Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M6fFfjy-qDsbCFxp2Of51FIFE2I.cer
File: M6fFfjy-qDsbCFxp2Of51FIFE2I.cer (raw, json)
Hash identifier: zLE6oSeu6ZWCeA6LEjIRgIuHCaby8tPuxTskA24HNTY=
Subject key identifier: 33:A7:C5:7E:3C:BE:A8:3B:1B:08:5C:69:D8:E7:F9:D4:52:05:13:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ED92F2148C1FE2DB6D97D0247EA62D6B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/M6fFfjy-qDsbCFxp2Of51FIFE2I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 13 Apr 2024 20:38:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215108
Validation: Failed, certificate revoked on Sun 14 Apr 2024 10:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d9:2f:21:48:c1:fe:2d:b6:d9:7d:02:47:ea:62:d6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 13 20:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33a7c57e3cbea83b1b085c69d8e7f9d452051362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:10:2d:f7:a4:93:6a:fa:e4:f9:47:e6:7c:
5a:93:57:0d:d4:09:89:f7:73:fd:7a:2e:af:91:79:
63:56:3c:b2:bc:e8:5f:9e:70:2a:ac:28:7a:3f:d2:
25:84:8c:55:10:1a:f8:2d:d1:2d:d4:36:a3:8a:19:
9d:c1:85:32:98:7a:b5:bc:46:07:6f:bf:f9:2d:1d:
cf:ff:13:fa:38:95:1c:ab:7c:24:6f:aa:97:6a:b2:
0a:61:4c:e4:b4:39:c3:3c:9f:26:d6:de:29:f4:ff:
d5:a7:c8:05:41:15:50:92:5e:fd:fd:65:5f:e9:ca:
5b:75:3c:67:7f:f9:4c:3b:41:3f:9e:94:2e:28:4c:
23:d2:22:ab:a3:5b:ec:5c:34:03:2d:d5:76:b7:19:
72:c5:53:44:35:87:c2:2a:b9:08:f8:c4:54:78:bf:
a3:23:28:fb:27:1b:94:c0:b0:96:3c:fe:93:1d:6f:
be:35:06:a0:cf:2e:18:71:3a:e3:04:e7:61:48:ee:
6a:17:86:f5:5d:9f:29:70:c2:4b:c8:72:f3:4e:33:
f0:0b:7e:2e:fb:6c:49:8f:a0:14:ae:8e:88:80:d9:
1e:fb:48:48:ce:c7:d9:13:47:86:96:62:b4:a3:c3:
fd:7e:5b:10:92:f3:60:08:d7:5f:59:af:83:6a:aa:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A7:C5:7E:3C:BE:A8:3B:1B:08:5C:69:D8:E7:F9:D4:52:05:13:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/M6fFfjy-qDsbCFxp2Of51FIFE2I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215108
Signature Algorithm: sha256WithRSAEncryption
31:05:a4:82:52:ca:b5:64:ae:03:dc:ec:ff:62:45:88:1d:a1:
35:8b:bc:20:51:bc:b9:22:a8:69:c8:31:fc:c6:74:36:b5:bb:
01:3a:4b:f7:b4:3b:59:a5:a7:4e:a3:10:54:e6:b0:32:5f:8e:
6a:39:3e:b5:36:5e:78:8d:06:88:7b:f6:ac:a2:1a:11:b9:ea:
a8:41:8c:23:26:05:2d:8e:7b:27:02:66:c4:17:6b:64:46:84:
87:91:0d:20:ba:ea:67:f9:a6:b7:ca:b6:9d:7b:64:a4:35:06:
8a:1d:ab:78:32:09:77:9d:e6:97:bb:5f:de:da:c5:53:8e:a5:
f3:a7:f6:4e:57:e3:1d:d8:31:45:66:a7:ba:9a:42:75:8c:4a:
29:02:27:fd:dd:8f:b4:aa:7b:76:fa:1b:fc:d5:7c:32:55:4e:
ce:70:7e:4d:bc:a0:d6:f2:2c:4e:6d:3e:2d:b8:b2:cd:6a:ef:
01:48:9e:f5:6f:2e:0f:db:0c:d0:6c:fc:3f:6f:32:8f:7e:9d:
84:2f:01:8e:51:dd:af:95:15:cc:05:51:64:a9:be:a0:b7:ed:
a5:e4:c9:8f:06:6a:20:16:3e:c2:d3:bf:9a:ce:8c:de:da:b5:
d8:4f:04:1a:67:16:74:17:0b:ed:ab:60:24:93:b7:23:e9:e0:
2d:d9:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:50 2024 by rpki-client on console-ams.rpki-client.org