Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GmDYtyUFmsCZubkK3SNYLJxkgyc.cer
File: GmDYtyUFmsCZubkK3SNYLJxkgyc.cer (raw, json)
Hash identifier: aqo7ZvfuLduDFytltGE/Si5voxTKSSdQ7cq9pW/Tkys=
Subject key identifier: 1A:60:D8:B7:25:05:9A:C0:99:B9:B9:0A:DD:23:58:2C:9C:64:83:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190691100D8C50E9AFF089343BE5547702D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/18/1A60D8B725059AC099B9B90ADD23582C9C648327.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/18/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 30 Jun 2024 12:14:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212245
Validation: Failed, certificate revoked on Sun 07 Jul 2024 18:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:11:00:d8:c5:0e:9a:ff:08:93:43:be:55:47:70:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 12:14:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a60d8b725059ac099b9b90add23582c9c648327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:3b:3b:2c:7d:13:3f:f3:be:00:9f:c6:36:
90:07:d4:74:df:5f:d7:08:5a:57:22:6a:ac:83:c1:
74:f7:3e:c0:06:86:c6:83:28:ce:ff:86:20:52:98:
48:99:7c:41:cf:32:d1:c8:94:0f:2f:82:bb:ac:ef:
58:36:e1:12:40:ca:b4:1f:64:fc:7a:1f:5d:1a:c7:
5a:03:4d:4a:29:3e:60:99:13:d6:18:f5:15:05:ce:
19:97:9c:f1:9c:74:c5:d2:ec:95:d0:f8:4e:0e:da:
81:84:58:d2:48:3f:45:6d:76:0e:e2:ae:04:5a:4b:
f3:12:fc:98:db:86:93:a4:a8:f4:d0:13:de:fd:23:
f6:f1:c8:b1:1c:2f:2f:f3:99:76:4f:f1:cd:e0:f1:
8f:d7:3b:1b:51:11:bb:c8:e0:4b:ef:65:c7:39:a7:
8c:88:7f:a4:86:0d:37:6c:74:f6:d3:19:81:4b:90:
f7:44:bf:16:da:a2:5f:15:b5:b7:77:f6:cb:d7:67:
db:78:27:d1:f5:b6:dd:ed:03:4c:54:2a:6b:ed:85:
b7:85:0d:80:f7:91:dc:c5:77:9a:09:ae:83:a3:ef:
b3:a7:bd:ec:2d:d6:15:7b:ca:7e:5a:6a:94:db:67:
2b:6b:bf:35:64:9a:b6:43:93:b2:55:68:67:be:91:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:D8:B7:25:05:9A:C0:99:B9:B9:0A:DD:23:58:2C:9C:64:83:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/18/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/18/1A60D8B725059AC099B9B90ADD23582C9C648327.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212245
Signature Algorithm: sha256WithRSAEncryption
9e:ee:d1:25:9c:9a:d3:86:30:76:92:57:4e:bf:2a:11:8c:61:
87:7e:5c:57:85:65:33:6e:98:b6:ab:58:c5:42:2a:f6:6f:42:
8c:e6:14:a7:5c:5b:70:30:7c:07:61:90:d3:4e:65:42:d2:c5:
f8:79:8a:2f:ac:66:52:9e:f3:3c:5b:65:67:2e:c8:5b:97:f0:
dd:de:db:1b:55:ef:6f:fa:aa:99:fa:8e:ec:fa:cb:66:db:16:
18:5e:51:03:a9:5b:f8:32:a0:a8:a7:88:32:16:a7:0d:f0:11:
d8:ac:f8:8c:3d:3e:4d:0d:30:99:94:02:87:57:c2:67:ba:bf:
fc:41:5f:b5:fd:f7:8c:b9:d1:da:00:03:a2:fc:7d:06:7a:9e:
09:7c:af:a5:80:3a:cd:7d:98:c6:b0:6f:36:51:54:b9:1f:2e:
99:0b:e6:01:30:45:37:b7:e0:74:59:e6:bd:6b:08:57:17:23:
62:53:61:8e:bc:89:2c:a4:e3:1b:a7:e0:df:0d:a1:0b:12:20:
cd:bb:36:33:36:0e:05:36:a7:c9:2b:a8:97:50:3b:82:fc:d7:
23:a2:02:9d:b8:a6:8d:6d:c3:0e:c7:c7:3f:b4:43:50:b7:d4:
66:88:39:08:77:d8:38:70:87:96:49:b9:6e:01:c1:c5:3b:ab:
3e:f4:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:10:41 2024 by rpki-client on console-ams.rpki-client.org