Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPctY_w7zlpb_utr9f88n89niL4.cer
File: NPctY_w7zlpb_utr9f88n89niL4.cer (raw, json)
Hash identifier: eZl8Mvlox8fApQWyjTBWYpn/qDuBEOkikuVUK4TwWec=
Subject key identifier: 34:F7:2D:63:FC:3B:CE:5A:5B:FE:EB:6B:F5:FF:3C:9F:CF:67:88:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01906910CFF6F84F684C08FF118ECF3AD108
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/34F72D63FC3BCE5A5BFEEB6BF5FF3C9FCF6788BE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 30 Jun 2024 12:13:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210563
Validation: Failed, certificate revoked on Sun 07 Jul 2024 18:56:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:10:cf:f6:f8:4f:68:4c:08:ff:11:8e:cf:3a:d1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 12:13:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34f72d63fc3bce5a5bfeeb6bf5ff3c9fcf6788be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:b9:53:af:74:b6:99:7d:26:c2:20:3b:10:
69:cf:9a:7b:0d:4d:f2:d8:a7:0d:d5:12:6b:1f:a1:
63:88:54:5a:fe:1b:b1:cc:72:9f:cc:47:da:61:3f:
a4:25:de:de:a8:16:7d:8c:48:cf:fc:58:3e:ad:3c:
96:77:31:96:5f:3b:a4:12:8d:e4:b1:67:95:ec:45:
43:8c:c7:e1:02:00:76:e6:c3:f6:ef:6d:58:6a:b2:
b8:c7:55:69:1f:c0:b3:d4:d7:2e:21:52:bc:7c:16:
4d:3d:80:cd:21:91:00:22:63:7d:58:a8:0f:62:99:
b5:0d:88:ce:c6:89:9a:d6:90:c4:14:b6:6e:af:b2:
d3:11:bd:43:2a:21:9b:1d:ac:c4:77:7e:83:6a:73:
2c:a6:2f:89:ce:cf:d6:ea:e6:72:b5:ef:99:07:45:
34:3c:22:d2:7b:29:0f:44:a3:b0:7d:66:01:a1:ae:
08:91:4d:2d:7a:9c:e3:c2:ff:d5:ca:8a:5c:a7:95:
16:6c:1b:fa:75:16:d6:3a:5d:10:00:84:c2:7f:3e:
ef:2a:44:97:27:64:ea:9d:da:37:e4:99:f7:08:9a:
84:22:6d:5b:89:fc:79:a8:2c:07:55:4d:66:3f:59:
a0:c3:03:ff:00:26:a3:3d:f5:c4:61:e9:62:6e:63:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F7:2D:63:FC:3B:CE:5A:5B:FE:EB:6B:F5:FF:3C:9F:CF:67:88:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/34F72D63FC3BCE5A5BFEEB6BF5FF3C9FCF6788BE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210563
Signature Algorithm: sha256WithRSAEncryption
6a:e4:8f:b3:7b:b4:c1:20:ae:80:df:3d:07:40:cb:e4:8c:1c:
dd:85:e1:fd:90:cc:d0:99:67:eb:77:66:69:be:94:f1:1b:15:
62:b7:6f:4e:c3:b1:5d:25:bb:6c:dd:f5:a7:7d:7b:10:ca:8e:
92:e7:39:82:f4:9d:e8:d3:b2:1f:35:4f:8d:8e:ca:e1:dd:ae:
ad:bb:2d:36:65:3b:49:d3:7a:e2:44:8a:27:e3:6b:2b:4c:35:
4e:ba:7e:7a:f9:38:3f:4f:d2:7b:cd:f6:b3:f1:8f:ca:c1:f0:
65:f1:28:1c:4a:c4:fa:e8:e2:9e:44:41:2d:15:97:6d:fa:f7:
ed:04:5a:4d:b9:ea:eb:7b:95:8d:ed:b8:ce:db:90:3c:7a:c4:
8d:8f:5c:0e:85:23:8d:f1:85:1e:61:ec:6d:b7:60:48:7c:f7:
73:09:8f:2e:3f:9a:7f:0a:6b:83:09:ba:3b:71:b0:c1:3d:75:
c2:88:23:38:02:79:3a:dc:b5:18:ad:fe:25:e4:ea:cd:25:70:
fa:8b:1a:ec:f4:9d:b8:d0:50:f6:4d:02:49:28:8b:85:93:c5:
43:ad:02:93:ab:2e:e6:fe:81:db:bf:ea:99:69:4f:97:1d:e6:
f7:61:81:d8:58:e9:5e:9c:ba:d1:3f:ed:f1:38:61:42:72:0d:
64:03:fe:53
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZBpEM/2+E9oTAj/EY7POtEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjMwMTIxMzQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGY3MmQ2M2ZjM2JjZTVhNWJmZWViNmJmNWZmM2M5ZmNmNjc4OGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLq5U690tpl9JsIgOxBpz5p7DU3y
2KcN1RJrH6FjiFRa/huxzHKfzEfaYT+kJd7eqBZ9jEjP/Fg+rTyWdzGWXzukEo3k
sWeV7EVDjMfhAgB25sP2721YarK4x1VpH8Cz1NcuIVK8fBZNPYDNIZEAImN9WKgP
Ypm1DYjOxoma1pDEFLZur7LTEb1DKiGbHazEd36DanMspi+Jzs/W6uZyte+ZB0U0
PCLSeykPRKOwfWYBoa4IkU0tepzjwv/Vyopcp5UWbBv6dRbWOl0QAITCfz7vKkSX
J2Tqndo35Jn3CJqEIm1bifx5qCwHVU1mP1mgwwP/ACajPfXEYelibmNKeQIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFDT3LWP8O85aW/7ra/X/PJ/PZ4i+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgz
N2ZiLTYzOTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi84LzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRl
ODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzgvMzRGNzJENjNGQzNC
Q0U1QTVCRkVFQjZCRjVGRjNDOUZDRjY3ODhCRS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDNoMw
DQYJKoZIhvcNAQELBQADggEBAGrkj7N7tMEgroDfPQdAy+SMHN2F4f2QzNCZZ+t3
Zmm+lPEbFWK3b07DsV0lu2zd9ad9exDKjpLnOYL0nejTsh81T42OyuHdrq27LTZl
O0nTeuJEiifjaytMNU66fnr5OD9P0nvN9rPxj8rB8GXxKBxKxPro4p5EQS0Vl236
9+0EWk256ut7lY3tuM7bkDx6xI2PXA6FI43xhR5h7G23YEh893MJjy4/mn8Ka4MJ
ujtxsME9dcKIIzgCeTrctRit/iXk6s0lcPqLGuz0nbjQUPZNAkkoi4WTxUOtApOr
Lub+gdu/6plpT5cd5vdhgdhY6V6cutE/7fE4YUJyDWQD/lM=
-----END CERTIFICATE-----
Generated at Sun Jul 7 20:08:25 2024 by rpki-client on console-fra.rpki-client.org