Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2doPc2DPadrX0E2s3fQXtB_umK0.cer
File: 2doPc2DPadrX0E2s3fQXtB_umK0.cer (raw, json)
Hash identifier: A7sv5rIvT0SWGPzOl895MNUIOkgGP8zj4LTDeGEFmqM=
Subject key identifier: D9:DA:0F:73:60:CF:69:DA:D7:D0:4D:AC:DD:F4:17:B4:1F:EE:98:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191DBD64CA941876A1C4AC22733ECF377E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/a58aca-3f1e-4d41-88e4-d42fc2b6ea30/1/2doPc2DPadrX0E2s3fQXtB_umK0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/a58aca-3f1e-4d41-88e4-d42fc2b6ea30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Sep 2024 12:09:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214345
IP: 2001:3a80::/29
Validation: Failed, certificate revoked on Sun 15 Sep 2024 10:50:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:d6:4c:a9:41:87:6a:1c:4a:c2:27:33:ec:f3:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 12:09:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9da0f7360cf69dad7d04dacddf417b41fee98ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:31:47:70:42:97:4d:ef:22:89:61:de:a2:
72:aa:22:af:5f:e8:d5:de:18:ae:1e:41:5a:5a:f2:
3e:70:ab:fc:a9:f4:6c:a3:4d:81:24:95:0f:21:0f:
2f:25:a2:0b:a6:36:2b:c5:ed:f6:e9:b4:04:b9:d6:
9f:00:88:14:4b:d3:f3:b3:24:46:fb:87:fc:7a:9b:
be:62:a3:05:f1:0b:e6:77:1e:54:05:8d:99:c9:86:
56:ef:79:43:71:e5:5b:9e:44:1c:98:9f:1f:1d:dc:
c9:43:4b:96:ca:a2:1c:d5:64:b1:0d:d5:0f:c1:e6:
97:94:1e:75:9b:26:e2:3f:eb:34:ed:38:13:4b:15:
57:5c:e5:ec:b0:d6:42:09:52:5a:cb:a1:8a:fa:15:
d4:c5:18:45:08:0e:f5:92:4f:f1:65:a9:b8:14:41:
d3:c7:d1:26:0f:21:6c:e5:41:00:fb:21:01:c6:dd:
0f:2e:59:75:66:d3:35:1b:4d:d2:ba:d4:e0:13:87:
e8:19:dc:95:f5:76:21:ed:04:3d:d3:51:71:f9:55:
2a:66:ba:28:94:04:03:59:71:d3:63:8f:f1:62:3d:
b5:d5:06:b2:56:2c:f0:6a:fe:15:c2:e1:e1:30:f1:
7a:ef:32:6b:5e:1c:f6:78:c6:4b:d8:d4:10:4b:e2:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DA:0F:73:60:CF:69:DA:D7:D0:4D:AC:DD:F4:17:B4:1F:EE:98:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a58aca-3f1e-4d41-88e4-d42fc2b6ea30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a58aca-3f1e-4d41-88e4-d42fc2b6ea30/1/2doPc2DPadrX0E2s3fQXtB_umK0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214345
Signature Algorithm: sha256WithRSAEncryption
86:64:c9:47:f8:5c:a6:68:fc:91:41:c2:c4:8d:91:88:36:e2:
53:00:d2:1d:0e:31:e2:8b:78:ab:a7:89:d1:a1:ea:d3:d7:ef:
72:a0:56:b7:0d:8c:6b:e1:fd:18:0d:75:fe:82:5f:8a:cf:08:
53:65:25:95:6b:c4:6c:a7:2f:52:ba:a7:ca:04:59:75:56:d3:
dd:d7:a0:16:de:c7:70:05:a4:37:5a:0e:95:17:88:bb:e4:df:
31:23:6c:61:9c:71:8b:55:c1:c7:63:4c:43:8d:cc:5a:07:8f:
03:e8:be:ad:5e:18:66:e9:27:36:09:12:e0:f3:d1:69:98:a2:
65:6b:a1:4e:9a:e8:9a:09:91:1f:29:ce:05:6f:5c:bb:29:74:
df:53:89:dd:a6:f3:47:2f:e4:86:49:cd:79:ae:fe:f7:4f:17:
9c:0f:e9:2e:82:bb:70:13:ab:5d:b7:7f:4f:8a:ab:06:14:93:
04:1b:90:a0:74:19:60:a0:de:1a:c2:05:16:98:a0:9b:8d:b9:
f6:53:09:51:5e:0b:bb:ea:ac:12:cc:9d:0d:97:bd:07:ad:b1:
c5:18:ba:06:ef:a5:6e:d5:54:2d:e0:de:f5:7c:89:c0:cb:6d:
b3:eb:de:e4:68:d0:38:23:4d:12:00:d5:96:5f:48:44:19:e7:
df:1c:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 14:15:58 2024 by rpki-client on console-fra.rpki-client.org