Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mzgRO4twJocycZLTRIc_s6B0oh4.cer
File:                     mzgRO4twJocycZLTRIc_s6B0oh4.cer (raw, json)
Hash identifier:          9JN/NQTVo6ngz/hne9sqdlMU1twLV49CqZKdI2/zai4=
Subject key identifier:   9B:38:11:3B:8B:70:26:87:32:71:92:D3:44:87:3F:B3:A0:74:A2:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018760A37E05A0817F700F5CD91BB1B0811E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/HYSP/15/9B38113B8B702687327192D344873FB3A074A21E.mft
caRepository:             rsync://rpki.co/repo/HYSP/15
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:32:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 49867

Validation:               Failed, certificate revoked on Mon 10 Apr 2023 01:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:60:a3:7e:05:a0:81:7f:70:0f:5c:d9:1b:b1:b0:81:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  8 11:32:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b38113b8b702687327192d344873fb3a074a21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:1a:38:47:92:fc:72:82:20:c6:95:c8:98:
                    2c:5c:c9:d5:6d:2a:96:de:7b:48:ac:3c:88:56:97:
                    cc:42:c5:bf:b7:90:3d:ca:44:e3:41:19:55:a8:66:
                    06:f7:dc:35:3e:73:d4:1a:ad:76:b3:6b:75:3b:d6:
                    0a:92:ab:7e:09:ae:af:54:31:28:98:86:8c:60:92:
                    05:22:e8:45:88:c2:5b:30:27:2b:04:70:27:20:6a:
                    42:d4:7f:14:78:fc:be:be:1c:f2:9a:c4:15:48:7e:
                    c1:b2:87:97:3b:a4:d6:4a:64:37:3d:8d:52:46:a0:
                    99:81:fc:0c:22:32:8f:de:a0:b1:89:42:f9:63:e2:
                    59:65:22:95:30:6c:54:84:75:59:be:d7:f3:c0:36:
                    0d:89:50:5b:45:a3:01:6e:4d:11:44:48:b2:9d:b7:
                    d7:c4:75:ae:d8:51:7b:54:2a:8a:1b:1b:99:27:48:
                    a5:b8:b5:01:14:9e:30:19:ad:5e:a4:92:05:bc:a1:
                    25:4c:6b:69:d2:01:40:ea:46:df:a6:09:59:4b:81:
                    87:00:92:e3:16:79:ca:08:d9:da:01:0c:9d:5c:12:
                    8f:62:1c:a2:3d:db:8e:ee:99:18:96:61:79:a5:35:
                    3d:fb:41:02:33:e4:a0:0a:aa:dd:30:a1:c0:28:97:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:38:11:3B:8B:70:26:87:32:71:92:D3:44:87:3F:B3:A0:74:A2:1E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/15
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/15/9B38113B8B702687327192D344873FB3A074A21E.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49867

    Signature Algorithm: sha256WithRSAEncryption
         ad:ef:2d:b3:f8:61:86:21:b2:b0:94:50:a7:b1:f8:79:17:29:
         22:8d:f2:c3:7b:8b:f9:4e:55:3e:81:60:41:8d:54:0b:24:00:
         0e:68:5a:78:2c:9b:78:ea:00:40:91:66:5e:d9:e3:9c:c3:80:
         b6:df:20:09:b1:58:6e:e4:73:5f:89:ec:ea:ba:c8:b1:f9:7e:
         8a:b4:5f:2f:b2:1b:a2:53:eb:64:9c:aa:0b:26:81:05:26:6a:
         63:69:fa:23:a2:86:7f:f5:e5:94:95:41:7c:5b:b8:b6:eb:68:
         22:4f:1c:4d:80:16:36:4e:98:68:42:fc:b7:31:e4:b8:85:80:
         c9:54:4d:5e:1f:48:05:a8:6c:28:8f:39:04:44:0a:ca:5d:12:
         af:d2:41:02:f2:6c:ed:04:42:23:7d:ee:99:b7:01:80:c2:b1:
         4e:0c:c2:b2:c3:d0:1a:10:aa:dd:f9:eb:bf:95:67:64:d5:f1:
         d7:a7:8f:71:09:22:d2:39:39:27:eb:d3:48:cc:ec:85:48:27:
         6a:ae:6d:ec:9d:40:10:9b:4f:f0:59:2c:15:f3:5b:2c:74:60:
         35:31:a1:92:4b:65:a0:38:9e:9d:cd:9f:74:8a:0c:0e:6c:67:
         a4:37:97:f5:1a:b3:d1:cf:cc:51:a5:16:41:4d:a1:9d:7c:d9:
         f2:97:26:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:26 2024 by rpki-client on console-ams.rpki-client.org