Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
File: 4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer (raw, json)
Hash identifier: U4Cesx0irweEsAfSMGwdfhPgKkm1s0Ti1cL6a+WBskA=
Subject key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188364D0AE82CD578F27EB94A2E8AE05162
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 19 May 2023 23:16:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 199099
IP: 2a13:df80::/29
Validation: Failed, certificate revoked on Fri 16 Jun 2023 18:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:36:4d:0a:e8:2c:d5:78:f2:7e:b9:4a:2e:8a:e0:51:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 19 23:16:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:ae:f6:9a:d0:54:ce:86:f1:3c:2e:6a:57:
24:75:5f:ed:9c:e4:02:b7:aa:ab:54:3f:44:36:52:
d3:c0:c1:ba:c6:71:a2:00:e5:d2:48:60:00:6d:85:
56:3e:74:d0:5a:89:2c:c1:db:c2:71:5a:e0:6b:e1:
7c:ef:27:c6:25:52:ac:b9:c1:6b:74:b5:33:db:5f:
af:65:ce:69:08:f9:4d:f4:87:99:41:62:63:99:d0:
e5:3a:2d:6e:2a:7f:54:08:41:2e:95:a2:01:fb:55:
09:5a:94:a9:81:20:b1:57:fa:20:2d:ac:64:f0:c3:
81:5c:3b:e7:c8:f4:e3:a9:ad:07:7e:e1:99:c8:cf:
9f:1c:fb:b2:ea:29:99:e4:4f:f1:44:e9:23:cf:92:
e0:b9:c3:44:ae:c5:6b:a0:3a:6f:4d:54:dd:31:f6:
08:df:a7:6b:01:fc:8b:7a:61:af:d5:ce:6e:81:6c:
47:43:1b:66:90:5e:ac:88:d7:cd:0c:43:96:8f:42:
59:ae:8e:76:bb:62:69:be:36:17:e3:c2:44:1d:2c:
5a:2b:18:3a:20:8a:a4:25:14:ec:12:a0:a3:6f:7d:
2b:0c:47:9d:a2:0d:28:8a:9d:6a:92:d7:5c:cb:73:
c8:e7:74:5e:29:17:bc:4d:21:ba:50:34:00:ff:e4:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199099
Signature Algorithm: sha256WithRSAEncryption
a0:4d:20:e6:c5:49:6b:fd:b9:0f:cb:d3:fc:9f:27:dd:d8:da:
49:3a:23:ca:4c:41:d3:a0:d1:04:35:4c:e0:85:b5:44:85:05:
3c:1c:d9:3a:24:ee:0c:18:7c:8d:78:ae:15:10:a4:dd:b1:b4:
36:f3:95:bb:21:f8:8e:ac:19:80:72:99:29:ff:42:2b:d1:1d:
24:61:44:ba:b6:7f:70:25:df:18:8d:b1:e5:3f:b3:b8:7e:66:
db:7e:3d:69:59:41:2e:35:db:8f:3b:66:34:ec:67:5a:2f:61:
49:8a:b0:0b:9b:70:35:bb:45:13:6a:b1:40:e5:39:4b:f0:e2:
aa:53:02:ae:49:f3:4b:b7:ab:76:fc:35:74:58:66:48:6c:89:
67:aa:ef:1c:48:33:3a:0d:7e:21:a9:ff:e1:11:bd:26:af:03:
98:c2:f5:24:cd:a7:b6:93:5e:3e:7c:3f:69:90:51:39:ef:62:
c4:7a:a3:0b:36:98:8b:e3:33:95:e3:cb:47:53:52:2c:83:b4:
3b:9f:66:8a:d2:c6:7f:b2:f6:a7:85:1f:d4:a2:a4:e5:c7:16:
66:0a:1e:84:b2:6c:5c:b8:f1:ce:82:7a:35:b1:ad:19:6d:7c:
2e:bd:e3:7d:48:6f:f7:47:4f:3f:e9:8a:ff:b8:08:67:73:da:
74:e5:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:07 2024 by rpki-client on console-fra.rpki-client.org