Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G6EsodWNv1VCORaG5s-MYr-L8fk.cer
File: G6EsodWNv1VCORaG5s-MYr-L8fk.cer (raw, json)
Hash identifier: pJ/BkblH/s3NpRpOG23+dO2Max25YKwNcA+OTtz5bC4=
Subject key identifier: 1B:A1:2C:A1:D5:8D:BF:55:42:39:16:86:E6:CF:8C:62:BF:8B:F1:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D1AEAC91CB6B4E20715E7D6D94213
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/Cube/0/1BA12CA1D58DBF5542391686E6CF8C62BF8BF1F9.mft
caRepository: rsync://rpki.co/repo/Cube/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208690
Validation: Failed, certificate revoked on Tue 09 Jan 2024 11:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1a:ea:c9:1c:b6:b4:e2:07:15:e7:d6:d9:42:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ba12ca1d58dbf5542391686e6cf8c62bf8bf1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:0c:df:be:e7:da:06:70:01:88:ac:8d:7f:
8d:7d:a7:4a:52:7d:c7:46:a0:77:ca:39:8e:6c:cd:
1c:a5:ff:6b:af:95:54:30:20:f1:9e:f9:17:4c:48:
48:09:6a:67:e1:bf:64:a0:ca:65:62:ba:bc:06:e0:
bf:3d:03:dd:67:71:0d:6e:9d:26:03:55:06:39:ca:
2e:a7:cf:a7:fa:b8:a2:a0:31:fe:f9:4b:06:99:75:
f2:36:73:2a:8a:f1:0a:b7:3a:30:13:50:c8:fa:3c:
27:bf:d3:c0:59:c8:08:9a:19:33:b9:6f:ac:cc:af:
d2:ae:06:fa:43:6e:d1:ca:e7:ff:fb:a8:03:c3:43:
2e:63:06:10:ba:99:a2:4d:ed:7c:d7:58:f0:6d:c3:
d3:66:92:8e:63:1d:f1:f3:e1:12:5d:0c:c0:b5:86:
d3:f1:b9:2c:b8:b0:68:a1:99:3c:4b:ff:bb:01:a1:
20:ee:57:81:14:ed:f1:97:4b:2d:d1:3c:67:fd:e4:
c7:a0:5b:ef:0c:f6:07:fb:71:24:5e:6b:46:9a:51:
bc:d0:78:3f:a4:3d:38:88:50:de:a8:d8:5c:35:28:
fd:4f:11:b4:63:8e:a2:a9:67:32:1d:2d:0e:d7:7a:
bb:c8:89:76:29:ba:7f:cf:80:ad:0d:f3:a4:ec:0f:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A1:2C:A1:D5:8D:BF:55:42:39:16:86:E6:CF:8C:62:BF:8B:F1:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Cube/0/
RPKI Manifest - URI:rsync://rpki.co/repo/Cube/0/1BA12CA1D58DBF5542391686E6CF8C62BF8BF1F9.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208690
Signature Algorithm: sha256WithRSAEncryption
8a:45:c5:8b:a2:2a:13:93:10:f2:31:e4:a4:6b:f8:47:ee:53:
30:67:6c:a7:db:eb:b1:a1:69:d4:37:f8:bd:8f:69:7d:7a:38:
14:a3:cc:b2:b8:18:91:5a:f6:89:4a:7f:14:b5:ee:92:4f:ec:
7b:15:af:ac:18:00:5f:b8:04:f1:98:15:78:17:7b:11:c0:fb:
1b:be:6c:4f:87:69:82:32:26:fc:9a:91:01:a4:98:aa:ca:75:
e4:3a:0b:35:f4:96:3f:4b:b7:ce:f9:1d:ac:c1:71:af:90:3d:
ec:a4:bc:3c:fe:90:51:0b:31:c0:7b:7b:42:5f:05:cd:fb:5c:
cd:ac:b4:84:8c:ae:80:8a:63:83:45:7a:4a:7e:e1:13:c8:fb:
b0:8a:6e:99:f7:ef:89:2d:64:c9:69:95:b0:32:fb:a6:be:6f:
4c:fa:05:8b:f6:94:e1:53:35:cd:e2:7b:c5:f1:7c:cc:85:e8:
75:97:46:16:92:be:81:e9:87:11:0b:02:64:51:af:05:04:88:
fa:c9:86:b8:1d:e1:eb:68:89:5b:4f:18:28:2c:d0:32:1d:39:
1b:77:cb:ca:55:04:ac:34:84:10:08:ce:95:37:96:d2:e6:75:
6f:0c:b9:c8:22:f0:dd:f2:26:87:2d:5f:d5:84:eb:f6:93:4b:
24:fd:00:e6
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzCbRrqyRy2tOIHFefW2UITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmExMmNhMWQ1OGRiZjU1NDIzOTE2ODZlNmNmOGM2MmJmOGJmMWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IwM377n2gZwAYisjX+NfadKUn3H
RqB3yjmObM0cpf9rr5VUMCDxnvkXTEhICWpn4b9koMplYrq8BuC/PQPdZ3ENbp0m
A1UGOcoup8+n+riioDH++UsGmXXyNnMqivEKtzowE1DI+jwnv9PAWcgImhkzuW+s
zK/Srgb6Q27Ryuf/+6gDw0MuYwYQupmiTe1811jwbcPTZpKOYx3x8+ESXQzAtYbT
8bksuLBooZk8S/+7AaEg7leBFO3xl0st0Txn/eTHoFvvDPYH+3EkXmtGmlG80Hg/
pD04iFDeqNhcNSj9TxG0Y46iqWcyHS0O13q7yIl2Kbp/z4CtDfOk7A9HkwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFBuhLKHVjb9VQjkWhubPjGK/i/H5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgcgGCCsGAQUFBwELBIG7MIG4MCgGCCsGAQUFBzAFhhxyc3lu
YzovL3Jwa2kuY28vcmVwby9DdWJlLzAvMFQGCCsGAQUFBzAKhkhyc3luYzovL3Jw
a2kuY28vcmVwby9DdWJlLzAvMUJBMTJDQTFENThEQkY1NTQyMzkxNjg2RTZDRjhD
NjJCRjhCRjFGOS5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnJkcC5ycGtpLmNv
L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElK
bkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggr
BgEFBQcBCAEB/wQLMAmgBzAFAgMDLzIwDQYJKoZIhvcNAQELBQADggEBAIpFxYui
KhOTEPIx5KRr+EfuUzBnbKfb67GhadQ3+L2PaX16OBSjzLK4GJFa9olKfxS17pJP
7HsVr6wYAF+4BPGYFXgXexHA+xu+bE+HaYIyJvyakQGkmKrKdeQ6CzX0lj9Lt875
HazBca+QPeykvDz+kFELMcB7e0JfBc37XM2stISMroCKY4NFekp+4RPI+7CKbpn3
74ktZMlplbAy+6a+b0z6BYv2lOFTNc3ie8XxfMyF6HWXRhaSvoHphxELAmRRrwUE
iPrJhrgd4etoiVtPGCgs0DIdORt3y8pVBKw0hBAIzpU3ltLmdW8Mucgi8N3yJoct
X9WE6/aTSyT9AOY=
-----END CERTIFICATE-----
Generated at Tue Jan 9 16:49:34 2024 by rpki-client on console-ams.rpki-client.org