Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QbUCoW3jRY236DBZHyhB_ZSDxpo.cer
File: QbUCoW3jRY236DBZHyhB_ZSDxpo.cer (raw, json)
Hash identifier: e6WZXTOYkSkkZqst1CN5gkJBrmoK/x3EhAPZFQJaMr4=
Subject key identifier: 41:B5:02:A1:6D:E3:45:8D:B7:E8:30:59:1F:28:41:FD:94:83:C6:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018944DFCA6C4BCE4C64F3401D7289B1AE61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/QbUCoW3jRY236DBZHyhB_ZSDxpo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Jul 2023 12:14:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 60233
Validation: Failed, certificate revoked on Thu 14 Dec 2023 11:54:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:df:ca:6c:4b:ce:4c:64:f3:40:1d:72:89:b1:ae:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 11 12:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41b502a16de3458db7e830591f2841fd9483c69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:f9:9d:fd:fc:a5:01:66:b5:b2:e7:70:15:
9b:9f:09:2f:89:39:0e:5e:7f:c2:3b:a3:81:bd:26:
e1:45:06:21:1f:cb:6a:b4:c4:a5:cc:43:79:c0:72:
a0:9e:f3:92:a0:bb:3a:70:a5:80:d2:13:da:6f:cf:
48:3c:e7:b7:b5:61:eb:51:3c:b6:fb:dc:d1:fa:1a:
fe:d2:fb:8e:07:24:e8:63:90:c9:9c:c5:fc:de:0b:
e8:c5:5d:4e:52:bc:80:0d:0f:3a:ae:fa:e9:a7:c6:
2b:9d:15:46:4b:bf:dd:51:43:ff:c0:5c:e6:e7:36:
48:12:73:3c:03:ea:c9:1e:d8:52:2d:07:fe:61:b3:
56:8c:57:2a:c4:62:9b:58:52:b3:ba:a6:aa:94:5a:
6b:17:a1:27:16:89:69:5d:00:96:5e:a4:51:5f:74:
6f:21:bf:72:e1:da:86:ce:21:de:31:8e:5c:cb:61:
71:e6:65:61:bc:04:fc:56:38:59:b6:92:72:6c:0e:
bb:75:fe:3c:b1:29:8b:ff:bb:c2:98:9a:40:f0:92:
b5:c8:54:a5:db:ce:d4:2a:e8:97:75:6c:88:61:15:
b8:83:ba:65:7a:b8:23:16:4c:4c:bc:9f:93:7e:a9:
b6:d8:73:8c:70:1f:ef:cf:93:4a:d5:c0:cf:86:31:
e5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B5:02:A1:6D:E3:45:8D:B7:E8:30:59:1F:28:41:FD:94:83:C6:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/QbUCoW3jRY236DBZHyhB_ZSDxpo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60233
Signature Algorithm: sha256WithRSAEncryption
7c:2a:78:49:d2:08:ce:73:95:73:87:0b:c9:f8:dd:22:13:d8:
af:b3:45:a7:5d:5d:8a:18:77:df:bf:d1:c4:10:07:a9:9d:25:
8b:07:d0:ee:69:c1:55:bd:20:6f:a2:99:44:36:d6:dc:82:3f:
e2:13:a5:f8:04:1d:a3:dd:b6:28:44:0f:da:89:92:fa:49:d6:
3d:d1:4d:6f:f3:31:91:ac:bb:93:23:f9:6a:1c:2c:26:de:58:
75:92:3b:5c:97:79:10:6a:c3:8b:94:68:33:3a:3e:24:a1:69:
d7:93:14:fd:69:81:cc:de:00:82:ad:d2:8e:3f:63:83:ca:f5:
31:00:9a:fa:c3:09:74:a0:60:29:e1:df:f3:3b:02:21:c8:3a:
18:e1:70:84:49:72:dd:3e:2b:41:ae:41:f9:55:ed:37:ec:0e:
85:5e:4b:d5:b2:a8:d9:0e:8f:8d:08:e1:15:93:eb:48:c4:31:
0c:c6:2f:95:d5:be:5f:21:21:3c:e9:42:a4:d4:00:93:e8:e2:
20:1d:54:bd:a2:8d:ac:62:8a:b0:f1:d2:6f:ba:95:25:a7:91:
3a:53:6a:1a:9d:43:07:cf:59:7b:8d:62:81:c5:32:cc:81:b0:
31:e3:f8:95:ca:1d:3e:b6:a0:b3:8e:5a:ca:19:8b:86:52:c7:
0c:0f:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-fra.rpki-client.org