Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y-JJd5k8FbzBNLF0k39BshKfVtE.cer
File:                     Y-JJd5k8FbzBNLF0k39BshKfVtE.cer (raw, json)
Hash identifier:          SxO10hIMymWSzK/Dn7tLvl89N/PqC/NLYKFernHEMJ0=
Subject key identifier:   63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01958985D9371E17910CA54608231BD35694
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Y-JJd5k8FbzBNLF0k39BshKfVtE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 12 Mar 2025 08:43:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.208.144.0/22
Validation:               Failed, certificate revoked on Fri 14 Mar 2025 13:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:89:85:d9:37:1e:17:91:0c:a5:46:08:23:1b:d3:56:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 12 08:43:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=63e24977993c15bcc134b174937f41b2129f56d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bc:6f:ea:ff:dd:04:94:34:5c:c9:99:ee:a2:
                    38:fe:94:2d:4c:5f:c5:52:4e:cd:fa:86:74:28:2f:
                    dc:28:3a:f5:7f:aa:1d:33:98:b3:c1:e6:10:21:45:
                    9d:ba:fc:5c:c7:8e:9a:a9:bf:50:86:c5:fd:b4:54:
                    a3:93:cf:60:11:2d:9f:b2:54:81:37:1b:7f:a1:f3:
                    1b:a8:13:12:c2:ea:97:c0:df:cc:79:e0:1d:2a:d7:
                    51:96:ba:ae:ce:bc:f7:2b:0e:b9:1e:7f:80:5f:3f:
                    43:26:d2:d1:e2:bf:68:43:6a:a4:31:74:1e:2f:81:
                    24:71:47:80:07:75:75:8a:e6:36:3e:6f:20:39:a9:
                    16:0c:ae:ff:04:25:37:9e:12:11:6d:12:c3:c0:b6:
                    97:e5:8b:9e:aa:be:d7:6d:e6:0d:a4:4f:b8:53:9c:
                    18:92:6a:dd:c2:6c:f4:1e:93:ce:b5:7e:5d:a5:01:
                    20:97:4e:ab:c4:a2:9e:59:94:7e:e7:74:a1:78:eb:
                    93:db:d5:99:2a:83:c4:94:63:c0:28:1f:06:3c:31:
                    50:a4:1c:f3:82:41:1f:d5:1f:1a:36:0e:6f:f2:ea:
                    4e:33:46:6a:2f:f3:1a:b0:13:4e:72:cc:42:a8:b0:
                    46:2c:d6:8c:8d:4e:8b:48:c6:c5:93:da:38:47:06:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Y-JJd5k8FbzBNLF0k39BshKfVtE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:6e:ad:0b:61:16:15:c8:97:d5:2b:11:da:74:3e:07:0a:10:
         37:54:9e:f9:63:a9:ba:3b:c5:01:d2:7e:fb:f0:03:2b:94:4e:
         51:1a:1e:e8:b6:aa:ed:e0:9a:96:82:87:18:76:e1:c1:ae:30:
         37:89:1b:f3:50:0f:be:ad:83:01:ea:a0:07:68:39:75:1d:1d:
         57:7f:96:84:97:10:bf:7f:f5:2a:2e:56:db:4b:97:25:85:cd:
         fd:8a:4f:6e:1e:26:ae:bc:d3:7a:e3:f2:ed:fe:49:55:a6:49:
         f0:e6:bd:cd:a6:43:0b:88:55:72:25:a8:d2:f0:0a:b5:ab:ef:
         9e:02:f0:63:b0:c1:13:44:b3:6d:29:7e:2d:fd:76:9a:e2:9b:
         cb:aa:d8:f3:4f:8e:a2:41:ef:64:7f:d6:a8:bd:e3:d3:fc:c3:
         9b:96:6d:f4:c0:51:b9:bf:53:8c:9b:41:04:49:da:27:31:44:
         f3:62:cf:d3:b9:be:fd:46:b0:17:22:37:85:5d:a2:51:28:f1:
         02:ff:af:ad:b1:91:32:c4:93:af:1d:5b:69:23:02:88:18:7c:
         2f:21:48:ff:18:bd:f1:24:4a:08:58:a5:9e:be:2b:a6:f8:8e:
         6f:5e:b1:e2:f7:77:fc:fc:65:0d:71:3e:b5:21:47:19:46:95:
         dc:87:6f:6f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZWJhdk3HheRDKVGCCMb01aUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzEyMDg0MzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2UyNDk3Nzk5M2MxNWJjYzEzNGIxNzQ5MzdmNDFiMjEyOWY1NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17xv6v/dBJQ0XMmZ7qI4/pQtTF/F
Uk7N+oZ0KC/cKDr1f6odM5izweYQIUWduvxcx46aqb9QhsX9tFSjk89gES2fslSB
Nxt/ofMbqBMSwuqXwN/MeeAdKtdRlrquzrz3Kw65Hn+AXz9DJtLR4r9oQ2qkMXQe
L4EkcUeAB3V1iuY2Pm8gOakWDK7/BCU3nhIRbRLDwLaX5Yueqr7XbeYNpE+4U5wY
kmrdwmz0HpPOtX5dpQEgl06rxKKeWZR+53SheOuT29WZKoPElGPAKB8GPDFQpBzz
gkEf1R8aNg5v8upOM0ZqL/MasBNOcsxCqLBGLNaMjU6LSMbFk9o4RwZwkQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGPiSXeZPBW8wTSxdJN/QbISn1bRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyL2ZkODEx
Ni01ZTk4LTQ1ZWYtYWY3NC0wNzNhNWRiMGVmYjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvZmQ4MTE2
LTVlOTgtNDVlZi1hZjc0LTA3M2E1ZGIwZWZiNS8xL1ktSkpkNWs4RmJ6Qk5MRjBr
MzlCc2hLZlZ0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCudCQMA0GCSqGSIb3DQEBCwUAA4IBAQAMbq0L
YRYVyJfVKxHadD4HChA3VJ75Y6m6O8UB0n778AMrlE5RGh7otqrt4JqWgocYduHB
rjA3iRvzUA++rYMB6qAHaDl1HR1Xf5aElxC/f/UqLlbbS5clhc39ik9uHiauvNN6
4/Lt/klVpknw5r3NpkMLiFVyJajS8Aq1q++eAvBjsMETRLNtKX4t/Xaa4pvLqtjz
T46iQe9kf9aovePT/MOblm30wFG5v1OMm0EESdonMUTzYs/Tub79RrAXIjeFXaJR
KPEC/6+tsZEyxJOvHVtpIwKIGHwvIUj/GL3xJEoIWKWevium+I5vXrHi93f8/GUN
cT61IUcZRpXch29v
-----END CERTIFICATE-----
Generated at Fri May 2 04:06:53 2025 by rpki-client