Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Rq-bBxk9Mrs8XzheSoA9WsnIRI.cer
File: 9Rq-bBxk9Mrs8XzheSoA9WsnIRI.cer (raw, json)
Hash identifier: suemEAg90dhzN0umjnXBD3vLR2mATG/w4fMcvL7Yumw=
Subject key identifier: F5:1A:BE:6C:1C:64:F4:CA:EC:F1:7C:E1:79:2A:00:F5:6B:27:21:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019037317CD8B65EC1C582CA1340B4AAF347
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/F51ABE6C1C64F4CAECF17CE1792A00F56B272112.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 20 Jun 2024 19:48:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214757
Validation: Failed, certificate revoked on Tue 06 Aug 2024 11:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:31:7c:d8:b6:5e:c1:c5:82:ca:13:40:b4:aa:f3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 20 19:48:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f51abe6c1c64f4caecf17ce1792a00f56b272112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:a4:58:56:c1:77:8f:6f:6c:32:96:b2:01:
4d:9e:29:18:df:4b:84:03:df:b6:46:03:cb:10:c1:
0c:94:33:96:84:fb:8f:48:91:5f:94:bf:3e:f9:47:
50:73:54:63:0b:f3:6e:bd:b4:47:87:27:e7:83:2e:
f7:ab:e1:c3:25:91:d2:37:ca:9c:41:74:ee:43:84:
8b:77:5d:55:d4:41:02:7b:d4:ca:36:fc:45:11:ef:
88:1c:42:ba:13:60:86:94:b7:38:1c:e2:7e:4b:11:
c3:a2:5b:e5:c1:89:80:77:27:de:cb:4e:5a:a6:58:
a5:b6:9a:85:37:3e:d2:15:6e:15:57:f3:48:6c:9c:
32:ff:91:75:0f:03:34:ee:05:02:bd:f7:ac:4f:ae:
21:36:91:cf:93:c3:ec:24:e7:47:58:7f:07:a1:a2:
5b:66:1c:05:0d:c1:49:cf:79:99:e6:3e:c0:f6:40:
a0:30:f2:46:47:2e:a5:f0:cf:cb:0f:be:2f:27:98:
8a:a9:2c:3f:91:be:a3:b2:98:c1:5d:7d:f9:25:f8:
8a:59:bd:64:92:22:ec:61:a2:27:9a:65:4f:11:75:
37:65:6b:4e:be:2c:84:4e:c5:77:9f:92:43:80:19:
e3:e0:34:87:37:fe:2a:16:0f:e2:04:ab:0a:88:0e:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1A:BE:6C:1C:64:F4:CA:EC:F1:7C:E1:79:2A:00:F5:6B:27:21:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/F51ABE6C1C64F4CAECF17CE1792A00F56B272112.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214757
Signature Algorithm: sha256WithRSAEncryption
2a:2b:72:4f:19:7e:da:1e:7e:f1:5e:67:e4:a0:93:22:b8:bc:
00:20:c4:9a:13:b4:e1:bc:7a:a3:05:50:e9:80:be:2d:09:dd:
85:42:33:43:ff:a2:24:18:d5:14:a6:98:95:5e:42:31:4a:8f:
81:fc:93:9b:da:c7:7c:ed:a1:1c:a1:b8:3c:50:ab:bd:79:7a:
37:62:ee:b1:6b:7e:09:e4:70:22:3b:e0:51:61:d5:1c:03:cd:
ef:de:47:cf:a6:95:c1:6f:6d:df:86:1e:77:a0:b8:6a:14:e5:
23:6b:23:fa:33:5e:ca:73:76:3b:df:f7:ec:5e:33:aa:87:2d:
ac:22:e4:cf:a8:27:0b:33:df:cf:25:d8:3d:80:74:01:81:15:
85:cf:3b:c3:81:4a:b3:ea:a8:73:80:62:52:3d:33:9a:a6:9c:
6f:d9:db:c6:3f:77:13:e2:8b:d1:52:cd:ec:cc:5a:7e:2b:6a:
46:16:d1:64:06:b1:ef:b5:f5:f6:4f:21:ca:5c:b0:e6:2a:94:
0a:da:4e:c9:35:7c:f1:80:8a:2c:61:33:46:43:41:ac:a3:dc:
e8:22:96:3c:90:4c:30:9b:9f:50:da:e1:77:4b:65:b5:c8:95:
25:8f:d3:dd:d2:68:5a:db:29:cd:f1:98:45:1e:5e:50:91:67:
78:84:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 15:08:08 2024 by rpki-client on console-ams.rpki-client.org