Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aqrcGXZY5YjFQ7QiJp_cfeCw2fo.cer
File: aqrcGXZY5YjFQ7QiJp_cfeCw2fo.cer (raw, json)
Hash identifier: TAH3iNLFsBfxasqUUkYeZOHtDdWhwRRb/b5qooVVVRY=
Subject key identifier: 6A:AA:DC:19:76:58:E5:88:C5:43:B4:22:26:9F:DC:7D:E0:B0:D9:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01914F8E43FADA76897616999AE4DF3EAF33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/moeqing/0/6AAADC197658E588C543B422269FDC7DE0B0D9FA.mft
caRepository: rsync://rpki.co/repo/moeqing/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Wed 14 Aug 2024 06:23:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200105
Validation: Failed, certificate revoked on Thu 03 Oct 2024 19:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4f:8e:43:fa:da:76:89:76:16:99:9a:e4:df:3e:af:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 14 06:23:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6aaadc197658e588c543b422269fdc7de0b0d9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:2d:0a:bb:ec:2f:a5:95:2e:cc:ef:3f:f7:
b9:3f:84:96:80:a7:3a:3a:8b:e1:fa:93:55:a2:2f:
31:1a:da:40:ca:78:0b:38:ef:9e:71:ab:4f:4b:10:
22:05:a9:6d:3d:b6:8f:20:79:bc:e2:a9:91:78:2e:
50:6b:ac:5d:89:3f:ea:d1:9c:a9:58:9b:31:39:fb:
ca:3c:4f:02:d1:18:28:3e:ed:9b:61:38:1b:9f:15:
e3:b0:07:6a:f2:c6:b3:24:3c:39:f7:56:1c:55:69:
a6:cb:9c:71:cc:71:29:9b:7d:69:74:eb:62:0e:7c:
9b:23:37:f3:21:18:6a:6d:c0:ee:50:44:13:2e:5b:
1b:e2:a0:fb:a6:3c:72:c6:da:0a:a5:f7:6f:80:51:
d4:82:f1:90:0e:58:da:be:44:9f:dd:b0:78:e0:da:
f7:b2:d1:c4:f3:6e:cd:b0:b9:01:67:27:1e:79:af:
4f:46:a0:1a:f2:39:e7:8f:63:5a:64:ee:7a:41:54:
c1:52:01:46:45:76:07:5c:68:50:54:20:6b:ed:6e:
b2:44:fb:24:85:9c:f2:e2:52:e3:00:d2:e4:74:29:
7c:93:2a:5d:f6:09:23:86:9a:b1:fd:84:0d:0b:3f:
ad:b5:95:05:9b:f4:19:df:5b:e1:d7:ee:e2:d7:9c:
c8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:DC:19:76:58:E5:88:C5:43:B4:22:26:9F:DC:7D:E0:B0:D9:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/moeqing/0/
RPKI Manifest - URI:rsync://rpki.co/repo/moeqing/0/6AAADC197658E588C543B422269FDC7DE0B0D9FA.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200105
Signature Algorithm: sha256WithRSAEncryption
7b:2b:ee:8c:56:3d:09:9c:77:ca:6b:67:fc:80:78:2f:8f:7a:
61:54:fd:b8:56:0f:a0:a3:39:84:97:01:3f:34:b7:cf:97:b5:
68:2d:39:8e:ea:9b:fb:70:62:c6:77:e9:fa:bd:e4:75:56:7b:
3b:cd:1b:09:83:92:2c:8f:87:51:b7:31:6f:79:fb:15:de:04:
c5:db:56:a5:2a:9e:e8:d7:80:c3:99:8b:e6:eb:19:65:02:50:
94:57:f6:b8:ae:49:e6:3a:86:fb:fb:8c:9d:49:cc:22:5f:2b:
ac:43:c3:cf:4d:5e:90:33:00:27:d7:17:82:93:56:63:40:59:
0f:70:ba:f1:30:88:fa:13:ae:64:75:b6:66:e7:9e:07:8b:b4:
d3:99:61:0f:a8:7e:2d:e9:9c:88:01:73:28:5b:ea:08:36:a0:
03:f4:3d:58:85:13:22:71:d4:a6:9f:c0:9f:53:ee:92:af:7e:
51:bb:14:80:06:8c:c1:be:3b:4d:d6:07:08:ea:3a:6c:3b:9d:
1c:20:49:f5:96:7a:05:59:55:87:e0:06:4f:0e:0b:c6:e6:c4:
16:e8:8f:ee:a8:73:8f:6a:ae:0c:f5:51:c4:2b:60:a9:69:dd:
3b:b2:c4:a3:9b:2c:4b:19:30:ca:7c:76:6e:d1:e1:d2:73:bd:
c4:0c:34:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:40:23 2025 by rpki-client