Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SmbmMr3TpeII8xWdY2XW1-APnls.cer
File: SmbmMr3TpeII8xWdY2XW1-APnls.cer (raw, json)
Hash identifier: /K6ZAPICmK2N4wfzhnHWphYkUuPBFrOVygiqn1WcANQ=
Subject key identifier: 4A:66:E6:32:BD:D3:A5:E2:08:F3:15:9D:63:65:D6:D7:E0:0F:9E:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193234AC7B21D83F8E7BE5EE00F02F69E12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c6b46ea2-c15d-4eaf-abfc-f93b0e824490/0/4A66E632BDD3A5E208F3159D6365D6D7E00F9E5B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c6b46ea2-c15d-4eaf-abfc-f93b0e824490/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 13 Nov 2024 02:12:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213870
Validation: Failed, certificate revoked on Wed 13 Nov 2024 10:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:23:4a:c7:b2:1d:83:f8:e7:be:5e:e0:0f:02:f6:9e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 13 02:12:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a66e632bdd3a5e208f3159d6365d6d7e00f9e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:16:be:7e:9d:06:a3:ff:fa:34:25:d4:d3:97:
02:a6:d2:5e:cc:08:d0:6c:b6:05:5c:9a:fc:1d:07:
4b:5a:b3:07:05:46:ce:9f:d5:bc:72:90:0b:ab:a6:
4b:c9:54:e2:6a:44:80:37:a3:7b:bc:74:98:63:6a:
7e:3f:5c:3b:5f:36:6f:d7:30:18:45:e4:eb:dd:5a:
2a:c9:e5:c2:4b:df:38:fd:97:2c:e2:c8:eb:a0:af:
46:ce:e5:e6:a7:e7:4b:17:00:98:2c:fa:62:49:ee:
2c:f3:d5:d5:eb:bd:92:1a:3c:f2:ac:e9:cc:7c:a2:
64:0c:6c:ed:08:c0:3b:c0:d3:b7:2f:21:fe:9a:7a:
b2:fb:2b:31:6d:d3:3e:64:7f:4a:0a:d2:e6:11:c8:
e2:8f:e8:89:8b:0c:73:ba:34:22:a1:b6:75:c3:67:
84:2e:1f:55:c4:93:95:d7:f3:bc:62:8a:93:d1:c5:
fa:4d:73:cf:12:95:ff:3d:9c:fe:14:46:31:29:95:
aa:23:fb:1b:76:56:df:0a:05:cb:84:d2:26:59:27:
f6:f1:9f:8e:35:61:d0:f9:a9:02:32:0c:b1:b6:8d:
43:3f:d4:35:24:01:c8:93:79:98:78:98:31:6c:6d:
7d:0a:0c:d0:79:ec:b6:7d:3e:2d:0f:75:8d:a9:08:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:E6:32:BD:D3:A5:E2:08:F3:15:9D:63:65:D6:D7:E0:0F:9E:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6b46ea2-c15d-4eaf-abfc-f93b0e824490/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6b46ea2-c15d-4eaf-abfc-f93b0e824490/0/4A66E632BDD3A5E208F3159D6365D6D7E00F9E5B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213870
Signature Algorithm: sha256WithRSAEncryption
a8:f2:07:dd:72:96:92:2a:38:b8:f5:b6:1e:ba:4a:7f:41:7e:
4b:93:3a:be:74:34:93:44:8e:b0:d9:de:80:e0:63:bc:de:c7:
4a:cb:fb:87:4f:6f:f0:1b:c3:c3:d2:9f:6e:03:4b:9d:8e:93:
82:1b:a0:65:e5:bd:e9:82:57:2d:40:be:67:1a:86:5b:bb:29:
c5:42:3c:d5:e3:69:f5:44:88:9a:f2:dd:e7:95:fb:14:aa:cd:
00:6e:ae:73:2b:53:3f:9b:94:63:a7:11:0a:e1:72:67:ba:e6:
0d:17:5b:7f:3e:56:0d:2b:8f:78:c6:bd:4b:8d:b9:c3:18:e0:
1f:08:ed:27:02:de:06:e2:7d:05:2e:c6:9d:8e:34:ff:52:94:
7c:0e:8c:82:0d:db:b5:3d:3f:5b:1f:04:e8:92:1c:ec:7d:ac:
77:e9:eb:a6:9e:c3:25:fe:47:3b:52:52:79:42:4a:f4:88:ee:
3f:e2:39:21:49:fe:ab:c0:9e:7e:10:ec:c7:4d:18:f2:8f:e6:
a0:57:c8:bb:8f:bc:13:ca:c8:07:aa:8b:de:dd:e1:1e:fd:a7:
3c:fc:dd:c9:ba:73:84:92:c0:b1:ed:c4:af:37:97:a0:bd:b7:
64:31:62:cf:bb:d6:e4:5b:33:ad:f3:39:6e:73:70:cf:1d:05:
20:c0:e0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:05 2025 by rpki-client