Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-kWMauWSMX0wN9jfMbukarLnt18.cer
File: 1-kWMauWSMX0wN9jfMbukarLnt18.cer (raw, json)
Hash identifier: um6hZzHSe1Z8Q63VIVaWGJDjTXLW+HieI/Yvuj13184=
Subject key identifier: FA:45:8C:6A:E5:92:31:7D:30:37:D8:DF:31:BB:A4:6A:B2:E7:B7:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018BD7F4B38867F3683719DD044DBB22217A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/d2f7aa-c026-49c0-983a-99ec612578cc/1/1-kWMauWSMX0wN9jfMbukarLnt18.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/d2f7aa-c026-49c0-983a-99ec612578cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Nov 2023 11:47:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 216041
Validation: Failed, certificate revoked on Fri 17 Nov 2023 16:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:f4:b3:88:67:f3:68:37:19:dd:04:4d:bb:22:21:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 16 11:47:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa458c6ae592317d3037d8df31bba46ab2e7b75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:8a:98:2c:21:90:53:7d:8e:16:ac:13:6b:
b5:70:3a:08:65:58:82:c0:5e:4f:e3:ae:d4:25:a8:
97:7e:34:a3:8f:98:20:f7:d4:14:b2:ee:15:b7:78:
40:4a:93:de:e7:33:dc:65:50:20:ab:ac:87:b1:e5:
96:45:7d:77:f4:34:61:70:ab:0a:6e:90:bd:2d:87:
35:52:1a:ee:6d:a3:80:39:22:5f:a3:aa:59:bd:ef:
c2:33:e3:b4:43:b0:8f:2c:ae:8b:b5:e1:6b:d6:57:
4f:c5:bf:4c:7d:b1:aa:04:3e:50:dc:ca:23:a4:b2:
39:80:7a:72:fc:a2:c3:8f:a9:37:73:55:84:6b:05:
09:0f:d5:65:ef:60:9c:a7:e0:54:d4:6a:80:22:a4:
a5:2f:67:cb:a5:a1:37:c3:f2:af:88:35:b1:6e:fe:
1f:d8:55:00:d9:f8:86:fe:09:21:8c:1b:85:85:9c:
62:bd:34:b0:c1:12:0e:0b:03:b9:6d:4c:a8:54:07:
97:26:7d:2a:eb:f8:fa:88:2a:e2:fd:6e:66:82:e6:
f3:98:30:a9:1e:38:6e:22:b7:e9:e1:72:64:05:19:
9f:6d:b1:e4:0f:29:3e:ef:6b:41:f2:4c:71:dd:98:
ff:74:e3:6a:51:34:af:6e:1a:6b:c7:82:1d:16:81:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:45:8C:6A:E5:92:31:7D:30:37:D8:DF:31:BB:A4:6A:B2:E7:B7:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d2f7aa-c026-49c0-983a-99ec612578cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d2f7aa-c026-49c0-983a-99ec612578cc/1/1-kWMauWSMX0wN9jfMbukarLnt18.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216041
Signature Algorithm: sha256WithRSAEncryption
41:14:56:8d:8d:cf:42:23:08:d6:5a:36:5d:e5:a6:c6:1c:18:
95:47:2b:bb:a0:f0:7d:ef:35:0f:b1:38:74:ea:b5:21:b2:a1:
48:18:e0:06:26:1c:bf:7f:37:e3:e7:a6:48:98:d7:99:ee:5c:
da:2e:80:92:be:c7:90:b2:f2:6c:b0:00:63:cb:7c:51:da:d5:
dd:e1:3c:16:8b:fd:fc:97:e9:63:5d:21:cd:69:66:be:ce:8e:
2e:98:2e:e3:74:2d:fa:58:f0:e9:65:75:95:2b:72:8d:40:d4:
9f:13:0c:9b:78:65:00:0f:4f:bd:04:e1:a1:3a:f0:df:85:a3:
9e:9a:62:10:52:6f:8e:90:a8:bb:0e:21:22:3f:32:57:fa:86:
d6:37:b9:8c:5c:74:b7:73:7b:9a:e6:89:22:8b:8e:84:a7:26:
19:5a:4d:8d:cb:e3:45:8e:15:ef:16:f6:8d:02:4b:95:04:5d:
47:f1:f5:f3:d3:14:31:90:1a:84:39:f0:8a:5e:f8:f9:1c:50:
8a:f2:f5:f4:a2:4e:09:88:a4:61:66:fb:8d:a6:30:b5:2b:d9:
08:05:de:97:4a:ff:e6:01:05:c0:8b:3d:28:9b:7a:b9:c1:85:
f7:7b:e9:3f:6f:16:34:01:4a:a1:62:ba:6a:93:04:22:5b:e7:
8c:15:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:44 2024 by rpki-client on console-ams.rpki-client.org