Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pxPHbpKyzLW-UBZlIn-7jKJrAEg.cer
File: pxPHbpKyzLW-UBZlIn-7jKJrAEg.cer (raw, json)
Hash identifier: PZcBmJpjK6kqEy+3LduIh4Zwwzof40rH1J7i8Eatbb8=
Subject key identifier: A7:13:C7:6E:92:B2:CC:B5:BE:50:16:65:22:7F:BB:8C:A2:6B:00:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190149805EE5E32F9E434845F87673E3E48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/0/A713C76E92B2CCB5BE501665227FBB8CA26B0048.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 14 Jun 2024 02:33:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215885
Validation: Failed, certificate revoked on Wed 26 Jun 2024 01:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:14:98:05:ee:5e:32:f9:e4:34:84:5f:87:67:3e:3e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 14 02:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a713c76e92b2ccb5be501665227fbb8ca26b0048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c9:e3:d1:88:c3:57:64:7f:3c:59:e5:2a:2d:
45:9a:38:15:49:a8:21:20:2f:69:34:d7:74:99:f9:
d6:f9:fa:1c:66:6a:bb:1f:58:79:d5:f8:a9:dd:25:
fb:38:9c:2d:cb:bd:e5:0c:ed:fe:18:50:2d:5b:5c:
78:34:e4:81:bd:42:fc:09:a0:26:e0:bf:b0:2a:66:
ea:fa:44:80:23:50:44:82:83:34:ba:cf:63:dd:1e:
46:6c:96:7f:3f:62:83:c1:0c:08:a8:62:e5:9f:1e:
1b:bf:a4:69:b8:7d:46:c4:53:16:ed:e2:96:6b:ef:
7f:b9:a4:64:0c:da:e0:49:99:0b:82:cf:63:b7:95:
d4:f3:0f:5e:07:56:12:e9:85:0d:c8:06:90:74:d6:
60:6a:84:c8:db:24:bc:0e:cd:c0:b0:11:65:38:32:
1c:c0:ec:f8:a4:6c:c6:19:ff:41:fd:2a:e2:91:74:
70:84:98:21:52:92:3b:b9:6c:0c:87:14:d8:a1:c6:
b4:60:cc:c8:76:2f:6f:c4:a9:dd:24:0f:47:4d:dd:
28:0c:bf:c3:45:94:18:4f:2f:bc:56:ff:2d:a0:88:
8d:d4:a2:ac:b1:28:c0:5e:73:19:e9:a2:b1:2e:25:
8e:eb:0d:75:9f:b6:ca:66:c0:f3:63:8e:6a:c3:4f:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:13:C7:6E:92:B2:CC:B5:BE:50:16:65:22:7F:BB:8C:A2:6B:00:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/0/A713C76E92B2CCB5BE501665227FBB8CA26B0048.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215885
Signature Algorithm: sha256WithRSAEncryption
39:a0:b9:18:8e:a4:52:ac:7f:03:0f:82:79:e6:40:54:8a:4e:
cc:29:0e:f4:13:db:10:77:28:ea:18:24:8a:94:63:42:73:20:
4a:ac:ff:31:87:24:a1:db:03:68:db:73:31:59:83:ff:f3:95:
50:87:66:03:bd:92:55:b4:5f:49:f2:9b:6d:d9:db:63:a2:97:
d5:d0:44:70:5d:c0:6b:a4:af:26:f5:49:3e:b9:e6:60:50:3f:
64:9d:ef:3f:c2:f8:58:e3:42:c3:96:5f:d0:8e:1a:60:ff:5a:
3e:12:3b:69:96:67:0c:90:1f:1c:ce:f0:f6:47:4f:5d:2b:45:
dc:ad:c6:ce:91:7f:a8:91:79:b3:e6:b3:7d:ef:b3:77:dd:da:
f1:db:dd:2e:7d:28:04:1a:70:6e:df:73:95:86:8a:6e:73:5d:
3e:ab:0a:d3:a3:78:90:27:70:8c:fd:3e:23:b2:fd:c1:bf:16:
af:6f:07:36:fe:9d:2e:36:62:77:e4:f3:45:18:21:ae:8d:8e:
7c:04:9f:04:d0:7f:84:40:95:c2:7d:8c:8b:6f:75:67:8e:8d:
56:f9:93:62:d6:a8:a1:aa:a1:fe:96:0f:43:3a:d6:ec:5d:d2:
e0:ff:28:40:2b:ba:04:c4:3a:1a:41:50:78:a7:d3:45:de:d9:
46:2a:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:33:00 2024 by rpki-client on console-ams.rpki-client.org