Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PB1w3-__wjRFgDiR9EAVjT4xtss.cer
File: PB1w3-__wjRFgDiR9EAVjT4xtss.cer (raw, json)
Hash identifier: YENR4jtuppBq0+MyCjNH9u1P+oKW2Ma7mym0krmvlgI=
Subject key identifier: 3C:1D:70:DF:EF:FF:C2:34:45:80:38:91:F4:40:15:8D:3E:31:B6:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2CC3432E16E5DC21D8311334146162A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/12/3C1D70DFEFFFC23445803891F440158D3E31B6CB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/12/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:13:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48717
Validation: Failed, certificate revoked on Wed 03 Jan 2024 16:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:cc:34:32:e1:6e:5d:c2:1d:83:11:33:41:46:16:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:13:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c1d70dfefffc23445803891f440158d3e31b6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:d7:24:f6:ca:e5:5d:97:28:48:bc:dd:9c:
bd:cb:1e:d1:6c:20:63:1c:74:c0:ee:88:07:91:42:
86:44:bc:7a:ab:29:6a:9c:01:ab:40:1e:0e:cc:8a:
71:be:11:98:09:59:78:2f:19:60:f0:8c:96:e3:bb:
aa:76:25:a5:fc:71:f6:31:c9:4d:89:a9:e5:4e:ff:
ba:b7:2f:67:3f:12:34:92:72:50:f7:0a:75:04:06:
86:f1:80:c0:8b:80:e3:3e:7f:b9:b5:c1:84:ae:35:
99:dc:66:e4:1b:55:f1:c8:ad:bf:98:31:6b:d0:bd:
0b:28:3c:f1:df:f6:4c:fb:fd:a5:6c:8c:6a:53:3a:
d2:5a:1a:53:e0:c6:28:74:ad:cc:83:bc:e7:65:9b:
be:7d:c2:d1:a1:a4:79:c0:db:2d:fc:2d:4c:54:88:
20:df:9c:56:13:37:32:4d:b5:5d:c6:00:9d:e8:0b:
15:79:c0:c3:c9:1c:d3:bc:35:02:54:bf:25:c6:3b:
12:4a:62:4a:83:e3:3a:6f:6b:98:08:eb:c3:67:49:
40:c1:f5:b8:c5:80:29:3f:c0:71:7c:ec:11:a7:c0:
ed:d8:af:4f:8d:22:2f:53:a4:e0:e9:ba:98:8c:66:
49:6a:c9:a2:57:a0:a1:71:c4:6e:1b:72:b4:fb:de:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1D:70:DF:EF:FF:C2:34:45:80:38:91:F4:40:15:8D:3E:31:B6:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/12
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/12/3C1D70DFEFFFC23445803891F440158D3E31B6CB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48717
Signature Algorithm: sha256WithRSAEncryption
b0:e0:4f:a0:db:3b:f8:3b:84:a9:dd:df:de:ee:85:07:82:a8:
ce:c8:d1:fb:b0:02:74:1c:9f:75:64:0c:63:00:68:9d:82:d7:
be:95:23:09:fa:fe:c6:04:f4:f1:8a:ea:7f:e7:a6:da:19:ed:
f0:00:b6:63:27:da:fa:ef:da:0c:fb:1a:57:0f:8b:3a:2d:a5:
97:04:48:9a:9b:d0:f5:b6:0b:2f:97:e7:90:91:7f:bc:c3:6d:
d3:e9:98:0b:af:77:1d:71:e4:f4:e0:30:ae:77:c4:d1:d1:72:
4f:cf:06:52:d6:8d:b2:f4:de:90:09:85:31:5f:1a:a6:a0:bc:
09:00:83:77:b9:b2:32:dd:60:2d:85:0c:d1:63:a3:70:73:91:
30:db:67:1f:76:39:84:52:fe:7b:0d:3f:87:7d:fa:cb:e6:06:
53:30:63:bb:d8:af:9e:58:4c:7f:81:34:52:25:e8:e5:c9:f6:
14:01:99:d6:a0:54:8e:f0:15:0c:a0:01:2d:1a:b0:f9:b3:a8:
b0:22:67:02:c5:07:64:ac:4b:38:b7:dc:60:3e:88:1a:db:25:
a9:df:28:17:3b:9a:c3:c2:15:ca:0b:dd:89:41:0f:8d:19:89:
ae:15:43:f0:95:8e:18:f6:94:d8:5f:8d:59:36:a6:73:a9:f7:
e3:a5:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:32:32 2025 by rpki-client