Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NH1T7iQsfxdEeKCO0YHCzk4EtP4.cer
File: NH1T7iQsfxdEeKCO0YHCzk4EtP4.cer (raw, json)
Hash identifier: Rhx7t8toAa0ItBeEkITKDKQkSpcZ/Ov4u7RFeqKwD6g=
Subject key identifier: 34:7D:53:EE:24:2C:7F:17:44:78:A0:8E:D1:81:C2:CE:4E:04:B4:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E63509261D24029DDD3DCB21C6F7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/c233a2-f732-4a80-8ad2-5b363e8d3dc1/1/NH1T7iQsfxdEeKCO0YHCzk4EtP4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/c233a2-f732-4a80-8ad2-5b363e8d3dc1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:35:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 202996
Validation: Failed, certificate revoked on Thu 13 Apr 2023 15:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:63:50:92:61:d2:40:29:dd:d3:dc:b2:1c:6f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=347d53ee242c7f174478a08ed181c2ce4e04b4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:00:ab:cd:46:17:61:12:57:8d:fb:5a:2e:
29:8e:76:28:cc:e1:10:10:d7:5e:f0:92:bd:cb:65:
05:51:e7:38:23:e5:a6:6a:45:af:df:43:26:1f:ca:
b8:14:5b:0e:db:ba:43:a2:18:04:1b:ad:22:d0:46:
e9:ab:f8:78:57:9f:a5:6e:e1:9b:92:f8:67:ac:3b:
d9:15:77:4d:5b:a8:e9:a9:c4:7d:c4:6e:e1:8a:d4:
c4:08:3b:c1:24:71:bb:ad:fc:f2:ed:fc:fb:fe:ec:
c3:86:b6:21:66:d0:b4:bb:47:3b:ce:1a:5d:b8:26:
31:87:bd:ba:fa:9b:48:a4:37:77:08:be:2b:35:49:
14:13:37:13:1d:c9:7a:fe:b5:e9:5a:b8:ab:d6:b1:
75:5b:a8:05:a7:ab:cd:62:df:f1:c5:88:fa:71:e7:
0f:54:8b:60:36:5e:82:ba:02:08:a0:18:53:f4:e1:
37:2c:cc:90:e0:b4:be:2d:dc:1c:1d:d3:0b:8c:0a:
b7:66:8c:d1:38:1f:a4:37:41:f6:3d:7e:79:a9:a1:
e2:fd:ee:65:64:fb:a1:db:99:43:41:e9:05:4c:6d:
7e:07:a4:c6:9a:a3:f6:45:c8:a7:f4:9d:35:5f:6d:
bd:6c:14:4a:4c:f1:07:fd:f9:bc:3a:2f:a9:de:13:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7D:53:EE:24:2C:7F:17:44:78:A0:8E:D1:81:C2:CE:4E:04:B4:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c233a2-f732-4a80-8ad2-5b363e8d3dc1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c233a2-f732-4a80-8ad2-5b363e8d3dc1/1/NH1T7iQsfxdEeKCO0YHCzk4EtP4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202996
Signature Algorithm: sha256WithRSAEncryption
1f:10:4c:3d:61:cd:36:12:a5:96:34:e0:f0:ff:79:7e:5c:5e:
c4:ce:37:a6:ed:15:bb:38:7d:c6:fc:f5:79:dc:e8:d9:72:20:
b3:d5:f4:e9:77:78:72:1f:a3:9a:e4:99:50:2e:a9:ad:2e:c9:
62:47:0d:8d:31:39:27:67:e6:f1:52:ef:80:e0:e3:a7:0a:b0:
b4:8b:0d:3e:23:0f:54:2c:64:a2:9e:18:54:fe:58:40:43:12:
a5:70:5d:56:98:1c:a3:86:65:76:6e:a0:5c:c5:a8:c8:b5:b8:
9f:7a:d5:60:a6:16:6a:a0:ac:bd:1a:c6:0f:5c:73:5d:21:24:
34:31:d4:35:f9:29:e2:a3:19:1d:33:29:8e:2a:b8:cd:58:11:
95:d1:0d:5d:b2:25:29:09:57:f7:e2:f8:45:06:6a:67:38:b3:
69:b8:65:2b:a6:92:2b:7e:85:b5:1b:45:c3:0d:8d:b0:50:6b:
bd:2f:26:d5:41:38:85:e9:ba:68:20:d6:e1:2a:38:82:00:89:
21:67:0e:00:fe:a7:67:8e:c8:bd:94:09:97:08:af:85:81:79:
15:61:97:82:3f:99:f0:75:8b:4e:48:70:3e:66:5f:b6:e4:8a:
93:20:bb:e9:bb:11:3b:a0:56:5c:e3:3a:8e:01:1f:f0:9a:20:
ae:11:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:12 2024 by rpki-client on console-ams.rpki-client.org