Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WFmbRULPpSR90dB0JFkLsbW7kNA.cer
File: WFmbRULPpSR90dB0JFkLsbW7kNA.cer (raw, json)
Hash identifier: izHEDTHZhZHxoOYqHfi41ybeWsPIUWBcttPCPge9FjQ=
Subject key identifier: 58:59:9B:45:42:CF:A5:24:7D:D1:D0:74:24:59:0B:B1:B5:BB:90:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAFE4D0771AAAB4784E2625B8C160F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/9f3c92-a9d9-43b8-b4e0-a62e73c9a0e5/1/WFmbRULPpSR90dB0JFkLsbW7kNA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/9f3c92-a9d9-43b8-b4e0-a62e73c9a0e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 201830
Validation: Failed, certificate revoked on Wed 01 Nov 2023 09:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:e4:d0:77:1a:aa:b4:78:4e:26:25:b8:c1:60:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58599b4542cfa5247dd1d07424590bb1b5bb90d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:7e:6a:4a:33:b1:d3:f3:84:ba:e2:d1:39:
e9:80:0f:2f:af:7c:42:ec:76:33:3e:5c:30:56:b8:
56:84:9d:a7:b7:e3:8f:fc:65:9e:b8:bf:78:13:38:
51:bb:65:4f:64:6e:eb:63:94:c9:81:fb:6a:3e:d7:
8b:27:5a:1f:23:b2:75:af:5e:7b:be:99:67:02:c3:
1b:d1:15:e8:cf:65:09:b2:73:85:79:1c:b9:e6:17:
17:bc:cc:7f:c6:43:ea:67:c9:34:ad:6e:78:40:91:
b9:1c:5d:4b:27:3a:6e:a7:01:3f:41:28:d4:d1:5e:
b9:ad:20:c4:ea:79:98:47:6a:85:3b:4f:b6:66:cf:
7d:5d:b5:be:9e:d8:5e:54:fd:64:b3:a6:4f:24:d7:
fa:6d:10:c5:c3:81:d1:62:66:42:f5:b8:92:bc:a4:
8b:b5:ff:63:88:20:fc:76:c0:2e:21:97:ea:0e:a1:
b9:63:fe:a1:f3:a9:e0:a8:07:80:08:54:1b:bd:ad:
42:0f:c6:6f:7e:33:16:74:e7:89:3b:ee:c9:b8:60:
bd:27:10:1c:06:cc:24:fa:51:a1:94:fb:ab:06:6b:
73:45:08:da:99:ef:d2:49:70:18:ed:c6:af:5a:e0:
9f:4d:13:f3:bd:8a:2c:00:a2:28:5e:38:8b:77:9f:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:59:9B:45:42:CF:A5:24:7D:D1:D0:74:24:59:0B:B1:B5:BB:90:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/9f3c92-a9d9-43b8-b4e0-a62e73c9a0e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/9f3c92-a9d9-43b8-b4e0-a62e73c9a0e5/1/WFmbRULPpSR90dB0JFkLsbW7kNA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201830
Signature Algorithm: sha256WithRSAEncryption
48:9a:8f:92:d6:6f:55:12:0e:d1:bf:4c:9f:82:9e:49:1d:df:
71:8f:ad:02:32:30:f0:17:f2:c1:15:0c:bc:b3:06:ed:6a:d4:
87:c7:d5:41:57:fe:f8:40:69:a9:02:33:a2:2b:19:83:79:e4:
b9:af:7f:04:d8:e8:b0:50:f1:d9:2b:c8:64:63:ad:a7:d8:91:
93:6d:f8:43:61:87:34:72:af:8d:62:69:25:9b:d2:d0:f1:90:
4f:79:77:03:eb:55:5f:46:f0:17:d2:58:c6:f0:b7:82:4a:31:
64:bb:02:65:bb:cd:ff:6a:8f:38:94:e0:6f:d8:a2:c8:c3:8d:
6f:7f:3a:a0:74:53:db:df:2d:0e:79:50:8f:87:8f:b6:11:98:
df:bd:ef:42:d5:bc:f2:6e:d7:2a:bc:d5:f2:7c:06:ec:ef:ec:
90:32:50:c1:b5:0a:e9:57:8e:b7:fb:30:11:e0:81:6e:a3:ab:
4a:ed:14:be:43:d5:c7:6d:e4:38:a9:d3:5c:07:fc:06:34:80:
8a:43:bb:12:6f:ec:c6:e8:0d:fc:17:92:d6:43:36:4f:38:5c:
01:a9:c3:8d:65:21:b9:2e:9e:6e:3f:b0:3e:59:20:aa:91:d3:
5d:e3:25:08:c9:5d:83:5e:8d:36:4e:13:d8:11:25:b7:86:54:
2c:c5:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-fra.rpki-client.org