Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zMGOB5b3ancftw93KWEH0m2QGuw.cer
File: zMGOB5b3ancftw93KWEH0m2QGuw.cer (raw, json)
Hash identifier: ljzpIa1bLLtF+RqL6e3Y9wiG3v2goZS6X7YTO731i0g=
Subject key identifier: CC:C1:8E:07:96:F7:6A:77:1F:B7:0F:77:29:61:07:D2:6D:90:1A:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190E12446A321E01EDA7AAD20BC4864395D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/1/CCC18E0796F76A771FB70F77296107D26D901AEC.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 23 Jul 2024 19:49:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200160
Validation: Failed, certificate revoked on Wed 24 Jul 2024 07:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e1:24:46:a3:21:e0:1e:da:7a:ad:20:bc:48:64:39:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 23 19:49:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccc18e0796f76a771fb70f77296107d26d901aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3f:e2:33:0e:e0:04:bf:3d:91:7c:a3:cb:5a:
f3:ba:a6:c8:b5:4c:ea:24:2d:91:19:7c:b8:a1:dd:
53:95:c0:44:1e:53:e4:32:d9:22:36:a3:7e:87:f6:
04:4e:88:70:61:7f:37:db:13:9c:69:a4:5e:10:ae:
6f:0b:b8:50:d0:2b:af:b8:0a:39:b7:2b:9d:33:43:
a2:f5:80:6a:a1:1d:1f:d0:49:c1:3a:2d:c5:96:ff:
c9:40:20:95:ea:45:d3:0f:a8:98:81:86:7e:5d:d1:
98:07:1b:bb:a5:f0:3c:86:f3:cf:e9:93:04:c5:04:
0d:88:fd:7a:b2:1a:4c:b4:da:a6:0d:36:91:54:c6:
33:1d:2f:db:ac:19:54:21:a7:7b:5b:e9:ea:b3:fc:
bf:8b:ff:94:98:c5:7d:78:c5:a9:71:a4:36:51:66:
22:c9:ce:06:bd:fc:e3:c0:c4:6d:ab:8b:63:ab:ac:
fd:26:40:7a:21:a8:68:db:88:9d:bd:41:e5:07:dc:
67:a0:ac:03:d7:f4:13:03:59:a0:4e:94:4c:2d:53:
db:17:cd:e5:7a:14:91:73:79:b4:b7:4d:48:6d:af:
cb:6f:6d:c2:15:77:46:c5:4e:2e:d9:5e:14:13:6d:
53:37:46:0c:c3:71:7c:cc:9e:fd:7d:f7:ac:82:95:
47:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C1:8E:07:96:F7:6A:77:1F:B7:0F:77:29:61:07:D2:6D:90:1A:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/1/CCC18E0796F76A771FB70F77296107D26D901AEC.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200160
Signature Algorithm: sha256WithRSAEncryption
a4:cc:0e:23:67:b0:7b:3b:53:94:b0:e7:98:85:17:e2:90:12:
0c:69:5a:af:6b:aa:04:4f:37:77:0d:c5:b6:7b:af:2e:a8:1d:
e4:60:cb:46:c8:74:40:4b:05:e1:f9:82:06:3d:4e:83:15:d4:
b8:1f:00:21:7a:3c:cb:28:12:9b:b5:5c:18:2a:9a:01:f5:fc:
a8:66:e4:7e:f0:9a:d2:72:67:fa:a6:b6:08:53:ee:7f:a3:ed:
a1:c2:bf:9e:3b:e0:9b:81:f8:f2:ed:a9:29:0c:87:29:80:d8:
99:6d:29:17:53:2a:0f:47:36:d5:34:be:9e:56:c0:25:40:e3:
f7:95:27:1f:50:9f:14:4d:21:4a:c7:67:2d:de:52:88:93:1c:
0d:97:1d:6a:ed:26:e2:ad:c3:cc:b9:45:dd:ca:99:fe:01:bd:
4d:d8:ff:03:02:10:a8:32:5a:b7:68:22:69:41:4b:3b:7c:0c:
d6:30:5c:66:6e:e9:18:b5:f2:34:f9:88:54:f3:23:13:c4:57:
60:0d:96:2a:6e:b8:05:6f:f7:80:fb:04:5f:86:cc:21:93:0c:
88:1b:34:5f:cb:8d:ce:30:80:86:16:0e:71:d1:0d:66:84:a2:
42:e2:f2:80:b3:af:cb:0f:06:ef:03:3b:7c:3b:ad:17:56:ae:
87:8e:22:c5
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZDhJEajIeAe2nqtILxIZDldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNzIzMTk0OTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2MxOGUwNzk2Zjc2YTc3MWZiNzBmNzcyOTYxMDdkMjZkOTAxYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj/iMw7gBL89kXyjy1rzuqbItUzq
JC2RGXy4od1TlcBEHlPkMtkiNqN+h/YETohwYX832xOcaaReEK5vC7hQ0CuvuAo5
tyudM0Oi9YBqoR0f0EnBOi3Flv/JQCCV6kXTD6iYgYZ+XdGYBxu7pfA8hvPP6ZME
xQQNiP16shpMtNqmDTaRVMYzHS/brBlUIad7W+nqs/y/i/+UmMV9eMWpcaQ2UWYi
yc4GvfzjwMRtq4tjq6z9JkB6Iaho24idvUHlB9xnoKwD1/QTA1mgTpRMLVPbF83l
ehSRc3m0t01Iba/Lb23CFXdGxU4u2V4UE21TN0YMw3F8zJ79ffesgpVHwwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFMzBjgeW92p3H7cPdylhB9JtkBrsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFlMGQx
ZTQwLWM0ZmMtNDk3NC1iMTVmLTMyZTY2ZGM2NjZjOS8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWUw
ZDFlNDAtYzRmYy00OTc0LWIxNWYtMzJlNjZkYzY2NmM5LzEvQ0NDMThFMDc5NkY3
NkE3NzFGQjcwRjc3Mjk2MTA3RDI2RDkwMUFFQy5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDDeAw
DQYJKoZIhvcNAQELBQADggEBAKTMDiNnsHs7U5Sw55iFF+KQEgxpWq9rqgRPN3cN
xbZ7ry6oHeRgy0bIdEBLBeH5ggY9ToMV1LgfACF6PMsoEpu1XBgqmgH1/Khm5H7w
mtJyZ/qmtghT7n+j7aHCv5474JuB+PLtqSkMhymA2JltKRdTKg9HNtU0vp5WwCVA
4/eVJx9QnxRNIUrHZy3eUoiTHA2XHWrtJuKtw8y5Rd3Kmf4BvU3Y/wMCEKgyWrdo
ImlBSzt8DNYwXGZu6Ri18jT5iFTzIxPEV2ANlipuuAVv94D7BF+GzCGTDIgbNF/L
jc4wgIYWDnHRDWaEokLi8oCzr8sPBu8DO3w7rRdWroeOIsU=
-----END CERTIFICATE-----
Generated at Wed Jul 24 09:54:24 2024 by rpki-client on console-ams.rpki-client.org