Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_W-dJNJUjpI9JmQhszP7q6gdzFc.cer
File:                     _W-dJNJUjpI9JmQhszP7q6gdzFc.cer (raw, json)
Hash identifier:          jHEZFdK44dj6og8Cw7e9lW1olfx1zPujINu7cMs7440=
Subject key identifier:   FD:6F:9D:24:D2:54:8E:92:3D:26:64:21:B3:33:FB:AB:A8:1D:CC:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56DF838073EE8C3141625BFA820A636
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/f80498-8d40-4754-ae0f-8f5b64094f46/1/_W-dJNJUjpI9JmQhszP7q6gdzFc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/f80498-8d40-4754-ae0f-8f5b64094f46/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:29:27 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 213116
Validation:               Failed, certificate revoked on Thu 04 Apr 2024 11:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6d:f8:38:07:3e:e8:c3:14:16:25:bf:a8:20:a6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:29:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fd6f9d24d2548e923d266421b333fbaba81dcc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:09:b4:87:d7:7c:6b:ac:d7:e9:b5:e3:57:
                    e1:7b:0c:71:55:e1:0d:97:7e:0d:e0:3e:d3:1a:9e:
                    71:6c:df:46:fe:66:80:9a:be:e9:20:b6:22:61:e5:
                    e9:16:75:51:d3:97:bf:61:76:47:e5:18:1a:ee:56:
                    36:99:60:ea:cf:92:d1:99:45:47:42:7c:03:71:14:
                    92:1d:43:75:03:f3:c2:e1:f6:5f:3e:d8:11:d8:c4:
                    74:26:e4:8c:73:77:2b:a5:c4:34:3d:1a:ea:b0:90:
                    56:ee:15:d8:76:56:47:43:9c:91:17:7f:af:09:f1:
                    29:49:fd:56:39:e8:ef:43:35:c5:e0:ef:10:19:bf:
                    89:8e:84:7f:73:30:82:f1:7a:e2:5e:03:f4:30:7d:
                    11:6b:88:e4:21:51:ee:a4:2a:ac:cd:43:dc:9f:9d:
                    53:71:5b:11:ae:bb:9f:94:aa:68:e3:e6:23:c8:3c:
                    62:50:cb:f1:62:80:a2:d1:ee:8b:23:d8:cb:84:99:
                    4c:df:60:25:76:cb:13:e8:59:17:a0:2a:15:1b:c0:
                    b0:75:34:96:41:6e:74:8e:4f:e6:6f:39:65:4d:7a:
                    52:ed:d5:39:b0:70:2c:3b:f8:d2:4b:c7:91:77:1e:
                    81:a1:63:fa:05:57:2e:c9:ba:a5:f3:d3:d4:d7:76:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6F:9D:24:D2:54:8E:92:3D:26:64:21:B3:33:FB:AB:A8:1D:CC:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f80498-8d40-4754-ae0f-8f5b64094f46/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f80498-8d40-4754-ae0f-8f5b64094f46/1/_W-dJNJUjpI9JmQhszP7q6gdzFc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213116

    Signature Algorithm: sha256WithRSAEncryption
         67:1d:c5:1f:94:10:2f:05:cd:a5:c3:97:56:f7:52:60:a3:5f:
         9b:d4:7c:2c:7e:3a:ad:5a:29:67:a7:a4:ce:49:e7:e0:05:c4:
         4f:f5:93:65:f3:66:8d:5f:e0:78:d4:47:db:3c:3a:9a:d7:1f:
         a8:00:aa:48:6b:88:e6:71:4f:78:bd:0d:56:08:b1:a4:61:a9:
         c1:1b:c0:70:f0:e0:fd:92:da:6d:41:20:a4:3f:00:c5:7a:46:
         86:0c:06:9b:2f:52:81:31:bf:6f:34:18:f5:9e:24:c4:7e:4e:
         8e:11:54:44:65:60:67:8c:f3:22:61:d1:6c:ba:a5:b3:74:7c:
         89:c5:9b:84:5c:69:1f:42:79:54:d2:20:28:57:e7:5d:72:42:
         64:f1:b5:6f:57:71:89:6c:60:70:c5:b6:ea:f8:5f:24:d1:e6:
         6c:22:ed:b9:2b:d1:59:55:a6:54:e3:23:9c:e4:19:8a:52:b1:
         33:b6:8e:61:db:fc:68:63:10:2f:51:62:40:fd:b5:30:e8:f7:
         87:08:49:24:13:44:cf:b9:3a:3c:9c:ac:0c:65:a0:39:48:0e:
         3a:98:a8:92:7c:c2:57:8a:c0:59:c0:06:bf:4a:05:e1:3c:df:
         54:5d:8e:74:e2:02:01:ef:62:71:dc:bb:de:4a:28:e4:ef:1e:
         f6:15:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:19:48 2025 by rpki-client