Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BRZluKi83oHVrA8kyiDmg15tVOQ.cer
File: BRZluKi83oHVrA8kyiDmg15tVOQ.cer (raw, json)
Hash identifier: V0J0xMMYepC7P2EQI6wG4i1YnCZo6YbW9iHbtJfNVQE=
Subject key identifier: 05:16:65:B8:A8:BC:DE:81:D5:AC:0F:24:CA:20:E6:83:5E:6D:54:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01906910E78CEC5707103D6B5AEEC1D64F33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/12/051665B8A8BCDE81D5AC0F24CA20E6835E6D54E4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/12/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 30 Jun 2024 12:13:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204725
Validation: Failed, certificate revoked on Sun 07 Jul 2024 18:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:10:e7:8c:ec:57:07:10:3d:6b:5a:ee:c1:d6:4f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 12:13:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=051665b8a8bcde81d5ac0f24ca20e6835e6d54e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:1e:d4:7e:0a:48:0b:75:93:10:0c:22:fe:
e0:ab:e4:15:b5:38:f6:2d:6d:4f:43:93:e7:25:02:
f2:15:93:3a:39:9e:f9:8c:ba:53:ba:03:a0:ba:29:
e2:b8:31:71:e8:33:19:de:08:39:b2:63:78:e1:41:
e5:11:33:ac:3e:7c:98:8f:7d:3e:54:17:5c:b9:52:
59:77:41:73:0f:82:66:2f:f7:4f:90:70:2f:56:09:
f3:db:71:36:22:78:f2:79:fa:60:32:3e:01:36:8c:
9b:38:0b:0f:b2:93:a2:4c:a8:a0:48:18:0b:55:b4:
ed:ea:08:73:39:c6:99:e2:01:57:55:3a:7d:df:79:
10:74:f9:cf:60:bb:a5:42:11:ee:dc:75:27:09:6a:
04:0f:1c:30:84:36:40:fe:5f:5a:2b:22:3c:83:9c:
d8:48:3f:63:6a:3c:a6:3b:71:2d:b6:fa:cc:65:a7:
1d:dd:fc:12:0e:df:ce:9e:c0:f9:37:55:d0:e0:eb:
d7:9c:40:bc:8e:bb:11:69:29:72:5e:3e:fb:fb:db:
60:43:08:1f:79:44:a4:4a:72:5c:ba:a9:89:f7:ae:
9e:50:c1:d6:60:dc:79:d4:5c:cd:03:eb:e8:7e:91:
b6:ef:c8:3d:1e:2d:4a:44:45:c5:51:0d:0b:61:a1:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:16:65:B8:A8:BC:DE:81:D5:AC:0F:24:CA:20:E6:83:5E:6D:54:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/12/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/12/051665B8A8BCDE81D5AC0F24CA20E6835E6D54E4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204725
Signature Algorithm: sha256WithRSAEncryption
5c:cd:06:a5:e4:71:d1:c8:c8:3c:7a:af:08:d7:ba:bc:8e:5a:
02:35:f9:6d:18:23:5f:b9:ca:fa:bb:cd:f8:c7:97:1f:95:ce:
48:65:4c:69:75:6d:44:7a:cc:0b:1a:af:c7:8b:a4:6b:f5:5e:
0d:31:01:c1:a4:42:bf:ba:fe:4e:49:f1:fb:6d:f5:5d:27:70:
a6:6a:00:84:b2:e1:41:0f:b2:35:85:b6:62:a2:0c:2c:f7:e8:
d4:ac:89:9c:d1:84:ad:c9:e9:61:c5:7f:5a:c2:e7:41:f0:f8:
76:92:f5:05:25:56:f9:e4:12:11:44:fa:37:8c:c3:db:1b:15:
ac:4e:1d:6d:26:db:90:a8:9a:3e:c8:90:16:6d:4b:14:5d:5f:
1e:ee:6d:34:c4:13:bb:55:46:59:0a:1a:aa:28:31:aa:b4:40:
c0:03:d8:25:78:0c:6f:75:36:9a:75:ae:89:08:65:41:07:8f:
19:4a:af:7e:85:58:52:68:7f:bd:04:5b:c1:16:7b:ea:8a:28:
94:c1:d3:6a:e7:54:17:12:d9:e4:7f:29:a9:76:bb:8b:b7:79:
a5:ed:9d:5b:14:1a:d9:26:62:41:50:d4:0a:46:8a:c4:f2:d9:
78:61:ac:a6:2b:b9:b1:3e:22:62:52:61:8c:14:dc:02:73:9b:
2b:9e:77:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:08:25 2024 by rpki-client on console-fra.rpki-client.org