Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9s3TKHUcf9HIhWQb4FvlpqIFn5U.cer
File: 9s3TKHUcf9HIhWQb4FvlpqIFn5U.cer (raw, json)
Hash identifier: i2RCVZdxv+Y537MHW04bFwp/OHJ47on5cO9JUY23WfY=
Subject key identifier: F6:CD:D3:28:75:1C:7F:D1:C8:85:64:1B:E0:5B:E5:A6:A2:05:9F:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187A1DBF3EF7BE6A4B27BACA169240317A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/6/F6CDD328751C7FD1C885641BE05BE5A6A2059F95.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/6
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 21 Apr 2023 03:29:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 48581
Validation: Failed, certificate revoked on Fri 21 Apr 2023 11:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a1:db:f3:ef:7b:e6:a4:b2:7b:ac:a1:69:24:03:17:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 21 03:29:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6cdd328751c7fd1c885641be05be5a6a2059f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b7:13:85:35:dc:42:0c:61:26:f0:2c:e4:74:
24:9b:af:0f:2d:66:f1:f5:7d:d3:15:8d:3a:0a:71:
c4:6d:34:dc:38:60:47:ac:41:91:af:28:60:e8:11:
55:f9:78:73:6f:dd:80:0e:a9:de:29:e1:b9:37:16:
56:f4:e9:fe:96:ed:e9:94:2e:a8:06:ee:7b:73:8b:
72:2e:ff:34:4f:8f:4e:5e:47:a2:af:65:dc:27:62:
02:db:4d:83:c5:42:9b:3b:26:3f:89:5f:25:29:de:
c7:52:85:28:80:42:fd:29:0b:59:1d:57:11:03:9f:
e0:c1:33:8f:1a:f6:a5:df:9a:7a:94:c9:99:12:56:
d1:37:9f:4d:a9:a3:0f:4a:93:70:d7:af:a3:c1:5e:
02:ce:3f:4c:a3:76:d8:5a:99:a2:1d:83:47:e6:e1:
9d:78:cc:25:ef:10:33:bf:cd:ef:1e:cd:8d:7e:a0:
a3:0f:01:f5:f4:cb:02:17:b0:73:bf:97:35:2f:14:
25:88:68:9b:3b:47:51:4e:86:b5:a8:23:d3:5a:d2:
5a:58:0e:09:17:9c:43:ac:3e:fc:09:0e:18:ef:fc:
2f:22:5f:54:70:44:77:e6:f2:eb:c5:67:07:6c:1a:
b5:64:2f:c0:87:19:5f:ef:8a:62:dd:d6:fd:f3:06:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CD:D3:28:75:1C:7F:D1:C8:85:64:1B:E0:5B:E5:A6:A2:05:9F:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/6
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/6/F6CDD328751C7FD1C885641BE05BE5A6A2059F95.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48581
Signature Algorithm: sha256WithRSAEncryption
3b:54:25:a5:9e:f8:7c:49:fb:dc:0e:81:8e:e4:f8:ff:16:26:
64:17:7d:de:b1:57:34:ed:0b:55:86:32:cd:08:55:f0:05:d2:
33:8f:c3:2f:99:69:91:4d:85:69:55:0e:38:62:23:f2:a2:ad:
5c:87:8d:49:45:0b:f5:fd:da:3a:eb:02:10:8f:a5:2c:f1:97:
40:6d:dd:8c:e6:3f:02:c4:77:45:6b:35:3c:b1:f4:70:32:e4:
bc:52:7e:ee:7a:0d:d3:d9:df:30:4c:2f:39:e2:ee:53:cd:e6:
02:55:fc:19:eb:f1:22:dc:61:b6:36:f8:e4:70:36:4a:08:4d:
d3:73:27:dd:76:44:78:12:c0:31:7a:18:96:48:e9:6f:46:0a:
c5:86:8d:da:ba:2b:de:8a:7a:76:4a:18:61:80:c7:19:62:d2:
a6:9e:f7:89:ac:ab:84:04:44:d6:75:4f:54:49:98:87:ec:2a:
22:c1:f5:9c:6c:0f:e2:6b:ae:7b:8c:49:c4:08:3f:6a:24:a2:
83:bf:10:3b:76:76:51:75:cf:95:e9:83:f6:e3:18:0e:d7:98:
ac:70:a5:8e:83:12:c0:e4:b3:6b:96:56:71:c6:fd:f9:32:fc:
f7:43:7b:bc:60:ac:90:b8:31:d8:08:f1:9a:1c:70:6f:1c:83:
c3:00:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:19 2024 by rpki-client on console-fra.rpki-client.org