
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer
File: 3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer (raw, json)
Hash identifier: u//BdWT0HWljmCUbwr1P/ayH2e/1K22DQTvhdGyrFts=
Subject key identifier: DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94C98E49F018C7572C614A258AD531E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206003
Validation: Failed, certificate revoked on Tue 08 Oct 2024 14:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:98:e4:9f:01:8c:75:72:c6:14:a2:58:ad:53:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc09b20cf023c7302fefea49c8149a1cb0ab2246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:be:8f:c5:ba:68:04:44:6b:3b:c2:49:79:b7:
9b:4e:ca:75:fc:cb:e7:2e:2b:17:cd:a0:d0:1a:80:
a8:47:e4:58:a0:0b:38:44:ff:50:ba:16:6a:ec:83:
d8:2b:20:0b:05:b7:f9:b7:80:7b:27:ea:56:4a:ad:
e2:57:99:35:48:45:77:25:ea:51:9c:00:49:ea:01:
76:86:04:d5:2b:3f:1b:62:8f:66:16:92:42:ef:08:
74:83:25:45:a2:15:72:4f:60:c4:75:13:15:99:9a:
86:74:51:ab:84:32:17:6f:ad:68:22:99:e6:7e:8b:
87:ef:bc:2c:fd:78:51:75:04:7e:b6:2e:23:85:c2:
f4:49:14:b5:cf:36:8d:e9:85:e7:ac:8a:36:04:0d:
c9:1e:72:eb:90:3f:cc:25:4d:ec:18:37:73:79:89:
0d:f5:cc:05:d5:2f:b2:57:b0:e2:46:d4:86:4d:7f:
70:e4:ed:c7:da:81:26:6f:9f:a8:c0:98:6e:a1:0e:
17:a0:54:7f:4b:5d:6a:f0:e1:d5:6e:4f:36:b9:4e:
b8:ad:ba:da:86:b4:e4:bd:a6:da:4c:30:df:4c:5e:
fa:21:db:d2:35:4f:be:e4:96:ab:08:5a:ba:25:fb:
22:46:55:af:a9:05:cc:41:01:cb:bc:72:25:ec:12:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206003
Signature Algorithm: sha256WithRSAEncryption
68:a0:2e:9f:16:65:8b:e8:36:42:97:b1:f8:49:2f:15:c4:a1:
13:79:11:5b:a0:e6:10:5b:10:54:5b:ac:c2:8e:4d:6f:25:0d:
5d:90:97:15:ec:05:f5:60:c1:ba:6b:dc:aa:a9:62:bf:37:80:
4d:69:d6:8b:44:db:1b:06:a6:1f:cb:a0:80:71:ea:0e:71:e9:
b3:82:04:60:16:60:b5:92:66:44:bb:3e:de:97:8f:11:b3:5c:
75:78:02:cd:d0:d0:0a:57:a6:e0:57:05:fc:68:fb:4f:7b:e5:
6b:ae:99:1c:74:ac:49:25:44:47:42:55:e1:8d:ee:20:41:06:
22:14:7b:ee:85:b0:cd:92:5c:d6:ac:a1:5f:c7:56:2b:0a:f0:
04:c8:d8:e8:e3:1a:d9:9f:ff:b3:71:0e:57:f0:30:61:54:7a:
ed:c6:5a:9c:23:0d:db:60:2e:c8:ed:75:c7:0e:68:04:df:95:
ba:5e:f8:51:42:0e:0a:cd:59:74:ff:ee:35:e0:03:87:2b:0d:
ea:ba:8a:11:7d:d4:74:43:52:fa:b1:72:47:ef:91:97:1b:dc:
2a:15:98:86:39:b0:ee:0d:28:c1:c7:a2:b7:9b:47:b3:6a:fe:
ee:33:2a:08:a0:49:b5:99:16:3c:6f:58:c7:ba:87:db:15:53:
84:8b:1f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 05:02:04 2025 by rpki-client