Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4MgWFueJDR3yDrCX5j-EwB2qNeI.cer
File: 4MgWFueJDR3yDrCX5j-EwB2qNeI.cer (raw, json)
Hash identifier: AzKbF0HitAcmXe1t1HMWEIsTyS4LvPKj2yHHsQSpSZo=
Subject key identifier: E0:C8:16:16:E7:89:0D:1D:F2:0E:B0:97:E6:3F:84:C0:1D:AA:35:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2885F4604F9C7104D8E8A8826A33599
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/14/E0C81616E7890D1DF20EB097E63F84C01DAA35E2.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/14
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:59:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209263
Validation: Failed, certificate revoked on Wed 03 Jan 2024 16:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:88:5f:46:04:f9:c7:10:4d:8e:8a:88:26:a3:35:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:59:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0c81616e7890d1df20eb097e63f84c01daa35e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:9b:7b:ae:a3:01:dd:90:1a:2b:3e:27:09:
38:89:35:70:50:fc:3a:46:26:6a:6a:c2:5e:af:72:
bf:ac:af:7c:f6:f6:e3:06:e8:b8:fa:a9:24:07:21:
5f:a4:24:54:8b:8a:1d:92:46:0a:09:f4:11:cf:71:
6f:a1:56:9f:05:d1:1f:5f:e5:ae:f7:89:cd:1a:56:
13:7e:8b:e5:42:73:9e:32:82:3c:97:95:46:2b:8c:
87:4e:07:61:49:39:84:a6:f1:83:b2:25:bd:4c:20:
8c:a8:e3:15:8e:0a:17:e6:fa:a9:31:2e:fa:54:f5:
14:41:6a:f2:97:11:da:eb:7f:6f:ef:95:a7:2d:84:
39:98:c7:7c:ff:c8:9e:e4:38:5e:65:3a:8b:78:cd:
9b:cd:3a:75:8e:93:4c:dd:1f:37:82:e1:16:68:81:
9c:a0:54:ab:18:2c:d6:be:a8:c5:31:2b:18:41:70:
cf:1f:88:2f:ba:17:c2:b2:4f:8e:57:37:36:1a:90:
de:40:31:99:6d:36:2f:65:ec:91:e8:c6:e4:cc:ce:
28:d9:b8:f3:91:4b:3c:76:90:93:d8:95:1f:cb:ee:
f6:11:94:94:11:39:6e:73:5e:a9:0c:7d:72:2d:ea:
43:5d:d5:79:24:4b:74:5d:bb:82:23:b4:16:79:df:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C8:16:16:E7:89:0D:1D:F2:0E:B0:97:E6:3F:84:C0:1D:AA:35:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/14
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/14/E0C81616E7890D1DF20EB097E63F84C01DAA35E2.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209263
Signature Algorithm: sha256WithRSAEncryption
60:9c:9b:8b:1d:a7:cd:41:95:7f:83:90:10:a7:41:17:08:5c:
5a:04:f7:1e:c4:54:53:9d:c8:e8:70:22:ec:d2:97:13:c9:80:
ef:a3:c6:44:7f:99:d2:78:fa:c9:e6:08:56:34:aa:58:d7:f4:
c9:5b:d0:8d:4c:d5:61:1e:7b:59:ad:fb:5b:b9:63:5d:9a:98:
21:c4:ff:0a:77:b5:a8:30:eb:57:27:d3:16:0a:f1:50:77:c3:
2b:94:0e:4e:77:14:24:b7:de:1b:38:8d:df:c9:05:5c:b8:e8:
b4:a5:47:6e:17:96:8e:81:47:f4:7f:ac:d8:73:4c:25:db:f7:
df:37:5e:9c:fb:0e:d7:30:06:72:59:80:a4:34:84:d2:33:c7:
a1:08:f2:88:39:80:df:72:a8:44:d2:74:af:b9:94:c3:4a:c0:
f9:0d:ee:dd:7a:bc:b7:38:a7:03:c2:40:03:ad:3e:41:fe:0f:
40:0d:5b:b7:70:38:88:fe:a6:1a:84:bd:0f:2f:6f:27:24:d5:
0e:d1:20:55:c3:44:f5:01:44:2f:a7:d9:2a:dc:8d:24:86:28:
0b:37:93:0d:25:3e:c0:6f:28:44:95:0e:52:4d:97:76:05:44:
56:8a:ba:03:00:51:09:a8:ad:17:db:75:31:5e:9d:05:64:1d:
bd:56:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:07 2024 by rpki-client on console-fra.rpki-client.org