Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CqOpPdNVyIbSw1QA3Nrz7VtlG7c.cer
File: CqOpPdNVyIbSw1QA3Nrz7VtlG7c.cer (raw, json)
Hash identifier: rfpx9U0Y635chwKO58X5kYjYTMj0Hftg9wFW2P5tkv0=
Subject key identifier: 0A:A3:A9:3D:D3:55:C8:86:D2:C3:54:00:DC:DA:F3:ED:5B:65:1B:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B2406DDF061E322A4D3E775C7A37EC546
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/1/0AA3A93DD355C886D2C35400DCDAF3ED5B651BB7.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 12 Oct 2023 13:15:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 203843
Validation: Failed, certificate revoked on Mon 16 Oct 2023 12:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:06:dd:f0:61:e3:22:a4:d3:e7:75:c7:a3:7e:c5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 12 13:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aa3a93dd355c886d2c35400dcdaf3ed5b651bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:0a:16:2f:e2:32:f9:61:54:e8:22:df:be:
32:55:80:ab:37:c8:1d:6b:1c:08:4b:af:bd:cc:15:
80:c2:b8:ef:f9:7a:2d:a8:0b:a4:93:2e:49:14:12:
c4:f1:49:39:b6:6b:ea:53:c9:53:e1:8c:a9:62:e5:
8a:73:b2:a6:fe:c8:cb:25:2f:fa:99:44:a9:38:3f:
49:28:e5:41:a7:31:65:13:5c:72:93:08:88:fa:57:
1c:49:2e:d6:66:eb:ea:53:6a:46:20:58:05:88:9f:
fd:91:d1:a5:02:5b:62:22:7f:18:42:cf:ba:b2:d4:
7a:22:4c:73:3d:8a:60:fc:33:0e:97:ac:5f:09:b2:
56:5f:ce:8b:61:b1:fb:f7:db:6d:b8:89:0b:8b:2f:
22:4b:d2:8e:c7:43:ad:cf:ce:2c:5d:96:bf:e6:70:
db:6d:1b:75:e1:ef:ba:12:b9:5e:62:2d:e8:c8:0f:
f6:b9:1d:88:bf:53:9e:36:d5:d0:5c:f7:03:9a:0f:
8c:d4:b6:a1:ad:30:18:af:1f:c9:ba:f1:e9:ec:07:
d4:e1:b0:24:75:59:32:f6:66:62:2c:a6:99:95:50:
07:56:85:b0:36:ad:c9:57:27:a3:c4:4d:90:cc:c3:
93:31:fa:3e:6e:88:06:75:9c:a4:42:8c:ee:b5:04:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A3:A9:3D:D3:55:C8:86:D2:C3:54:00:DC:DA:F3:ED:5B:65:1B:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/1/0AA3A93DD355C886D2C35400DCDAF3ED5B651BB7.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203843
Signature Algorithm: sha256WithRSAEncryption
6f:b4:d9:74:ed:a5:fc:52:c6:dd:5a:ff:76:8d:20:b0:22:60:
f2:18:ce:ad:25:aa:c5:73:ec:61:a7:eb:b8:fa:59:12:cd:91:
b4:59:97:52:01:b6:ef:3a:a7:d7:70:a5:c1:eb:97:7e:70:b9:
51:25:24:1d:d1:65:c9:ff:9f:bd:5e:d8:22:fa:ea:b7:21:c5:
67:02:7e:82:11:b7:fb:38:c5:16:38:c4:a1:79:81:35:a3:6d:
a7:db:87:54:7e:4c:47:98:1e:1d:55:43:67:4b:04:f1:ea:65:
7c:d8:f3:59:fb:8b:c3:a4:0f:ba:60:00:5c:1e:74:c0:b2:df:
24:28:b5:f8:2c:6c:b8:5b:4d:d4:44:0a:44:40:66:bc:89:47:
fc:fb:b8:87:e0:e8:19:40:2f:6f:6c:9a:b3:00:50:8d:39:8e:
99:bc:a0:0b:36:c4:61:70:d4:2f:f2:70:75:d4:39:22:fb:62:
b6:44:63:9c:27:2d:d0:d9:cf:67:f8:a0:a8:62:2c:4b:9b:da:
d1:dd:9e:59:e7:c4:86:17:9a:a4:cb:e6:c5:f4:d3:e3:b7:c7:
dc:51:8f:fd:9c:4f:31:73:ed:83:a6:2e:2d:95:31:ab:db:d9:
d0:00:36:33:6b:e4:fc:b9:c2:fc:d7:b0:e0:4d:1c:bd:34:3c:
eb:f8:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:44 2024 by rpki-client on console-ams.rpki-client.org