Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T0BINz9f27DsWeaqjjH0gqIL820.cer
File: T0BINz9f27DsWeaqjjH0gqIL820.cer (raw, json)
Hash identifier: LTPM9wZM91W/vSssnlpJa4bAVmmZRmxuDMsHyHaJFAM=
Subject key identifier: 4F:40:48:37:3F:5F:DB:B0:EC:59:E6:AA:8E:31:F4:82:A2:0B:F3:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018977D7A69767BFF49BBAEED439A3828423
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/931161-8fa9-4a99-9a6d-467cbcc3aa27/1/T0BINz9f27DsWeaqjjH0gqIL820.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/931161-8fa9-4a99-9a6d-467cbcc3aa27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 21 Jul 2023 09:46:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210631
AS: 211860
Validation: Failed, certificate revoked on Fri 21 Jul 2023 09:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:d7:a6:97:67:bf:f4:9b:ba:ee:d4:39:a3:82:84:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 21 09:46:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f4048373f5fdbb0ec59e6aa8e31f482a20bf36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:e4:37:0e:b3:4d:f3:01:42:5d:77:81:db:
d2:15:18:c7:bd:24:45:5a:92:df:c0:bb:53:e1:bc:
95:08:f3:7f:87:69:6f:2f:65:ca:76:e2:6d:4b:0a:
c7:b6:cb:d4:1c:f1:7c:cd:86:94:6e:a4:6a:0f:b2:
a8:57:93:48:3f:e4:39:b7:53:09:9b:0b:7f:9f:be:
10:97:8c:d3:31:12:7d:41:6d:8b:af:97:82:f9:4e:
47:ff:af:ea:82:e0:0e:17:92:b4:ca:7a:8f:26:94:
20:b4:e4:22:43:60:a5:83:b9:49:31:8e:37:e7:1e:
dd:64:73:c1:72:06:7f:2f:06:01:7c:4f:9d:91:66:
91:fd:a6:c3:49:1d:0f:db:98:33:a4:7c:fe:81:05:
7d:bf:de:4c:3e:db:bc:d1:68:47:b4:ff:da:f2:af:
cb:22:07:cf:59:bb:dc:5f:03:54:73:6c:3a:57:33:
33:54:4f:ac:c9:de:9b:ed:ca:9f:f1:1c:7a:c6:5a:
6c:60:48:4b:86:97:20:2a:61:23:e9:b6:c7:18:e8:
e4:df:a4:19:31:90:aa:cb:ca:16:8b:d7:40:3e:06:
7c:25:16:9d:25:de:39:07:7b:71:de:ff:57:ad:b3:
27:8c:20:9c:55:bb:05:4b:30:e7:7f:08:9b:ca:a0:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:40:48:37:3F:5F:DB:B0:EC:59:E6:AA:8E:31:F4:82:A2:0B:F3:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/931161-8fa9-4a99-9a6d-467cbcc3aa27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/931161-8fa9-4a99-9a6d-467cbcc3aa27/1/T0BINz9f27DsWeaqjjH0gqIL820.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210631
211860
Signature Algorithm: sha256WithRSAEncryption
2f:5f:42:e5:e0:02:b5:6f:88:73:f0:f9:a3:1d:a4:68:bc:5e:
51:8b:a4:f0:3e:d0:58:d4:4e:47:d2:93:0c:02:2f:29:ea:ce:
44:ec:87:96:22:d6:d5:bd:3e:24:d8:ce:1b:08:45:3a:70:27:
72:c8:4e:c1:1d:4f:72:dd:15:d2:50:e0:df:2f:16:2b:5c:4e:
fd:65:d2:69:1d:8d:bc:ac:38:a3:46:b5:e4:73:9f:b8:4e:b6:
cc:2a:c8:2a:e0:2d:1e:fe:eb:f2:62:fc:14:62:a3:e6:ee:93:
3e:c1:8d:05:54:3b:55:4c:59:6f:f0:00:77:74:49:ce:2b:29:
0f:9c:40:be:b7:93:8d:42:15:33:1a:1e:82:23:48:48:3c:fb:
fc:55:58:00:7e:f5:25:e6:61:d2:61:3f:3f:01:42:a5:e2:b9:
b3:d5:0d:ac:f7:df:fa:84:b7:ae:38:93:4a:6c:68:b1:1a:e4:
3a:83:05:fa:30:06:f6:c2:c3:0a:ad:82:54:e5:40:3f:79:71:
36:9c:33:ef:76:77:a4:60:e0:19:66:43:20:d4:25:95:10:ff:
64:8a:fe:38:24:fc:9d:44:bc:fa:91:80:7f:33:09:f1:1a:84:
2c:d7:11:d1:0f:dc:f8:03:e9:ed:e0:60:ce:f2:3c:77:d0:17:
6b:6c:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:03 2024 by rpki-client on console-ams.rpki-client.org