Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DO_52o7L8NPWoHsMJD9DfUZt3zk.cer
File: DO_52o7L8NPWoHsMJD9DfUZt3zk.cer (raw, json)
Hash identifier: ImiLxL4DWZRiaqwEnPHfdSPQepuIFjD1gTa0WcqpHZg=
Subject key identifier: 0C:EF:F9:DA:8E:CB:F0:D3:D6:A0:7B:0C:24:3F:43:7D:46:6D:DF:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188AA72D13A2240B04D77A6C5EA4F03DCAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/0CEFF9DA8ECBF0D3D6A07B0C243F437D466DDF39.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 11 Jun 2023 12:33:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 60900
Validation: Failed, certificate revoked on Wed 05 Jul 2023 08:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:aa:72:d1:3a:22:40:b0:4d:77:a6:c5:ea:4f:03:dc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 11 12:33:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ceff9da8ecbf0d3d6a07b0c243f437d466ddf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:ee:8e:bc:3b:75:d4:1a:bc:59:eb:58:32:
cb:09:17:41:d9:b3:be:56:44:ec:fc:be:09:9f:23:
e2:9d:87:3b:b9:55:72:b9:18:70:30:9a:5c:90:9b:
09:07:fd:73:96:df:1c:55:c2:de:9c:06:02:01:0e:
bb:e6:d8:e9:41:14:46:d9:62:df:a2:8a:5a:0c:bd:
c9:75:eb:a5:67:c0:36:db:97:42:df:1a:90:32:24:
d2:48:b8:63:22:3b:9e:c9:3b:2c:18:48:72:ef:bd:
1c:6e:05:c5:91:45:ec:5f:25:b0:8b:9a:f2:1a:07:
02:85:2c:20:cd:34:c5:c7:79:47:0b:ba:f4:c1:12:
f4:b1:b6:29:95:90:1b:b9:b3:90:93:aa:d9:38:c9:
49:f2:a6:2b:2f:e6:94:43:35:f5:8a:42:64:0d:b4:
a0:aa:7c:55:17:6e:ef:b0:ec:2b:d5:b2:6a:69:b0:
c4:dd:8f:e7:73:91:97:88:32:f4:33:53:72:17:d9:
a0:fc:97:51:a0:16:1e:f7:2b:7c:26:64:5b:da:85:
20:5d:8b:cc:b0:08:12:6c:6c:5d:51:e4:e4:08:d3:
e9:10:4f:f0:f7:b6:dd:56:b9:b3:e1:6b:23:90:c1:
9a:28:09:f0:85:68:3d:5a:ed:82:26:fd:71:45:ef:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EF:F9:DA:8E:CB:F0:D3:D6:A0:7B:0C:24:3F:43:7D:46:6D:DF:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/0CEFF9DA8ECBF0D3D6A07B0C243F437D466DDF39.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60900
Signature Algorithm: sha256WithRSAEncryption
25:db:d3:fe:65:53:d0:01:4c:c9:d2:73:5f:41:c7:d2:ff:ce:
d3:a1:9f:ae:4c:92:0a:ae:cd:96:0c:89:84:fc:c2:b4:41:1f:
f2:f6:6f:3d:be:f6:1f:4d:a0:f9:7e:4d:32:90:05:70:80:db:
f3:48:72:ed:df:03:bc:95:44:44:fb:a5:8a:2d:5b:cb:23:10:
f7:e2:e2:d5:b0:19:2d:7f:49:26:6c:24:e0:8e:a9:79:53:44:
5e:0c:a4:fc:aa:3e:1f:89:f9:ee:d7:19:8f:63:71:87:a1:31:
c8:20:5f:08:0b:ab:8d:20:f5:97:7e:57:8c:de:ee:ba:c8:9f:
98:22:84:42:e3:d7:da:b5:95:d5:0d:f2:80:fa:47:de:c6:04:
f9:af:89:42:85:1f:c4:b6:07:9f:b0:2d:f1:72:4d:50:40:e7:
29:b3:7b:6f:a3:6c:22:b3:6f:83:58:e2:57:00:5f:a1:24:d7:
5c:7f:22:f2:fd:3c:c7:db:4b:9f:67:e4:48:7b:29:44:eb:e1:
28:7e:89:14:b9:ea:2f:6e:13:58:7b:18:f1:62:e1:47:ec:10:
26:08:29:ed:13:2e:76:1d:b2:63:e8:64:e5:77:07:f0:81:96:
c5:f1:be:cf:f6:cb:2a:36:4f:4c:25:a7:f3:62:f2:3f:a9:85:
d4:22:a9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:58 2024 by rpki-client on console-ams.rpki-client.org