Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DKob2GZqbEvqZjKp_rzMMO2SkFs.cer
File: DKob2GZqbEvqZjKp_rzMMO2SkFs.cer (raw, json)
Hash identifier: l4KG+W4hheNKEnxrP2dp52nn5UF/g/dHw3XEF+IqjMk=
Subject key identifier: 0C:AA:1B:D8:66:6A:6C:4B:EA:66:32:A9:FE:BC:CC:30:ED:92:90:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018AB81B85FE10C36F8EC33FEC744C77F9B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/August/15/0CAA1BD8666A6C4BEA6632A9FEBCCC30ED92905B.mft
caRepository: rsync://rpki.co/repo/August/15/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Thu 21 Sep 2023 14:18:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 48103
Validation: Failed, certificate revoked on Sun 15 Oct 2023 03:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:1b:85:fe:10:c3:6f:8e:c3:3f:ec:74:4c:77:f9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 21 14:18:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0caa1bd8666a6c4bea6632a9febccc30ed92905b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:53:a5:17:9a:1b:bf:6e:78:70:d4:6b:6c:
b4:69:b2:63:35:91:c0:8e:6b:db:54:46:be:14:db:
89:80:51:02:50:09:43:77:ec:03:e4:ee:a5:fc:dd:
90:2a:b0:35:f5:cc:ce:3a:c6:4a:14:47:5b:96:46:
5c:db:5e:58:83:43:bb:72:bf:1e:6c:d9:2f:4d:46:
f9:46:41:74:1d:da:40:87:c5:96:85:5e:d2:de:97:
d6:a4:c0:1c:bf:de:5f:3f:eb:64:75:29:27:1c:73:
d6:b2:00:51:55:50:48:73:16:60:86:3b:cc:39:50:
41:e7:00:e9:a9:ee:85:52:d0:00:e9:9d:7a:2b:1b:
cb:f0:ef:4d:2a:1b:9e:23:ac:4e:fc:05:ae:c1:ed:
b1:02:4f:01:0c:d5:5d:98:68:89:a6:1f:8f:d4:27:
f6:04:90:e9:a0:42:3f:c3:75:02:ca:bc:7f:56:c7:
b4:90:1a:55:ad:ce:ba:7f:41:4a:9d:0d:27:6e:a6:
a7:13:0f:d7:be:d7:f0:7f:7c:f4:72:7b:dd:40:70:
df:a8:3f:6d:ce:e7:0c:e3:29:71:06:7e:bc:42:3c:
31:c6:4d:38:d8:92:48:70:80:ed:02:8e:e3:45:b9:
bf:b9:68:bb:32:f6:c8:18:72:0e:a2:b4:c8:f7:be:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AA:1B:D8:66:6A:6C:4B:EA:66:32:A9:FE:BC:CC:30:ED:92:90:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/August/15/
RPKI Manifest - URI:rsync://rpki.co/repo/August/15/0CAA1BD8666A6C4BEA6632A9FEBCCC30ED92905B.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48103
Signature Algorithm: sha256WithRSAEncryption
90:fd:c2:00:1f:42:db:d5:87:c4:f0:68:7c:71:32:4f:3e:fb:
6c:7a:e2:6b:9d:0a:1a:8e:f3:fa:fc:31:b3:5c:95:0e:b3:d1:
ba:a4:7a:85:18:1f:2a:d7:ef:8c:26:e8:34:60:63:8d:1b:7f:
0d:5b:fc:ba:5b:f0:2b:14:fa:67:85:df:02:8b:61:96:b4:42:
2f:10:9b:87:72:80:af:6c:ac:e5:c4:ec:7b:15:51:94:e6:d8:
e7:0b:ac:7d:78:e9:99:74:4a:c2:53:49:ed:e1:fb:f6:0d:bd:
d5:54:ab:8c:60:9f:40:0c:51:6f:7b:54:61:b2:7b:bf:55:27:
82:c6:14:32:8e:91:c5:e1:4b:49:f9:d4:43:c3:28:13:ef:5d:
b7:d5:82:dc:9b:50:a3:32:86:28:40:cd:a4:f1:c7:3e:bd:16:
25:cd:79:6e:a0:52:65:ee:3a:7d:3e:32:0a:45:1e:78:9c:af:
4e:eb:b7:8f:cb:35:4c:8e:a1:3b:ad:84:60:d2:f4:06:75:47:
48:61:d4:d0:a5:6a:dc:41:c8:de:02:f8:f5:36:a0:92:43:60:
88:68:4c:c0:62:74:f5:31:e1:87:13:0b:b1:a8:75:ec:e0:b4:
45:43:c5:93:b2:aa:0e:db:71:ab:65:fc:78:0e:62:6a:4c:ed:
56:8a:5f:c1
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYq4G4X+EMNvjsM/7HRMd/m0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwOTIxMTQxODQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2FhMWJkODY2NmE2YzRiZWE2NjMyYTlmZWJjY2MzMGVkOTI5MDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBFTpReaG79ueHDUa2y0abJjNZHA
jmvbVEa+FNuJgFECUAlDd+wD5O6l/N2QKrA19czOOsZKFEdblkZc215Yg0O7cr8e
bNkvTUb5RkF0HdpAh8WWhV7S3pfWpMAcv95fP+tkdSknHHPWsgBRVVBIcxZghjvM
OVBB5wDpqe6FUtAA6Z16KxvL8O9NKhueI6xO/AWuwe2xAk8BDNVdmGiJph+P1Cf2
BJDpoEI/w3UCyrx/Vse0kBpVrc66f0FKnQ0nbqanEw/Xvtfwf3z0cnvdQHDfqD9t
zucM4ylxBn68Qjwxxk042JJIcIDtAo7jRbm/uWi7MvbIGHIOorTI977V0wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFAyqG9hmamxL6mYyqf68zDDtkpBbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgc4GCCsGAQUFBwELBIHBMIG+MCsGCCsGAQUFBzAFhh9yc3lu
YzovL3Jwa2kuY28vcmVwby9BdWd1c3QvMTUvMFcGCCsGAQUFBzAKhktyc3luYzov
L3Jwa2kuY28vcmVwby9BdWd1c3QvMTUvMENBQTFCRDg2NjZBNkM0QkVBNjYzMkE5
RkVCQ0NDMzBFRDkyOTA1Qi5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnJkcC5y
cGtpLmNvL3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZL
NXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAu+cwDQYJKoZIhvcNAQELBQADggEB
AJD9wgAfQtvVh8TwaHxxMk8++2x64mudChqO8/r8MbNclQ6z0bqkeoUYHyrX74wm
6DRgY40bfw1b/Lpb8CsU+meF3wKLYZa0Qi8Qm4dygK9srOXE7HsVUZTm2OcLrH14
6Zl0SsJTSe3h+/YNvdVUq4xgn0AMUW97VGGye79VJ4LGFDKOkcXhS0n51EPDKBPv
XbfVgtybUKMyhihAzaTxxz69FiXNeW6gUmXuOn0+MgpFHnicr07rt4/LNUyOoTut
hGDS9AZ1R0hh1NClatxByN4C+PU2oJJDYIhoTMBidPUx4YcTC7GodezgtEVDxZOy
qg7bcatl/HgOYmpM7VaKX8E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:08 2024 by rpki-client on console-fra.rpki-client.org