Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KNbK8tpxuHE8BJLSDVCbKgGVG9U.cer
File: KNbK8tpxuHE8BJLSDVCbKgGVG9U.cer (raw, json)
Hash identifier: irIs1yawDEJuYtdsgOEziDMLAjRsMG8aKmp/dnI1fFY=
Subject key identifier: 28:D6:CA:F2:DA:71:B8:71:3C:04:92:D2:0D:50:9B:2A:01:95:1B:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C2A7983FA971624FA58D11C4E58158017
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3f4476c6-c58e-4001-9a1e-aff6ea6f37a0/0/28D6CAF2DA71B8713C0492D20D509B2A01951BD5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3f4476c6-c58e-4001-9a1e-aff6ea6f37a0/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 02 Dec 2023 12:20:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 215978
Validation: Failed, certificate revoked on Sat 09 Dec 2023 19:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2a:79:83:fa:97:16:24:fa:58:d1:1c:4e:58:15:80:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 2 12:20:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28d6caf2da71b8713c0492d20d509b2a01951bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:6d:9d:bf:d7:1f:57:04:e4:a1:1f:d7:4f:
dd:19:dd:62:bd:52:3c:c7:7b:0f:25:9a:b5:51:b1:
9c:c7:0b:20:3a:68:8d:18:0a:dd:b5:02:de:5b:53:
d3:31:c5:20:4e:d6:ee:6c:e2:d7:d1:8a:ef:75:34:
a6:02:a6:5d:3c:6e:a5:0f:80:93:8d:fa:bd:63:af:
24:4b:03:0a:ee:f0:a2:b8:99:66:2b:a1:2b:bc:35:
bc:ec:7a:4b:22:d6:d4:f1:b8:1f:18:ce:75:dd:31:
60:3f:3a:92:22:88:d7:22:a8:a3:a3:6a:16:c2:1e:
0e:ce:73:fc:0c:38:ab:f4:52:fb:10:74:06:53:e5:
0d:02:ac:7f:1a:bb:be:90:00:32:df:42:fa:0e:dd:
09:dd:dc:21:e1:16:1c:e8:ab:30:9f:dc:b4:9a:e3:
ae:47:cb:b5:d0:72:58:90:39:66:96:1b:c8:b9:0d:
2e:da:62:fc:52:bc:b2:a4:95:2a:19:e4:7e:68:50:
6a:f4:90:a2:b6:43:03:1b:e2:0e:53:59:9c:10:46:
42:6f:05:84:11:f2:10:d7:d6:dc:8c:a9:f0:4f:f0:
38:f6:be:94:17:cb:9f:67:f1:0b:d7:73:51:12:9f:
f4:a6:ff:19:1c:6b:93:ef:0c:ab:ff:be:76:f8:95:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D6:CA:F2:DA:71:B8:71:3C:04:92:D2:0D:50:9B:2A:01:95:1B:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f4476c6-c58e-4001-9a1e-aff6ea6f37a0/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f4476c6-c58e-4001-9a1e-aff6ea6f37a0/0/28D6CAF2DA71B8713C0492D20D509B2A01951BD5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215978
Signature Algorithm: sha256WithRSAEncryption
43:99:72:79:0b:74:46:c7:04:6f:5a:d4:29:e7:86:ef:fe:4c:
4f:3a:a0:d8:d0:11:0e:55:76:d8:2f:45:74:74:66:23:37:c3:
89:57:37:70:f9:74:cd:50:c3:d2:4b:bd:eb:c3:aa:15:ce:d9:
86:3f:94:99:88:05:83:3b:b6:53:23:8f:a8:d2:18:4c:97:0e:
94:1a:c0:24:22:db:3c:50:f0:e1:2e:95:7c:4a:22:03:82:f7:
ed:50:3d:56:99:b7:d9:e9:0e:83:bf:da:e2:de:f5:a0:dd:a0:
d0:7f:32:42:db:d0:93:7b:d3:37:fd:a6:d2:50:4d:7d:cb:02:
c5:25:23:95:a3:4c:bc:d9:f7:9d:f4:93:23:6c:1f:2f:5d:55:
a6:a9:02:a7:8b:db:0d:fe:45:f7:c8:bf:98:7d:8d:be:94:2c:
36:0c:2a:e6:98:ca:46:75:33:83:79:e5:20:e6:b3:f4:97:eb:
fc:15:fd:69:b8:51:be:66:88:a5:d5:9d:6f:5a:e0:c1:38:1c:
be:4c:07:d4:f1:df:e8:38:a2:26:ab:e6:13:48:2e:ef:73:fc:
dd:0f:62:89:6e:1d:b8:36:7b:66:d0:10:01:ac:eb:fa:30:db:
ac:e3:8e:0c:a1:a3:22:67:6d:6e:d0:33:13:93:eb:a6:91:c4:
86:53:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-fra.rpki-client.org