Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OAmLCys4zXu0_x3Xsn7sjPZ9Vak.cer
File: OAmLCys4zXu0_x3Xsn7sjPZ9Vak.cer (raw, json)
Hash identifier: n1cc+lj78j1dunBy42wy5eYmYeHQy2bieqF4PLhpatc=
Subject key identifier: 38:09:8B:0B:2B:38:CD:7B:B4:FF:1D:D7:B2:7E:EC:8C:F6:7D:55:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191DBD2BE6C241FDA8C8EE1EDAE07FB5BA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/8/38098B0B2B38CD7BB4FF1DD7B27EEC8CF67D55A9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/8/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 10 Sep 2024 12:05:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60743
Validation: Failed, certificate revoked on Wed 18 Sep 2024 10:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:d2:be:6c:24:1f:da:8c:8e:e1:ed:ae:07:fb:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 12:05:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38098b0b2b38cd7bb4ff1dd7b27eec8cf67d55a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:8e:73:1f:ab:01:b9:72:e1:30:e8:ae:20:
fd:c8:8c:f2:5a:70:9e:c5:30:b8:88:97:a1:fc:22:
4c:63:12:c9:eb:24:ee:2a:10:cb:27:c2:28:b0:b3:
4e:9c:89:81:31:ef:40:10:88:e9:3e:03:34:19:ef:
4a:11:84:25:d1:75:ee:95:f7:5e:11:0c:7a:83:e3:
23:96:36:29:c7:82:83:fc:4b:4c:b5:84:6d:27:e3:
ec:0d:ac:75:e1:5e:9d:52:00:96:b2:5b:88:b3:84:
e8:ee:76:21:25:50:ac:de:79:ee:6a:cd:f2:eb:3c:
94:db:10:f6:e5:46:74:e9:dc:f2:f1:2c:4f:81:51:
17:d3:15:07:2a:2a:19:0a:2b:38:27:62:cf:f0:3b:
56:68:37:24:eb:f7:24:49:5d:ab:10:e2:e1:35:cc:
85:7b:c7:a2:56:ec:de:2c:7d:b0:5d:81:b9:bf:87:
be:f2:a5:82:01:71:aa:95:47:b6:62:fc:8b:06:1d:
d8:2d:a5:8a:ce:1c:85:c3:e6:d9:0e:3d:35:a9:cc:
31:29:78:fa:df:3c:da:af:e9:3c:6e:f8:63:ee:bd:
dd:9f:04:0a:33:57:df:d6:9d:1d:9b:65:32:db:5e:
d7:4c:93:c2:9e:b6:a6:9a:fc:14:61:df:37:71:20:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:09:8B:0B:2B:38:CD:7B:B4:FF:1D:D7:B2:7E:EC:8C:F6:7D:55:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/8/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/8/38098B0B2B38CD7BB4FF1DD7B27EEC8CF67D55A9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60743
Signature Algorithm: sha256WithRSAEncryption
53:c7:53:0b:3f:0a:7d:3d:d7:30:5c:d3:11:d7:aa:dc:70:ce:
80:76:bf:aa:c5:9e:ad:6a:91:bf:8b:31:b0:c8:a1:dd:03:29:
b9:4f:b9:73:da:27:cc:75:21:58:05:45:80:b1:ad:4c:34:e0:
2e:aa:6f:f5:2d:82:4b:f8:5e:2c:f6:bf:0d:c3:6c:c4:22:90:
a8:a4:b7:80:28:ee:9d:e9:1a:b3:19:2c:f6:5e:65:2a:b7:8b:
1a:70:05:cb:5c:4a:bb:f8:39:e7:db:36:01:45:7f:07:8a:a0:
db:27:e6:8f:0f:76:7c:3c:41:0f:e0:90:67:07:42:0f:6c:bc:
b1:32:a7:b6:34:98:84:74:18:3c:1b:a9:d6:d0:18:6a:41:9d:
41:1d:5a:06:93:85:83:a5:c8:5a:52:24:96:23:da:27:31:2c:
62:12:6c:64:07:f3:4b:7e:66:e8:6b:3d:eb:cd:c4:2b:a1:48:
20:e5:65:91:b8:ee:ad:ae:22:66:08:03:5a:51:4b:35:23:6c:
ca:74:69:31:1e:82:7c:28:ee:e3:19:85:03:1b:26:1d:21:c5:
34:ff:a9:3c:4c:3e:a3:24:17:eb:e5:95:eb:50:93:49:53:25:
36:6c:cb:fb:59:cf:9c:e1:c2:45:9c:6f:24:ac:ac:2f:76:0a:
59:d9:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 14:49:15 2024 by rpki-client on console-ams.rpki-client.org