Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QkWTfGiXa22Vg4AvQtSn6HIlil0.cer
File: QkWTfGiXa22Vg4AvQtSn6HIlil0.cer (raw, json)
Hash identifier: BYBtXpzkmTGCJ9/wBC9ha/qie6h1pIlmbZS1ooOvMa8=
Subject key identifier: 42:45:93:7C:68:97:6B:6D:95:83:80:2F:42:D4:A7:E8:72:25:8A:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191DEC1AD5F1DFE5AECF30BC799138633DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/QkWTfGiXa22Vg4AvQtSn6HIlil0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Sep 2024 01:45:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208385
Validation: Failed, certificate revoked on Wed 06 Nov 2024 14:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:de:c1:ad:5f:1d:fe:5a:ec:f3:0b:c7:99:13:86:33:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 01:45:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4245937c68976b6d9583802f42d4a7e872258a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:30:86:5e:8f:2e:47:65:8c:da:ec:90:2e:
52:96:db:22:f5:f3:b3:60:56:6d:45:27:13:8a:cc:
6a:19:47:be:10:62:0c:02:2e:bb:3e:5d:75:59:ac:
c0:f9:fd:d1:1a:b7:db:64:c6:42:65:89:b4:6e:33:
61:85:a7:88:bc:d1:0b:7a:b3:e0:ae:0f:cc:2d:a2:
41:4e:e7:cd:a0:16:5a:28:1a:37:e9:a6:a9:fe:42:
28:16:ca:83:25:2d:52:d7:42:dc:16:d4:45:67:8a:
5f:b3:04:54:91:56:d2:6e:55:9f:df:65:93:f3:96:
18:ab:95:81:3b:37:92:87:eb:f0:89:ff:95:67:1c:
cd:2c:ba:34:b5:80:d2:b2:6b:a8:c0:9e:0a:55:ec:
a3:48:eb:f7:9b:27:52:f1:1e:13:67:41:3d:6a:c6:
5f:b4:cb:26:c8:d9:02:b8:93:12:7d:7d:9d:c5:37:
58:9b:e0:67:c1:35:a4:ff:6e:f2:fc:59:f5:5a:29:
d2:1e:a8:55:ae:91:eb:36:cf:28:48:55:a4:30:d3:
f3:4c:18:c9:55:aa:0d:73:2a:53:00:5e:f3:c5:a7:
e7:9c:18:57:68:d0:8e:c4:ec:40:02:e7:9c:18:a4:
c7:95:7e:7b:00:c4:b1:0f:4c:00:cc:c5:7a:d7:42:
82:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:45:93:7C:68:97:6B:6D:95:83:80:2F:42:D4:A7:E8:72:25:8A:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/QkWTfGiXa22Vg4AvQtSn6HIlil0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208385
Signature Algorithm: sha256WithRSAEncryption
b1:e3:8b:17:5e:26:25:3c:01:f2:23:59:6e:57:57:9d:d0:3d:
76:63:ee:89:d1:b6:a7:27:62:eb:b1:2a:97:52:b8:10:99:c0:
db:32:64:10:a1:3e:1e:71:a9:ae:1a:6a:c7:4d:fa:1d:94:fd:
ad:1a:fe:3f:a5:54:f0:c3:d2:99:29:73:4e:53:7d:1c:a8:bf:
84:1b:a7:eb:45:67:01:62:76:90:c7:c0:c4:e5:92:20:9c:11:
81:6a:94:c2:22:07:d4:c9:5a:a1:09:34:cd:8a:89:9f:8f:fa:
2e:da:c9:11:23:49:fa:fe:e8:23:e7:4e:aa:04:e9:14:cf:95:
61:d1:6e:0d:11:d6:8d:ee:c0:f0:8f:6c:b0:3d:af:2c:8d:d7:
8b:de:65:50:40:ff:d8:3c:95:76:8a:fc:5d:00:08:d7:2e:c8:
d7:29:fc:65:bf:31:89:9f:99:63:18:0f:38:6d:f4:16:e4:3b:
38:61:06:95:85:97:25:10:4b:4c:52:06:05:b6:1b:b8:ac:54:
97:7d:87:c4:65:ca:0c:e2:fc:2c:3a:75:ca:a9:d3:94:cc:12:
91:52:75:6e:49:7f:94:e6:d8:b2:4e:7e:c4:e3:d7:d5:a1:92:
d5:60:29:b1:97:d4:c0:27:74:20:35:9c:c5:f4:34:71:f8:33:
97:54:b3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:41 2025 by rpki-client