Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wZXPwfuRsteqxrurMYOYY-i6agM.cer
File:                     wZXPwfuRsteqxrurMYOYY-i6agM.cer (raw, json)
Hash identifier:          9I06af/y4dNl/xXtFLv0TNfM25EV5M3a7EHP08Rwcvo=
Subject key identifier:   C1:95:CF:C1:FB:91:B2:D7:AA:C6:BB:AB:31:83:98:63:E8:BA:6A:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018DF937DF628D429472FECCA09C4D7D95C6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/4574c3-43a4-4555-943c-3ef086ccb3d8/1/wZXPwfuRsteqxrurMYOYY-i6agM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/4574c3-43a4-4555-943c-3ef086ccb3d8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Mar 2024 08:53:24 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 51692
Validation:               Failed, certificate revoked on Sun 17 Mar 2024 11:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:f9:37:df:62:8d:42:94:72:fe:cc:a0:9c:4d:7d:95:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  1 08:53:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c195cfc1fb91b2d7aac6bbab31839863e8ba6a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:5b:74:bc:fa:fe:1c:fa:c4:3d:a2:dc:ad:
                    e9:12:5d:77:cb:1e:b3:73:78:6e:de:1f:2f:bc:1e:
                    69:04:60:95:8d:09:d9:7a:98:ef:cf:d9:52:36:2f:
                    f5:d2:e1:b3:d1:1a:77:f7:8e:71:09:1b:0c:bf:f5:
                    27:fd:0c:66:55:f7:72:f6:9d:11:a6:15:da:06:e5:
                    d1:5a:fa:f7:de:a6:cd:f0:51:af:b1:f7:c2:ec:15:
                    e0:e3:1a:2c:24:da:57:37:45:64:d5:a9:e7:a3:3b:
                    46:af:30:b7:7f:5e:e3:b4:58:f9:15:d6:01:b5:f7:
                    34:1c:78:f7:19:ff:dd:c9:7d:c5:e3:54:92:80:6d:
                    3b:ca:54:1f:6e:f1:24:03:81:e3:d8:eb:40:ae:c0:
                    7f:f8:78:a6:63:54:6f:b1:a1:6f:54:bb:5e:fd:21:
                    0d:d2:e4:c0:f5:d2:ab:4f:94:8e:36:ed:ac:1a:0f:
                    ca:0b:c4:f0:a1:44:57:12:3a:3e:a4:04:2c:c1:63:
                    7d:06:97:3b:36:21:11:ce:e2:f9:3c:de:a2:c0:10:
                    ca:6f:a9:42:d7:59:a4:3b:47:c3:d0:42:8b:e8:13:
                    34:c7:c9:79:17:e8:b7:e1:91:cb:72:a7:92:fb:69:
                    91:41:d1:bb:19:c5:aa:05:b2:14:e1:0c:32:2e:cf:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:95:CF:C1:FB:91:B2:D7:AA:C6:BB:AB:31:83:98:63:E8:BA:6A:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4574c3-43a4-4555-943c-3ef086ccb3d8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4574c3-43a4-4555-943c-3ef086ccb3d8/1/wZXPwfuRsteqxrurMYOYY-i6agM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51692

    Signature Algorithm: sha256WithRSAEncryption
         88:32:25:2a:22:7c:7f:1c:e1:8f:bd:e1:68:ff:eb:cc:30:85:
         43:4f:28:62:7b:4e:00:82:db:e8:6d:07:20:5d:17:72:55:1a:
         46:a9:ef:99:63:cb:86:6b:bb:7d:d8:1d:a5:fb:9c:30:41:60:
         2d:f0:5e:90:eb:ca:d7:54:44:d5:52:4d:74:04:4f:d6:19:b0:
         83:83:6b:c1:13:de:b9:6c:38:24:27:05:17:ad:a8:50:5b:6d:
         13:c3:94:16:73:27:d6:f3:55:2d:00:f3:d7:cc:c8:ea:6b:cc:
         97:d5:3b:a7:4f:53:6b:e2:52:8e:83:9a:22:46:43:05:a7:f2:
         fe:6e:0a:bd:76:1a:11:8d:85:f6:ca:c8:84:bc:41:ed:13:53:
         39:0b:fd:18:41:ca:18:f2:c3:f4:80:96:5f:b9:41:0b:12:6e:
         e3:f4:1c:24:be:11:81:68:ad:39:f2:d8:45:f2:2b:16:5d:6f:
         59:a5:c4:ac:2e:dd:ed:06:b2:10:b5:7f:b7:a2:c2:6d:3d:bb:
         5b:21:52:15:f0:8a:8f:e8:61:cd:33:e2:35:dc:a7:0d:7f:94:
         51:e9:23:c9:52:d4:c0:29:ed:53:6f:ce:7e:c1:56:85:00:9b:
         ff:42:54:79:56:8e:24:bf:d9:c6:0f:c6:a9:1f:53:1a:7d:a4:
         0b:4f:6d:65
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY35N99ijUKUcv7MoJxNfZXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzAxMDg1MzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTk1Y2ZjMWZiOTFiMmQ3YWFjNmJiYWIzMTgzOTg2M2U4YmE2YTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoktbdLz6/hz6xD2i3K3pEl13yx6z
c3hu3h8vvB5pBGCVjQnZepjvz9lSNi/10uGz0Rp3945xCRsMv/Un/QxmVfdy9p0R
phXaBuXRWvr33qbN8FGvsffC7BXg4xosJNpXN0Vk1annoztGrzC3f17jtFj5FdYB
tfc0HHj3Gf/dyX3F41SSgG07ylQfbvEkA4Hj2OtArsB/+HimY1RvsaFvVLte/SEN
0uTA9dKrT5SONu2sGg/KC8TwoURXEjo+pAQswWN9Bpc7NiERzuL5PN6iwBDKb6lC
11mkO0fD0EKL6BM0x8l5F+i34ZHLcqeS+2mRQdG7GcWqBbIU4QwyLs+wkwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMGVz8H7kbLXqsa7qzGDmGPoumoDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzQ1NzRj
My00M2E0LTQ1NTUtOTQzYy0zZWYwODZjY2IzZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvNDU3NGMz
LTQzYTQtNDU1NS05NDNjLTNlZjA4NmNjYjNkOC8xL3daWFB3ZnVSc3RlcXhydXJN
WU9ZWS1pNmFnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDJ7DANBgkqhkiG9w0BAQsFAAOCAQEAiDIlKiJ8fxzh
j73haP/rzDCFQ08oYntOAILb6G0HIF0XclUaRqnvmWPLhmu7fdgdpfucMEFgLfBe
kOvK11RE1VJNdARP1hmwg4NrwRPeuWw4JCcFF62oUFttE8OUFnMn1vNVLQDz18zI
6mvMl9U7p09Ta+JSjoOaIkZDBafy/m4KvXYaEY2F9srIhLxB7RNTOQv9GEHKGPLD
9ICWX7lBCxJu4/QcJL4RgWitOfLYRfIrFl1vWaXErC7d7QayELV/t6LCbT27WyFS
FfCKj+hhzTPiNdynDX+UUekjyVLUwCntU2/OfsFWhQCb/0JUeVaOJL/Zxg/GqR9T
Gn2kC09tZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:39:22 2025 by rpki-client