Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mvfaml0p0rUe8-W6zuzhWWWlQ_0.cer
File: Mvfaml0p0rUe8-W6zuzhWWWlQ_0.cer (raw, json)
Hash identifier: a0w9x9PWJLUO8rmdejzO07cI6E4rMUGxpbB0QhXwGPA=
Subject key identifier: 32:F7:DA:9A:5D:29:D2:B5:1E:F3:E5:BA:CE:EC:E1:59:65:A5:43:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019014AA9540D07507A7B3D4E51ED203EEBB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 14 Jun 2024 02:54:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216411
Validation: Failed, certificate revoked on Thu 27 Jun 2024 16:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:14:aa:95:40:d0:75:07:a7:b3:d4:e5:1e:d2:03:ee:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 14 02:54:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32f7da9a5d29d2b51ef3e5baceece15965a543fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:c2:31:53:ec:d0:32:71:b3:04:16:19:37:
6d:4f:ba:dc:26:4c:cb:09:51:5e:21:ea:04:4d:09:
cd:fb:a7:d8:e1:f5:2f:26:c9:b9:07:bc:f9:c7:03:
ad:f9:b1:3d:7b:81:f9:c4:cc:22:f6:05:e6:71:9a:
b4:38:4e:fb:58:46:de:3f:6d:89:65:b8:c4:d4:9c:
c0:b0:d6:01:91:53:87:89:27:30:c7:d6:a6:34:dd:
2f:98:03:cc:0c:ee:ca:77:77:b0:53:e4:3c:c2:d6:
26:a0:5b:a5:77:a8:c7:b1:51:a4:87:06:ca:d8:5f:
26:18:e2:27:8c:3d:1a:81:eb:f8:08:8b:2f:16:0e:
a3:b3:9f:7d:55:5b:b2:47:f0:30:e9:0e:e3:d9:e9:
64:53:b9:bf:8c:c9:23:7d:46:b9:b0:07:01:43:f8:
77:02:21:c7:73:bf:4f:f6:15:6a:17:76:08:a1:e8:
33:6b:ca:94:a6:70:2f:6a:9a:fe:c7:36:7a:a0:d6:
cb:36:08:06:ed:06:e0:69:3f:27:c5:6a:1b:2b:74:
01:cb:3d:47:41:d6:28:68:83:ee:23:86:58:f3:0c:
9e:04:c2:fc:fd:2b:b9:48:aa:f0:5b:8b:e0:fc:ce:
b6:d8:2b:5a:5a:0b:0d:f0:5a:3e:79:d1:2a:08:f7:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F7:DA:9A:5D:29:D2:B5:1E:F3:E5:BA:CE:EC:E1:59:65:A5:43:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216411
Signature Algorithm: sha256WithRSAEncryption
5f:e1:8d:8a:c9:2c:f8:fb:32:b5:3b:01:a9:71:92:2d:0b:bf:
51:7c:68:57:9e:4c:9d:49:80:34:e7:61:d2:b6:72:33:3f:6d:
61:27:18:e6:0c:fd:7b:13:6a:98:e4:4a:0f:c9:13:c7:54:d3:
87:92:b0:49:e7:12:62:59:a0:54:fa:11:5d:f9:e7:d1:93:56:
a3:61:ec:8a:b7:be:0a:19:56:f6:a8:67:33:46:c8:a6:0e:c6:
2b:68:52:16:e4:c4:ab:85:b3:dc:0c:41:01:6b:ed:e8:9c:8a:
31:79:0d:13:81:7d:d7:91:6f:8f:70:c0:24:c1:06:be:c1:46:
f8:4d:6a:5c:50:76:f4:14:a3:dd:19:86:82:8e:cc:2c:d1:35:
45:0c:b5:bb:74:5d:7e:5f:b9:58:f7:32:b7:04:76:a9:a7:2e:
dc:de:5f:dc:98:79:c6:50:8d:fd:f5:e1:de:3a:e7:12:40:73:
2b:f0:56:ab:ea:53:0a:48:88:25:7c:03:14:51:9f:c0:9b:fa:
33:b6:99:2b:9b:22:83:78:b0:ce:9b:78:15:e0:cb:8f:35:68:
17:ba:c8:f7:16:e3:f5:fa:fc:c0:c7:dc:aa:9b:45:b6:2b:c2:
af:31:76:0c:df:ba:ee:b2:7a:7e:fc:d0:63:1a:10:b8:28:b8:
02:48:9c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:47 2025 by rpki-client