Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JkDWOOvaFNxCMjt8KuvbzJpPoxQ.cer
File: JkDWOOvaFNxCMjt8KuvbzJpPoxQ.cer (raw, json)
Hash identifier: BXCLfTI5MBifGyqmGTHDO1yCfVlqzjXHmmaiqttftIw=
Subject key identifier: 26:40:D6:38:EB:DA:14:DC:42:32:3B:7C:2A:EB:DB:CC:9A:4F:A3:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF71881EB0D366254CDCDC5EC4577AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/571256-6831-485b-8e54-b36cac36db3a/1/JkDWOOvaFNxCMjt8KuvbzJpPoxQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/571256-6831-485b-8e54-b36cac36db3a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 206877
Validation: Failed, certificate revoked on Wed 05 Apr 2023 13:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:18:81:eb:0d:36:62:54:cd:cd:c5:ec:45:77:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2640d638ebda14dc42323b7c2aebdbcc9a4fa314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:22:56:6f:00:5a:3f:bd:3d:6d:d7:0d:53:
69:b7:01:20:a4:d0:ae:9e:38:95:ed:99:cf:e9:9e:
d9:70:b5:40:e5:6d:19:96:fe:fe:50:c5:63:18:d6:
68:95:a0:1a:a1:37:b1:7d:44:b4:fd:f3:2b:c9:48:
ca:91:08:5e:45:a2:46:d2:00:42:4e:6b:9e:cf:f0:
6e:5d:ad:e3:5f:e6:4e:6d:7f:59:bf:04:9b:15:4d:
28:79:ef:93:39:b3:fc:c1:6a:bd:fd:62:89:05:41:
de:50:da:49:9a:fb:c0:8c:c8:26:56:ab:db:3f:54:
d9:29:bb:07:49:87:65:e6:19:08:05:c9:82:cd:81:
c6:42:61:2b:e1:45:34:b5:61:2b:62:26:8d:80:48:
d1:05:3a:0c:92:2c:a0:9b:6c:25:64:d2:e4:bc:ed:
90:d6:de:73:65:c7:bb:63:6a:3b:bb:0d:ac:d8:ce:
1f:ea:cb:3d:08:e1:e7:32:01:50:32:8d:3c:24:4a:
d8:b4:c7:90:2c:ae:61:9e:44:3b:06:58:a0:be:11:
7b:f7:47:07:c6:c3:fb:19:31:e9:5b:8a:c3:e3:04:
2c:36:1b:b3:06:0a:1a:92:d4:46:94:5c:0b:ee:11:
5a:5b:42:74:a5:0e:9b:4c:6f:84:dc:45:81:75:84:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:40:D6:38:EB:DA:14:DC:42:32:3B:7C:2A:EB:DB:CC:9A:4F:A3:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/571256-6831-485b-8e54-b36cac36db3a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/571256-6831-485b-8e54-b36cac36db3a/1/JkDWOOvaFNxCMjt8KuvbzJpPoxQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206877
Signature Algorithm: sha256WithRSAEncryption
31:05:a9:46:7a:a6:d4:a4:d0:32:58:66:ea:ab:59:bd:ca:55:
92:e4:91:a0:18:13:e1:eb:da:8f:73:d2:38:a8:b9:5c:f6:27:
fe:e5:53:f0:02:06:bf:95:91:02:97:fe:50:69:b3:84:65:46:
0c:b3:26:b3:af:66:23:75:86:01:1b:2b:26:ce:c6:fa:0d:bf:
cd:a1:5b:22:28:8d:7f:67:bb:25:9a:07:36:68:49:7d:ee:1b:
bd:b9:2b:c7:91:93:12:c2:ef:f5:78:40:14:32:e3:9b:64:31:
99:d6:73:44:80:5a:40:6a:cf:a4:47:04:64:74:77:af:20:43:
ed:ae:44:2e:0b:f6:80:c1:f5:3d:84:36:3c:24:a5:60:fc:1a:
6d:32:6b:5e:de:5d:07:59:17:9c:f2:1d:63:c2:98:0b:81:4a:
dc:7c:de:9a:f4:40:fa:3b:8f:28:15:a6:50:41:a4:1b:ce:59:
66:5c:60:12:4c:e2:69:41:53:eb:6c:4d:8f:75:96:d4:ac:13:
28:7a:69:a1:59:a9:fa:54:e8:6d:68:52:7b:8f:a2:eb:36:fd:
2c:ab:d5:36:66:8d:dc:66:a5:31:e4:ef:10:a1:5c:f0:17:43:
bb:64:52:08:ce:f1:0e:7f:23:f8:a0:df:87:a8:06:84:25:46:
2f:52:21:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:39 2024 by rpki-client on console-fra.rpki-client.org