
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
File:                     iW1QqxLax1eoUX-YnnMXJVoUfFA.cer (raw, json)
Hash identifier:          EZBdFsrSwgNeWwzShv5XBxSJggCdSh+R9+krbXiATJg=
Subject key identifier:   89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019938CFE7FCF24B0B70C1227476306EBA39
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 11 Sep 2025 12:46:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2a05:53c0::/29
Validation:               Failed, certificate revoked on Mon 15 Sep 2025 11:33:14 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:38:cf:e7:fc:f2:4b:0b:70:c1:22:74:76:30:6e:ba:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 11 12:46:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=896d50ab12dac757a8517f989e7317255a147c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:09:47:78:df:84:ad:7f:a6:2f:3c:91:53:
                    e0:3d:87:73:be:4f:e0:23:fc:61:01:61:81:5d:ee:
                    be:74:80:00:c3:18:91:70:46:8d:1b:2d:d9:68:2b:
                    58:15:bc:32:7e:8a:b2:ad:a3:51:cc:d2:f7:5d:e3:
                    14:2c:50:5c:1e:dc:65:57:bd:80:0d:b9:41:9d:51:
                    8b:d0:8f:64:2c:02:83:19:e0:36:bf:ce:92:d3:7a:
                    5f:d5:0d:a4:12:27:3e:12:ed:40:6a:1b:62:83:03:
                    33:ee:69:6c:54:a0:cb:f9:2c:e5:09:e1:17:06:99:
                    ad:59:a6:7d:94:f2:82:97:8d:21:9f:54:b4:b6:b4:
                    aa:1b:94:82:d1:e1:10:6e:ae:c5:fd:5e:65:55:5d:
                    e5:c0:8c:d4:71:42:62:7c:68:23:1a:78:e1:b0:0f:
                    21:52:eb:c8:2c:26:1f:1e:bc:34:d0:7d:5a:58:ba:
                    81:33:38:a9:ec:53:8b:e1:aa:7d:c9:01:a4:f6:80:
                    ae:f1:2c:ba:2e:56:e1:60:8b:32:fc:e2:6e:c4:dc:
                    1f:58:96:73:fd:60:f9:c2:7f:83:f0:d1:d7:ec:04:
                    b7:80:d8:69:c4:22:24:ca:4a:13:7d:f3:c7:6a:bd:
                    05:5d:cc:7b:aa:2e:b5:70:ad:a1:c6:e4:b4:93:45:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:53c0::/29
    Signature Algorithm: sha256WithRSAEncryption
         34:c3:f7:45:4c:81:21:ba:2c:0e:27:c2:ab:0e:71:1a:a9:c7:
         71:86:70:6b:bd:b0:64:82:29:0c:fe:1d:4d:36:b8:82:cb:09:
         ac:cd:aa:20:31:c9:b0:96:f9:59:be:bb:de:f8:f5:36:ba:07:
         a6:9e:63:85:aa:d6:56:16:68:2e:f3:9b:97:76:ca:62:72:87:
         e0:e9:f5:79:32:35:8e:1a:86:96:93:3a:fc:44:50:a2:d3:45:
         c5:f6:24:27:bf:19:b4:b4:20:0e:7c:fa:23:d6:5d:e8:6e:15:
         a8:d0:76:f3:2f:4c:de:ea:67:6c:a3:85:f2:1d:6f:a9:70:75:
         f3:79:76:11:cf:9d:1c:45:d8:53:b6:04:49:23:b0:f6:16:6d:
         b8:77:18:15:27:05:c8:b1:58:9d:59:65:d1:a8:8d:a3:8e:f7:
         54:28:45:c7:d6:c0:00:2c:f9:2d:b3:f5:27:85:05:1c:19:01:
         a5:13:7c:d9:f7:4a:8b:e1:07:b0:fd:e3:66:c9:ee:8a:9b:43:
         1a:3c:1e:32:62:15:a8:86:90:7e:11:a5:0d:b7:cf:ce:50:0a:
         14:84:56:59:51:48:8e:a1:8a:29:02:8a:bf:1b:2a:90:c1:1d:
         ad:ae:ac:0e:42:df:60:50:4a:05:dd:49:3b:69:47:5f:0b:01:
         31:7b:5c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:46:48 2025 by rpki-client