Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GFymjpBXQxigVS8Lf0LMEgNp8o8.cer
File: GFymjpBXQxigVS8Lf0LMEgNp8o8.cer (raw, json)
Hash identifier: 2YyJ4E52shPJu3ZxqpV36R2/aW4VVZ7YUKBIEeIBDwo=
Subject key identifier: 18:5C:A6:8E:90:57:43:18:A0:55:2F:0B:7F:42:CC:12:03:69:F2:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD5CF24E4420C1A6A764775E4805F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/0/185CA68E90574318A0552F0B7F42CC120369F28F.mft
caRepository: rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/0
Notify URL: https://rpki-test-repo.net.kagl.me/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 50555
Validation: Failed, certificate revoked on Sun 09 Apr 2023 09:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:5c:f2:4e:44:20:c1:a6:a7:64:77:5e:48:05:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=185ca68e90574318a0552f0b7f42cc120369f28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:98:a7:18:e6:38:44:90:7f:a9:3e:7d:68:6f:
e0:64:fa:47:13:11:b5:ed:d3:7b:a3:28:e9:57:b1:
69:15:15:3b:6c:32:61:c9:2d:b9:37:f8:fa:8f:ae:
7f:65:ba:9c:9c:b0:28:89:e5:d8:0a:24:be:96:ed:
77:c4:74:62:b7:14:bc:d4:4a:5f:bb:af:79:11:e5:
ae:b3:e4:c1:ac:5a:d3:1d:65:32:c8:ed:67:8b:34:
dc:c5:6c:0a:de:a4:cc:e0:d0:c0:99:6a:d1:bf:fb:
59:34:8f:6e:ed:3f:5a:1d:23:de:4f:61:c3:cb:2c:
e6:84:ff:f3:23:52:db:1c:b4:4f:4e:54:e6:15:60:
1e:49:82:a3:9c:fb:b6:7a:fa:76:11:b6:fc:ac:ee:
e3:fe:75:df:77:63:3a:6e:5c:cb:e7:ab:d6:3d:7b:
9e:39:98:3e:2e:56:65:74:e7:cf:2a:3d:05:00:49:
e9:62:e4:4d:a8:e4:96:74:51:0b:e6:b6:78:3a:bc:
47:a2:c3:ed:76:1a:94:4f:9c:d0:a7:0e:ac:c1:b7:
25:3b:8c:b2:69:29:35:1b:7b:e3:c4:35:31:01:dc:
ea:c7:27:6e:6e:3e:28:7c:0e:e1:08:d3:60:da:1b:
f0:84:14:7f:77:b3:98:ca:51:fc:25:79:43:c0:ef:
86:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5C:A6:8E:90:57:43:18:A0:55:2F:0B:7F:42:CC:12:03:69:F2:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/0
RPKI Manifest - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/0/185CA68E90574318A0552F0B7F42CC120369F28F.mft
RPKI Notify - URI:https://rpki-test-repo.net.kagl.me/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50555
Signature Algorithm: sha256WithRSAEncryption
ad:7d:9f:b7:2a:bb:32:b4:ad:7c:8a:f6:9a:7f:f4:8a:d7:5e:
ff:ca:fd:56:3f:19:cf:02:34:c1:5b:bd:57:70:6a:1a:bb:2c:
7e:e1:de:b2:b5:50:c6:96:6b:2e:5c:23:b1:fc:09:93:8b:63:
ee:f0:62:18:55:b6:6c:2f:ae:ee:f1:61:24:6f:78:d8:26:09:
82:8b:8d:84:23:b0:d7:3e:af:78:0a:d4:bf:2c:24:a0:24:b3:
ea:9e:dd:49:5a:7e:67:6f:bf:8e:a8:a7:03:79:aa:22:3b:de:
7e:a1:5e:e5:82:ac:35:85:1e:21:47:f4:0c:7a:bd:ba:9a:93:
9f:e2:28:cc:fa:18:13:c9:ff:5f:ab:31:17:3a:e6:49:af:8d:
3b:c6:fa:97:18:2f:b9:53:8a:1f:91:23:63:7d:2c:a3:62:42:
8e:ab:2f:b2:1e:0e:ca:b5:09:a3:a7:91:03:64:67:81:f5:c1:
97:b1:fb:00:3a:46:eb:0c:bc:28:17:bf:3c:25:d8:b7:5b:15:
6f:72:1c:59:f3:f3:56:81:7e:e1:6d:22:97:b3:3b:f2:e7:7e:
87:89:d0:9d:81:31:73:7c:66:d9:4f:29:18:db:ea:7e:8f:da:
c5:f5:ba:bc:0d:35:6a:bc:39:e7:e2:7a:53:c3:79:70:8a:ae:
3d:0d:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:52 2024 by rpki-client on console-ams.rpki-client.org