Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Kv0mG7p6Txqunw8IfJTcEszl_U.cer
File: 2Kv0mG7p6Txqunw8IfJTcEszl_U.cer (raw, json)
Hash identifier: iOvhprLYDHI5zHo4HwKyQfyNYCOrQeXAS/FY64ogwYE=
Subject key identifier: D8:AB:F4:98:6E:E9:E9:3C:6A:BA:7C:3C:21:F2:53:70:4B:33:97:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D6A488518EED55F490B44516C805CCE7F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.netiface.net/repo/Netiface/1/D8ABF4986EE9E93C6ABA7C3C21F253704B3397F5.mft
caRepository: rsync://rpki.netiface.net/repo/Netiface/1/
Notify URL: https://rpki.netiface.net/rrdp/notification.xml
Certificate not before: Fri 02 Feb 2024 14:45:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60223
AS: 215580
Validation: Failed, certificate revoked on Fri 19 Apr 2024 20:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:48:85:18:ee:d5:5f:49:0b:44:51:6c:80:5c:ce:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 2 14:45:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8abf4986ee9e93c6aba7c3c21f253704b3397f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:17:c9:c1:a5:60:ce:7f:99:20:ad:1c:04:
f7:a4:30:43:02:99:d8:9b:da:a2:6e:35:8f:58:4c:
a9:89:12:01:19:d0:65:a2:a9:82:aa:20:b0:2a:4c:
cd:2d:6f:f8:9a:b0:f3:f2:1b:f0:87:fd:5d:74:01:
2e:6e:ac:cf:d5:e2:78:69:3d:6d:26:69:f2:5a:53:
fb:06:15:8e:7a:7b:e7:4b:0e:6f:db:08:da:19:05:
84:22:b8:f5:49:18:d5:9a:5b:2a:87:20:e1:92:54:
58:d5:00:3c:d9:e4:0e:0f:8a:42:99:8a:aa:74:f6:
bf:09:21:31:e7:8e:4a:6e:1b:56:94:fb:1f:99:d6:
f8:c9:94:9b:be:75:ef:e9:e4:f3:fa:1c:b7:d7:04:
f2:57:d3:42:dd:8b:09:58:68:e5:72:cb:89:9f:d6:
78:eb:07:4b:67:ce:a0:e2:26:34:db:ab:ce:3c:88:
6b:78:4d:4b:c5:01:dd:2d:43:46:69:08:81:52:e5:
1b:b5:8c:fc:ca:b7:5d:18:b0:4e:f9:63:47:3b:a2:
a0:e3:89:33:d1:bf:7d:4b:73:12:73:cb:15:b2:9c:
ea:3f:15:60:44:dc:71:6f:7a:94:df:47:61:09:a5:
f7:ab:66:c8:d6:f0:bf:73:54:64:fd:61:d3:f8:66:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AB:F4:98:6E:E9:E9:3C:6A:BA:7C:3C:21:F2:53:70:4B:33:97:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.netiface.net/repo/Netiface/1/
RPKI Manifest - URI:rsync://rpki.netiface.net/repo/Netiface/1/D8ABF4986EE9E93C6ABA7C3C21F253704B3397F5.mft
RPKI Notify - URI:https://rpki.netiface.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60223
215580
Signature Algorithm: sha256WithRSAEncryption
97:9c:15:45:1c:68:c6:51:0d:43:38:b4:2b:d9:03:5a:dd:71:
10:c0:07:05:af:e8:5a:c2:51:41:24:d4:25:92:5e:03:28:29:
57:ba:2a:94:34:e9:cd:38:ad:95:7f:9f:d9:c0:0a:65:b6:90:
f3:82:06:56:33:52:6b:79:89:d0:d1:9e:0d:32:cb:52:a7:bc:
f7:36:ce:42:5c:6e:32:7b:d9:99:78:6b:f5:0f:6a:03:e0:f9:
5a:66:1f:2e:81:01:b5:62:f9:06:16:e2:f8:a8:20:b4:14:45:
c4:36:e5:89:02:77:07:43:8f:b4:a1:d0:81:7b:b0:46:fc:84:
71:04:5f:35:98:b2:34:d7:cd:8b:28:6e:29:59:6f:ff:76:fc:
8d:f9:b0:b1:3c:2e:1a:04:a9:c7:cd:4d:5a:5c:73:e7:4e:1d:
c7:6e:8d:2b:6c:f0:8b:d9:98:f3:1c:7a:39:50:cd:82:07:bf:
42:c6:2b:c5:2c:7d:4f:8b:1a:93:38:99:65:55:6c:af:65:ca:
3a:28:77:d1:a5:4d:b0:43:9d:7b:54:d1:9f:0b:e9:3d:42:4d:
e5:72:46:88:54:62:bc:b8:da:0b:92:cf:6f:ad:68:25:70:3e:
b1:e2:ad:8e:6b:bf:65:07:d6:4d:6a:99:6a:ab:ca:04:1f:0d:
14:0f:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:27 2024 by rpki-client on console-fra.rpki-client.org