Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SnI-G8ecdxt7N8R4rkzhCBTdkSc.cer
File: SnI-G8ecdxt7N8R4rkzhCBTdkSc.cer (raw, json)
Hash identifier: ViN1aaWcNtqOxY2nIJnwStWT5nD87zfgPkgZeV9bewE=
Subject key identifier: 4A:72:3E:1B:C7:9C:77:1B:7B:37:C4:78:AE:4C:E1:08:14:DD:91:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193223069B7D3966FF0D3CB15F9BF1D7932
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/dbe13c-283a-4348-b84f-9a2ed5b7b547/1/SnI-G8ecdxt7N8R4rkzhCBTdkSc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/dbe13c-283a-4348-b84f-9a2ed5b7b547/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 12 Nov 2024 21:03:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213870
Validation: Failed, certificate revoked on Wed 13 Nov 2024 01:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:22:30:69:b7:d3:96:6f:f0:d3:cb:15:f9:bf:1d:79:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 12 21:03:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a723e1bc79c771b7b37c478ae4ce10814dd9127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:d9:6a:3f:e7:99:dc:bd:c1:14:fd:5d:cd:
f0:fa:24:d5:c7:13:07:28:77:46:59:36:28:5b:f1:
de:54:d3:8d:1b:9f:39:32:07:e5:33:a2:93:02:0b:
2c:2f:fc:a8:33:e4:a5:cd:41:f5:2c:38:87:80:00:
1e:0d:9a:b1:34:09:e8:e3:3a:aa:e9:08:c4:cc:79:
4e:79:3a:9c:97:ae:ca:a8:e5:11:86:b1:8f:0b:5c:
17:84:72:a5:48:6a:5c:11:d9:b1:f0:54:2f:29:01:
3b:12:e3:f3:77:ec:a1:14:79:88:92:e5:98:ea:18:
8e:e4:a7:87:e2:0e:98:c8:ec:68:78:ec:fc:c1:49:
9c:3c:5c:b9:11:76:90:ee:05:d0:cf:7b:e4:83:44:
1a:e6:83:d6:9b:b6:32:6f:67:a4:60:67:92:36:90:
40:f5:02:ef:d2:94:aa:f7:ce:68:fc:51:ff:f2:9b:
1f:ef:9c:17:cf:5c:ce:13:65:b4:a7:3b:e8:fb:b4:
27:36:39:fc:0c:81:73:bb:72:2a:46:ca:be:7f:4d:
6a:3d:b5:d7:70:70:a9:40:6c:73:83:f2:1f:ea:0d:
81:aa:41:4a:e6:b3:5b:1a:5d:be:d2:3b:5b:2e:02:
da:f7:57:91:f4:6f:b0:5d:cf:0b:d8:71:a7:cd:7d:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:72:3E:1B:C7:9C:77:1B:7B:37:C4:78:AE:4C:E1:08:14:DD:91:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/dbe13c-283a-4348-b84f-9a2ed5b7b547/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/dbe13c-283a-4348-b84f-9a2ed5b7b547/1/SnI-G8ecdxt7N8R4rkzhCBTdkSc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213870
Signature Algorithm: sha256WithRSAEncryption
7e:35:45:d7:18:84:b7:c1:2a:f4:f3:4e:4c:06:f3:20:a1:f4:
63:21:55:a4:8f:2e:68:c6:ee:11:f0:93:5e:1d:e3:0b:61:1a:
2a:42:bb:90:b7:9d:d4:4e:4d:7f:88:2e:df:59:6a:58:d6:46:
91:23:d5:89:71:c0:4b:73:23:34:e4:1f:d7:5a:fd:89:69:88:
ea:ae:85:bc:4a:78:f8:4f:29:f3:f2:57:9a:9a:ef:c0:a8:60:
57:d5:43:c9:18:25:d5:20:fb:77:ab:c3:e5:e8:4d:af:6f:5d:
9b:e9:91:a3:ad:de:6a:3b:35:88:92:7e:d0:8d:2c:65:b2:91:
54:6b:aa:28:cc:aa:c6:c2:84:7b:33:19:71:14:4c:a9:78:92:
36:84:40:58:06:a6:83:d0:83:8c:75:e6:44:be:ab:e0:19:12:
eb:09:44:af:6b:33:7b:a4:86:e4:64:0a:42:5b:10:96:22:30:
37:5c:ba:96:df:ec:b0:e9:9e:25:88:2f:24:03:d2:33:0d:b1:
b1:33:c3:c1:ad:72:d9:dd:7e:ca:92:fe:5f:48:cb:a8:4e:3f:
72:a7:f8:b0:28:fd:61:74:05:2b:9c:89:1a:b5:0f:5d:7f:ba:
0f:b7:9e:da:8e:31:a3:a1:54:23:eb:26:68:ae:3b:30:9b:33:
e3:0c:f1:6b
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 13 04:47:59 2024 by rpki-client on console-fra.rpki-client.org