Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KnB15IEB6u0d47vdysN8mMtiXuY.cer
File:                     KnB15IEB6u0d47vdysN8mMtiXuY.cer (raw, json)
Hash identifier:          S2aNGu9ZfQ/eNFg1p44u9ecrCdA/eEe0y7qVNhq2ivo=
Subject key identifier:   2A:70:75:E4:81:01:EA:ED:1D:E3:BB:DD:CA:C3:7C:98:CB:62:5E:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195016B26F502783244DFC3303F2C662449
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/KnB15IEB6u0d47vdysN8mMtiXuY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 13 Feb 2025 22:25:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213422
Validation:               Failed, certificate revoked on Mon 24 Feb 2025 11:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:01:6b:26:f5:02:78:32:44:df:c3:30:3f:2c:66:24:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 13 22:25:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2a7075e48101eaed1de3bbddcac37c98cb625ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:ae:9f:72:b1:06:03:9c:69:6b:58:5b:f4:
                    e8:80:35:0e:71:47:ce:ef:ce:54:5c:8d:05:4d:d3:
                    2c:ef:1c:1f:42:fd:73:18:54:ac:82:b1:9e:95:4d:
                    c1:4c:d1:39:2e:78:87:22:35:39:7e:3a:f0:67:c0:
                    9b:4e:ec:08:af:7f:df:fc:f6:fc:25:22:ed:b7:a7:
                    29:80:a2:56:52:15:de:4d:c9:6b:fc:81:76:0a:6a:
                    9e:98:51:b3:f2:06:b7:a2:f8:9f:77:de:2e:fc:30:
                    e2:43:76:1e:aa:c2:fa:81:17:78:f5:1c:eb:c1:a3:
                    b0:58:ad:92:3a:f7:f3:05:90:40:4a:96:2b:1d:e6:
                    ae:d1:97:90:e4:10:49:cb:31:0e:6d:da:07:ac:f5:
                    a5:1f:85:3c:87:45:48:d1:92:40:46:bf:15:9c:55:
                    f2:4a:ba:a8:98:97:1e:1e:3a:5e:f8:d8:4e:57:ea:
                    6f:2e:ea:a7:ca:d9:34:0d:11:ea:82:74:95:0d:cf:
                    e8:7d:99:63:d2:00:8e:6e:35:e7:8f:ef:93:a4:f4:
                    26:f0:6f:32:48:f4:3a:09:0d:50:b1:9b:94:58:ac:
                    19:55:fc:1c:8a:ed:95:12:f6:7e:88:7e:80:4c:1f:
                    8c:81:a9:ca:85:9e:d6:1a:a5:90:93:8c:37:d7:7c:
                    13:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:70:75:E4:81:01:EA:ED:1D:E3:BB:DD:CA:C3:7C:98:CB:62:5E:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/KnB15IEB6u0d47vdysN8mMtiXuY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213422

    Signature Algorithm: sha256WithRSAEncryption
         46:b4:f1:71:52:f7:d5:21:c4:53:5c:62:ea:ed:73:4d:b2:0d:
         5e:1e:69:84:48:f5:ea:3b:bd:f2:14:b8:52:99:b0:c9:49:2d:
         46:c3:b8:28:b2:20:c9:35:61:7c:e3:28:d2:84:c4:ea:db:5a:
         58:59:eb:ee:85:d6:ca:fb:c4:be:04:32:f1:73:f8:f5:a7:b3:
         51:f9:1e:24:f1:4e:b9:d0:69:98:f3:e3:73:e1:bb:d1:ad:41:
         81:b2:10:e0:b7:8e:55:6b:db:a9:06:4e:2b:78:a0:99:33:24:
         31:52:87:99:c1:3f:65:15:e0:2a:6a:7f:27:48:d2:89:3c:f0:
         00:52:c8:a8:ab:8e:73:a0:e9:ee:f0:e3:3a:2c:6d:8f:68:ee:
         7b:6e:e8:12:88:d2:0d:db:43:38:ce:75:df:31:3c:e9:4e:a5:
         e4:57:f6:2f:c0:ec:6c:34:2b:ae:0c:59:f5:78:22:f8:92:37:
         50:69:5e:e2:bd:04:40:8a:77:bf:b2:98:91:dc:d7:58:7e:60:
         41:f6:e0:96:b2:ee:64:9b:c9:69:09:0d:99:66:b9:1f:07:29:
         d9:dd:6d:06:47:49:a0:05:76:fa:78:96:c3:3a:c8:77:25:84:
         b5:6e:96:38:ff:e2:76:b0:87:94:9a:55:44:d8:40:4d:c7:11:
         0a:40:53:44
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZUBayb1AngyRN/DMD8sZiRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjEzMjIyNTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTcwNzVlNDgxMDFlYWVkMWRlM2JiZGRjYWMzN2M5OGNiNjI1ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2qun3KxBgOcaWtYW/TogDUOcUfO
785UXI0FTdMs7xwfQv1zGFSsgrGelU3BTNE5LniHIjU5fjrwZ8CbTuwIr3/f/Pb8
JSLtt6cpgKJWUhXeTclr/IF2CmqemFGz8ga3ovifd94u/DDiQ3YeqsL6gRd49Rzr
waOwWK2SOvfzBZBASpYrHeau0ZeQ5BBJyzEObdoHrPWlH4U8h0VI0ZJARr8VnFXy
SrqomJceHjpe+NhOV+pvLuqnytk0DRHqgnSVDc/ofZlj0gCObjXnj++TpPQm8G8y
SPQ6CQ1QsZuUWKwZVfwciu2VEvZ+iH6ATB+MganKhZ7WGqWQk4w313wTwQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCpwdeSBAertHeO73crDfJjLYl7mMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzUzNmEz
OC05NzU5LTQwZTYtYWExOS0yNTBkMWYzYjkwMGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvNTM2YTM4
LTk3NTktNDBlNi1hYTE5LTI1MGQxZjNiOTAwZi8xL0tuQjE1SUVCNnUwZDQ3dmR5
c044bU10aVh1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBrjANBgkqhkiG9w0BAQsFAAOCAQEARrTxcVL31SHE
U1xi6u1zTbINXh5phEj16ju98hS4UpmwyUktRsO4KLIgyTVhfOMo0oTE6ttaWFnr
7oXWyvvEvgQy8XP49aezUfkeJPFOudBpmPPjc+G70a1BgbIQ4LeOVWvbqQZOK3ig
mTMkMVKHmcE/ZRXgKmp/J0jSiTzwAFLIqKuOc6Dp7vDjOixtj2jue27oEojSDdtD
OM513zE86U6l5Ff2L8DsbDQrrgxZ9Xgi+JI3UGle4r0EQIp3v7KYkdzXWH5gQfbg
lrLuZJvJaQkNmWa5Hwcp2d1tBkdJoAV2+niWwzrIdyWEtW6WOP/idrCHlJpVRNhA
TccRCkBTRA==
-----END CERTIFICATE-----
Generated at Fri May 2 15:39:59 2025 by rpki-client