Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7huQw9aUxOrzsB0Rahgkh5VDyF4.cer
File: 7huQw9aUxOrzsB0Rahgkh5VDyF4.cer (raw, json)
Hash identifier: ZGT3DD20dCHEbfi54NNczqohzMQhX0UNGn9AxBbDLic=
Subject key identifier: EE:1B:90:C3:D6:94:C4:EA:F3:B0:1D:11:6A:18:24:87:95:43:C8:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01920B3C2CC0EC9CCB8ABEA0E461B29232B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/d46d8f-3356-4603-9b5b-dfa7382bd4fd/1/7huQw9aUxOrzsB0Rahgkh5VDyF4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/d46d8f-3356-4603-9b5b-dfa7382bd4fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Sep 2024 17:02:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214172
Validation: Failed, certificate revoked on Mon 28 Oct 2024 10:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0b:3c:2c:c0:ec:9c:cb:8a:be:a0:e4:61:b2:92:32:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 19 17:02:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee1b90c3d694c4eaf3b01d116a1824879543c85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:5d:be:cd:32:68:f1:ed:a4:e3:be:c1:1d:
5f:7c:85:b5:d6:78:1d:35:85:79:f9:95:33:c8:64:
55:d6:58:16:d7:f5:9a:1b:96:2a:5b:ea:cd:af:01:
ca:3d:7e:c8:56:d0:ff:bd:1f:d7:23:21:86:8c:4d:
02:c4:b6:10:40:90:09:21:b6:0f:0f:26:fb:a2:01:
e1:c6:11:81:bc:49:79:d4:d4:40:7c:e2:8f:ef:72:
7c:5d:c5:15:1e:b1:33:4a:63:0b:6d:7e:c9:11:31:
37:4c:39:61:6e:49:8d:47:bf:4f:72:91:3c:91:1d:
60:b2:b3:f9:97:8a:6c:a8:75:a4:80:fe:ca:bc:6e:
86:4f:da:70:0a:7a:4f:24:da:66:e6:52:27:35:5f:
31:97:0f:d1:74:2b:34:e3:21:b2:6a:fe:b3:4d:28:
d4:39:99:22:7b:90:ea:fb:71:b4:37:29:d1:aa:ea:
0a:a5:02:9a:f7:3f:60:5e:86:cf:0d:68:26:44:3e:
1b:00:eb:2e:e1:b2:85:33:9d:ea:a1:50:26:81:55:
9f:27:0f:43:5b:9c:64:5b:f3:d6:a7:37:bc:69:ca:
58:fb:18:dd:41:ca:0f:96:1d:27:48:f1:79:6d:a3:
26:cd:aa:dc:9b:1b:48:2d:e8:bf:7b:21:14:69:cd:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1B:90:C3:D6:94:C4:EA:F3:B0:1D:11:6A:18:24:87:95:43:C8:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d46d8f-3356-4603-9b5b-dfa7382bd4fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d46d8f-3356-4603-9b5b-dfa7382bd4fd/1/7huQw9aUxOrzsB0Rahgkh5VDyF4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214172
Signature Algorithm: sha256WithRSAEncryption
10:cc:59:b8:63:4b:af:54:01:32:71:aa:37:60:3c:a2:00:9e:
ec:c7:c2:cb:d2:45:9c:ab:30:b6:2a:3f:6d:b8:de:66:ae:9e:
2f:2e:52:45:45:ce:ff:1e:f9:63:38:b3:38:b3:2e:29:78:a6:
89:f8:d3:63:bf:21:e2:4a:70:39:a2:05:cc:5a:8e:c6:1b:dc:
d3:4f:35:a4:0f:70:de:1e:ec:82:c2:f0:cb:89:9e:43:50:40:
14:94:ce:1e:b3:eb:4f:44:de:3d:46:1a:3e:98:f3:68:09:08:
d3:84:a1:58:6f:30:e1:f3:48:e1:f4:9f:d6:61:32:ec:78:50:
eb:82:31:e0:93:ef:9b:90:ef:94:25:cc:11:51:a4:9c:68:29:
11:26:3a:36:4e:20:1b:2f:ca:b3:85:c4:c6:4c:e7:18:89:23:
e8:25:f2:80:b4:fb:1a:fe:63:f8:9c:38:04:4d:40:ac:48:d0:
de:b6:4b:9e:94:78:1e:7f:d8:57:33:0c:7a:21:a4:10:45:cd:
95:bc:10:90:df:eb:19:7b:f5:7a:df:29:40:7e:fd:24:41:8b:
4b:42:ec:44:d8:a0:ff:91:e9:20:23:95:2c:74:9d:7b:aa:05:
f6:ed:18:33:7b:1c:c0:96:3b:31:30:66:bc:17:55:79:75:74:
11:45:23:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:06 2025 by rpki-client