Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OJJuaO-pfEzrF9Stp7Weu_i5hKQ.cer
File: OJJuaO-pfEzrF9Stp7Weu_i5hKQ.cer (raw, json)
Hash identifier: LpSoLv5KI7MhSBngrnvl0M4xZEYn2GynIb0qc4KfAwI=
Subject key identifier: 38:92:6E:68:EF:A9:7C:4C:EB:17:D4:AD:A7:B5:9E:BB:F8:B9:84:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D588E22ACA70C75FC4ABE39A6E3569
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/b9163d-9ff3-4b4b-b5e9-fd40ca2056a8/1/OJJuaO-pfEzrF9Stp7Weu_i5hKQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/b9163d-9ff3-4b4b-b5e9-fd40ca2056a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:34:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 212997
Validation: Failed, certificate revoked on Wed 27 Dec 2023 10:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d5:88:e2:2a:ca:70:c7:5f:c4:ab:e3:9a:6e:35:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38926e68efa97c4ceb17d4ada7b59ebbf8b984a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:31:16:d5:21:67:a9:13:13:24:97:1c:bb:
ea:cc:25:f0:f9:f2:c5:5d:0d:14:4e:25:42:7c:89:
ea:26:50:11:69:41:5f:7c:cc:88:30:32:29:56:c7:
e1:32:40:7b:24:a6:21:6c:ab:62:03:a5:23:b5:95:
02:cc:e9:c2:b9:7e:62:22:61:e7:78:1d:39:9b:4a:
19:2d:ec:ad:02:78:56:29:61:11:35:41:58:a1:17:
4c:af:23:63:9f:dc:22:5a:ae:ae:2d:60:8b:c0:bf:
86:fa:70:c6:86:cf:57:12:46:9e:f9:0b:a0:a2:d2:
36:03:5f:76:52:03:4e:b9:a8:23:fd:03:eb:1b:a0:
82:9e:c0:47:6d:7c:07:b0:d1:3b:6a:b0:5d:13:f8:
fd:67:6d:88:84:a9:9d:a7:15:6d:b2:58:c9:57:63:
28:a2:6d:81:58:ff:69:90:53:3c:f9:f3:e0:14:ec:
1a:1b:06:bf:26:a4:a0:72:ce:fe:07:1a:9d:9c:73:
40:97:1f:d4:b4:9c:32:34:0d:8f:7c:3f:9c:91:5e:
08:24:f0:31:6b:7d:1c:8b:0a:e2:0e:27:ca:c9:bd:
12:14:87:53:e0:f9:99:44:4d:7a:6e:15:e2:45:14:
75:a5:ac:24:b5:f7:30:4a:5e:1f:cd:2e:04:1f:f6:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:6E:68:EF:A9:7C:4C:EB:17:D4:AD:A7:B5:9E:BB:F8:B9:84:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b9163d-9ff3-4b4b-b5e9-fd40ca2056a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b9163d-9ff3-4b4b-b5e9-fd40ca2056a8/1/OJJuaO-pfEzrF9Stp7Weu_i5hKQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212997
Signature Algorithm: sha256WithRSAEncryption
21:e1:f8:15:2f:47:5f:c9:37:66:e1:9c:48:89:ba:f7:52:1d:
87:e4:4f:19:bd:3a:ab:38:c6:e6:f3:e1:83:b2:b8:86:3f:7d:
89:19:e5:44:04:cc:ca:1f:ef:bf:aa:1e:61:d3:a1:03:99:15:
98:36:62:ea:41:5e:59:dd:e5:e3:70:86:17:55:a1:d3:aa:c4:
69:29:ac:d7:66:f5:e7:01:b8:a9:de:ba:34:3c:d7:5a:05:1b:
1d:ff:8b:4c:d9:b0:19:76:7b:47:a7:97:0b:a5:d5:a0:df:5c:
53:3d:f1:e8:16:51:3c:3f:23:6d:fa:73:42:d0:16:95:df:bf:
c3:49:48:56:1a:62:5c:1c:2a:24:c4:09:31:3e:08:a1:db:2a:
b2:26:13:c1:9d:e0:2b:73:00:2a:ad:8b:87:bb:31:09:d9:2a:
b2:c5:d4:8e:4f:4c:04:60:f4:60:4e:24:a4:c9:c7:33:75:c8:
10:e9:82:09:e8:39:d5:fb:7d:41:1c:13:da:a5:45:27:8b:09:
dd:06:fc:c0:62:ea:90:55:a2:80:e1:cd:4e:91:d5:20:19:fb:
dd:8e:7b:8e:3e:ca:70:71:34:75:a3:c6:45:d4:81:3e:5d:80:
91:bb:60:00:31:e6:cd:65:13:33:5c:f3:cf:de:5c:4e:84:53:
05:39:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:33 2024 by rpki-client on console-ams.rpki-client.org