Certificate

$ rpki-client -vvf k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.cer
File:                     3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.cer (raw, json)
Hash identifier:          KoxZl6wFNsaw0dVMg0PtdHFkeBE6mvSTslzRgwirn2A=
Subject key identifier:   3B:FA:6E:79:84:FC:DB:AA:BE:BE:AA:23:DC:06:E0:20:58:A5:F8:8F
Authority key identifier: 0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6
Certificate issuer:       /CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
Certificate serial:       24A2A118E4C4CD7E4CF42BFB9800DCE26517EE91
Authority info access:    rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer
Manifest:                 rsync://k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.mft
caRepository:             rsync://k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/
Notify URL:               https://k33.rrdp-rpki.athene-center.net/rrdp/notification.xml
Certificate not before:   Wed 27 Mar 2024 19:38:51 +0000
Certificate not after:    Wed 26 Mar 2025 19:43:51 +0000
Subordinate resources:    AS: 208162
                          IP: 158.220.162.0/24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a2:a1:18:e4:c4:cd:7e:4c:f4:2b:fb:98:00:dc:e2:65:17:ee:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
        Validity
            Not Before: Mar 27 19:38:51 2024 GMT
            Not After : Mar 26 19:43:51 2025 GMT
        Subject: CN=3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:0d:0c:97:84:7e:1c:86:6d:bd:e1:4a:9c:
                    3d:80:c8:88:74:3b:0c:29:03:cf:ec:fe:4e:15:8b:
                    47:5c:6a:69:16:ac:1c:cd:7d:f0:cf:8b:c7:6e:17:
                    f7:d3:f5:bb:64:b3:1a:8d:76:86:4c:f6:b2:5d:0d:
                    ec:46:1d:6e:1d:52:86:dd:4a:a5:e4:79:af:d8:7a:
                    c6:c0:87:33:97:41:96:03:e0:59:e6:5a:8a:13:20:
                    fe:90:37:c6:60:d1:c0:9a:d3:44:03:72:05:9c:28:
                    0d:73:d3:ec:86:4a:f3:72:bb:e1:b4:9f:f3:25:08:
                    d4:e0:8b:ca:42:f3:ff:2e:1d:08:5a:4b:63:0b:de:
                    8f:d0:f5:b8:f6:31:3a:52:fa:d3:89:04:ff:d8:c0:
                    63:90:7f:a6:51:29:6f:43:eb:f3:ca:02:89:67:6f:
                    ae:6a:96:b3:28:61:48:aa:57:e0:d8:48:cd:8d:4c:
                    b6:2b:84:06:5d:a7:f5:05:4f:b7:20:ca:f9:1e:e3:
                    c5:c9:90:15:02:23:1b:23:94:9d:41:3f:ca:e2:eb:
                    88:2e:b6:18:db:bf:82:22:e4:ed:7f:ec:3e:6b:8d:
                    10:31:6f:d4:70:63:83:f8:fa:b7:b4:0f:ab:7d:9a:
                    06:9d:da:f3:23:08:43:c4:9e:bc:6e:53:cf:89:c8:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:FA:6E:79:84:FC:DB:AA:BE:BE:AA:23:DC:06:E0:20:58:A5:F8:8F
            X509v3 Authority Key Identifier:
                keyid:0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer

            Subject Information Access:
                CA Repository - URI:rsync://k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/
                RPKI Manifest - URI:rsync://k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.mft
                RPKI Notify - URI:https://k33.rrdp-rpki.athene-center.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.162.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208162

    Signature Algorithm: sha256WithRSAEncryption
         25:7a:4a:85:c8:6f:00:3c:4a:e5:03:0c:fd:fd:6a:60:d9:9d:
         3d:db:0d:76:ab:00:c3:34:51:79:d6:86:73:64:26:2f:38:f7:
         b3:0f:0c:38:f5:99:47:8b:a6:f7:53:da:c4:42:4c:17:02:9b:
         e0:59:59:ee:93:06:a5:cb:ca:b7:38:a8:6f:3e:01:8d:2c:ed:
         d7:e4:0e:b6:9e:72:98:bd:cd:70:da:3d:9f:0f:b1:b4:ab:0e:
         c1:d5:3b:15:b9:8f:42:d9:0b:2d:d6:0b:7f:4a:1b:42:50:a4:
         37:97:e2:cc:e2:06:72:f5:69:55:9d:a0:d4:b7:c6:dd:91:a8:
         48:98:fd:e0:ba:94:3c:d3:8e:90:0e:4d:c4:20:c2:55:c3:cc:
         ae:f5:34:fb:c6:c9:50:1d:96:7e:30:d2:7a:d0:da:8a:ef:7b:
         b3:ab:b8:57:a4:43:97:db:f4:0b:f7:5b:95:d7:e2:73:73:b4:
         0e:19:09:b1:84:15:7a:bc:48:fc:b9:15:69:3b:5d:68:5e:e2:
         7a:e4:bf:d8:60:ad:25:39:e0:5d:fb:f4:9d:6b:24:75:2a:d2:
         4c:5f:a3:0b:08:49:36:39:11:86:d7:97:ea:6b:02:2a:b7:6b:
         04:88:53:94:e9:5b:53:a5:97:ea:87:93:bb:a3:20:87:0d:b8:
         36:12:2d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 02:11:39 2024 by rpki-client on console-ams.rpki-client.org