Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GC9jNMOC_1DPbmYiUdS2iwDag9g.cer
File: GC9jNMOC_1DPbmYiUdS2iwDag9g.cer (raw, json)
Hash identifier: WmRWUDApvD6RLclp1wnJP1z7Mws/1JQH20UsoecXm5U=
Subject key identifier: 18:2F:63:34:C3:82:FF:50:CF:6E:66:22:51:D4:B6:8B:00:DA:83:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187A1DBF0356E3E669268FC13AAA90091E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/0/182F6334C382FF50CF6E662251D4B68B00DA83D8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/0
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 21 Apr 2023 03:29:18 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 203635
Validation: Failed, certificate revoked on Fri 21 Apr 2023 11:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a1:db:f0:35:6e:3e:66:92:68:fc:13:aa:a9:00:91:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 21 03:29:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=182f6334c382ff50cf6e662251d4b68b00da83d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:54:2d:7a:75:af:61:d5:35:4f:9f:80:14:
a1:d1:e0:d6:16:ce:e8:fd:00:01:17:6e:77:9a:7b:
5a:dd:7b:ba:c5:45:d5:5c:25:83:d8:05:49:b0:67:
08:a1:e6:4b:6e:f4:49:5d:d4:e5:42:d0:6a:a6:c8:
4a:06:cc:82:2f:9f:78:89:e1:95:ab:0b:a6:46:51:
15:02:5a:72:92:7a:eb:a7:62:f5:da:a0:f7:05:93:
e2:e6:a8:a2:f8:8e:e6:83:b5:bc:dc:6f:eb:1a:cc:
61:16:52:32:9f:53:89:bb:6d:e9:38:28:e6:94:cd:
d1:f4:3b:b4:44:56:39:14:00:92:09:f5:76:c2:b4:
05:49:5b:e8:2d:dc:cb:ab:36:77:65:34:e2:71:39:
d8:39:9a:5a:dd:87:23:ab:e7:43:9d:36:e1:0c:10:
ca:ac:c5:f8:11:cf:fa:09:cf:a9:d2:75:dc:e9:b8:
05:c9:0d:45:e4:0c:1c:6c:3f:30:a0:55:5f:3e:2d:
3c:b9:02:5b:03:bf:67:e9:ac:84:e0:77:cc:72:b3:
66:62:91:b6:90:78:00:ae:90:a8:d5:c8:81:3c:24:
4e:b9:77:81:a4:b7:25:2c:5e:5d:0d:75:52:47:2d:
e5:1a:d1:84:6b:d4:72:0f:7d:08:f7:6f:92:04:79:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:63:34:C3:82:FF:50:CF:6E:66:22:51:D4:B6:8B:00:DA:83:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/0
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/0/182F6334C382FF50CF6E662251D4B68B00DA83D8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203635
Signature Algorithm: sha256WithRSAEncryption
95:4b:68:40:08:20:42:a4:b5:87:f4:bd:2e:7b:67:61:17:e3:
a5:42:5c:a9:a6:2e:f5:e3:9c:f6:88:61:89:df:44:2a:d1:06:
32:12:a3:c7:9c:00:a8:0c:fc:03:df:6e:af:5c:33:c9:e2:5f:
74:70:e4:25:d8:e2:b4:5e:1a:69:41:09:a0:43:bf:97:fd:31:
48:09:a6:d8:fe:dc:25:f6:42:6e:f3:94:1e:bd:50:27:27:3f:
e5:a5:1d:54:92:65:47:82:35:5d:32:8f:be:82:ab:b1:ae:4c:
7c:08:aa:c1:e4:1e:92:63:45:e1:f6:26:e4:bf:24:ed:29:86:
7e:64:65:cb:62:f1:a3:ce:7e:90:2b:a0:36:17:e1:ca:21:b3:
b8:de:7b:29:86:7b:33:3d:46:d1:b3:6a:c1:44:6b:45:f2:e2:
02:17:3f:74:a3:5c:7e:fd:32:85:a0:51:d5:c2:1b:57:6b:81:
d5:03:4f:17:ca:d4:13:f5:a2:21:c6:37:65:f9:88:71:62:c5:
9a:9b:14:38:64:ee:eb:92:36:2a:dd:7f:4f:2b:a4:fb:05:79:
40:25:e9:ef:ec:0e:33:09:78:b2:e6:3d:db:6b:d0:42:e5:3a:
63:06:e4:ff:5c:c9:9c:5f:d3:23:ef:3d:49:20:4c:a0:25:25:
8c:aa:c5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-fra.rpki-client.org