
                    23:76:66:86:e5:b1:4f:66:17:ec:b7:c6:10:30:5a:
                    64:de:d2:0f:7e:4b:40:58:35:76:bf:03:77:c9:04:
                    b2:e9:03:59:37:95:b0:8c:51:ef:66:bc:e5:ef:b9:
                    11:5b:7e:88:6e:8c:dc:b5:9c:9e:ff:a8:5a:aa:8c:
                    89:c3:0d:54:af:46:b4:2c:cb:cc:64:bd:2b:60:8b:
                    53:1c:d7:f1:d7:88:c3:63:6c:09:f8:6e:79:96:8b:
                    75:3f:a8:c5:d4:c8:58:4f:72:3a:ec:cc:b8:0f:05:
                    92:c0:f0:5c:23:af:d8:7b:b3:be:47:ef:6e:90:f4:
                    81:4b:20:99:21:73:97:ed:b6:2e:e2:cd:87:90:a2:
                    63:24:a4:25:f2:57:31:c6:70:ba:ce:4c:c9:24:ea:
                    f5:10:7f:9a:31:ae:05:3f:39:c6:59:d8:1b:d7:c5:
                    1f:2d:19:09:4b:8e:8c:79:44:d5:56:53:ea:70:a3:
                    9d:a6:9b:26:8d:3a:3e:07:db:6b:32:df:a2:c7:57:
                    66:00:de:1e:44:57:68:c2:11:34:bf:aa:da:06:07:
                    84:59:56:cd:9f:0a:86:9d:cf:2d:44:da:58:8e:d4:
                    3e:f1:d7:be:67:d1:64:1b:16:b7:b4:2a:4c:c3:36:
                    8c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:db40::/29

    Signature Algorithm: sha256WithRSAEncryption
         29:94:3c:42:e5:4d:a7:46:37:a9:d2:e2:ea:f0:5e:27:3b:27:
         70:a8:12:0a:4a:75:a9:75:a6:06:48:9b:8a:1d:5f:0e:4f:09:
         11:f2:00:17:e9:28:89:74:0f:34:46:9d:80:87:29:42:4c:12:
         40:49:69:09:84:93:ee:5a:c2:c4:a3:69:89:b8:91:6e:91:eb:
         29:95:e6:9d:5f:9b:18:06:e0:a4:b5:61:86:09:0a:b1:9f:cc:
         a4:b6:e4:a0:3f:9c:7e:ae:d9:4c:2f:3a:ef:a1:29:8f:e1:e9:
         6b:12:21:ef:5a:34:80:70:b8:8b:87:bb:0b:17:76:dd:73:ae:
         33:29:25:99:d6:a3:c7:00:88:f0:6b:b6:04:eb:20:47:c9:a9:
         3b:09:ed:66:ae:25:f9:bd:08:85:72:66:cf:2f:95:2b:44:b5:
         11:e9:47:dd:56:7c:2b:83:01:ad:77:47:db:7f:09:13:35:b6:
         b3:88:f6:0e:4b:70:5a:b5:03:03:5a:82:20:65:b2:e5:8f:4b:
         3f:ba:4f:2c:14:0a:cc:a3:84:a0:72:86:2f:6d:6b:cb:de:7a:
         b9:f5:ad:53:f5:48:ac:78:fa:ce:2f:94:73:25:a0:71:87:15:
         02:7a:99:7a:67:05:09:a8:8a:62:24:6a:6a:fe:5f:1d:80:75:
         e7:2e:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:41:17 2025 by rpki-client