Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2BfVR6PgzPgrJl_LYLMpBvGg7yI.cer
File: 2BfVR6PgzPgrJl_LYLMpBvGg7yI.cer (raw, json)
Hash identifier: vWKeY2v9oYA+vg4w6SroE9BZhd6zX2t2O/Uwh3HmH5g=
Subject key identifier: D8:17:D5:47:A3:E0:CC:F8:2B:26:5F:CB:60:B3:29:06:F1:A0:EF:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190296F8899FA9E89B4695111D17AD30161
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/fc8d0c-f5b3-4ab5-b58b-4ad611363de2/1/2BfVR6PgzPgrJl_LYLMpBvGg7yI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/fc8d0c-f5b3-4ab5-b58b-4ad611363de2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Jun 2024 03:41:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215023
Validation: Failed, certificate revoked on Sun 07 Jul 2024 18:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:29:6f:88:99:fa:9e:89:b4:69:51:11:d1:7a:d3:01:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 03:41:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d817d547a3e0ccf82b265fcb60b32906f1a0ef22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:2f:af:88:0b:fb:72:9e:e8:f4:74:a5:5f:
c7:1f:5b:97:ce:1f:9a:26:4e:7a:69:79:c0:44:a3:
3a:3a:06:41:cc:de:e7:24:e5:01:bc:50:ea:5d:f3:
4e:9f:20:19:5f:87:38:be:75:3d:e4:e9:10:e2:a9:
2b:9e:76:4a:1c:99:cd:99:dd:33:32:df:b9:8d:d5:
c5:a1:99:29:6f:52:b6:ea:91:2b:f8:bf:e5:0b:43:
ba:3d:3f:66:70:09:5c:2a:fe:91:5c:f8:04:52:aa:
c7:d5:bc:c3:65:8e:d7:e4:83:73:30:86:b0:d7:c4:
6e:8c:9c:5c:ce:24:a4:72:0c:b4:73:60:cd:82:33:
21:be:41:c1:e5:e2:45:31:f4:c5:14:bc:06:d0:10:
ea:2c:60:1a:9d:1a:54:5d:00:41:4a:52:fb:b6:c8:
62:f0:17:5b:a9:34:cd:9a:1c:9b:b9:33:83:05:bd:
ff:a9:74:8b:68:92:c6:d7:21:ac:35:38:0c:02:2b:
a2:93:36:a1:c7:65:be:41:9d:60:3b:2e:87:fe:46:
79:3b:70:96:21:6d:ef:2c:ca:27:f4:d8:ea:e5:c9:
90:53:18:01:14:2c:fd:44:b4:c3:7d:20:31:9d:e6:
62:c2:e6:f3:27:6a:db:f7:21:82:15:c5:95:97:0a:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:17:D5:47:A3:E0:CC:F8:2B:26:5F:CB:60:B3:29:06:F1:A0:EF:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc8d0c-f5b3-4ab5-b58b-4ad611363de2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc8d0c-f5b3-4ab5-b58b-4ad611363de2/1/2BfVR6PgzPgrJl_LYLMpBvGg7yI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215023
Signature Algorithm: sha256WithRSAEncryption
0b:4e:8c:3a:4f:3b:4c:1c:f8:9b:d3:92:3d:3b:fe:de:94:64:
7a:c0:90:a4:ec:de:98:60:00:c8:fa:82:1e:d8:eb:1b:b9:74:
a2:ce:22:5e:5c:27:e3:80:75:41:dc:81:fa:dc:86:e6:94:9e:
ae:db:32:b0:b0:ad:ac:0e:7c:4b:89:93:dd:63:4c:e8:4f:4e:
13:3f:23:bf:f6:a5:3e:22:fc:11:fc:cb:0f:86:34:67:a0:9b:
6e:b4:18:58:11:eb:4e:6f:03:24:51:46:38:5a:ca:f8:f3:77:
15:29:39:67:fc:23:86:7c:34:d6:56:59:20:fb:d9:e1:b5:ed:
28:15:50:e7:48:f5:3f:57:27:87:7e:a7:c6:3c:b9:83:a2:82:
ab:80:e9:59:25:6c:18:31:03:94:7f:13:db:5f:7b:16:95:59:
d5:75:d5:1c:7d:6b:8c:67:69:5e:3b:9c:15:b3:6e:df:3d:34:
23:9b:06:b8:64:de:04:9d:a4:e4:2c:bf:03:4f:ff:04:e1:09:
05:e8:67:f8:87:a3:51:92:3c:c7:13:fd:96:66:4d:df:79:af:
11:53:49:49:5d:97:38:ce:57:e3:36:33:9a:c4:7f:e8:26:6e:
e8:eb:b0:b9:68:64:e8:fa:11:01:5f:18:b5:00:29:98:77:aa:
b2:3c:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:09 2025 by rpki-client