Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TbkEGSm3Bcgis4nKB-EGJII5W1o.cer
File: TbkEGSm3Bcgis4nKB-EGJII5W1o.cer (raw, json)
Hash identifier: OiL2uv9BIOMe/tR1CxrkckK71IAu+OA++XOD6GN6D00=
Subject key identifier: 4D:B9:04:19:29:B7:05:C8:22:B3:89:CA:07:E1:06:24:82:39:5B:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188EC7CD7961B5634D5457C222CDA3F5C7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/AS208328/0/4DB9041929B705C822B389CA07E1062482395B5A.mft
caRepository: rsync://rpki.co/repo/AS208328/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Sat 24 Jun 2023 08:19:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 208328
Validation: Failed, certificate revoked on Tue 28 Nov 2023 21:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ec:7c:d7:96:1b:56:34:d5:45:7c:22:2c:da:3f:5c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 24 08:19:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4db9041929b705c822b389ca07e1062482395b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:88:79:55:b3:c8:06:c2:ba:90:4e:f0:68:
7e:4c:f5:d1:49:b0:01:25:23:ca:a8:38:a7:4c:50:
d6:2e:a3:5c:d8:05:55:ab:dd:06:4a:9e:c2:60:d5:
1e:17:73:8f:1c:4f:cf:8b:2d:ab:23:7a:5a:4f:46:
b2:9a:51:dd:08:a2:f6:93:49:80:b2:9e:69:58:5e:
c8:80:e6:34:bd:06:e2:fe:10:88:f3:e3:34:db:55:
1f:54:1a:e1:4e:2a:19:58:ed:cd:9c:2f:37:0b:1e:
6b:f0:f8:68:0e:5d:fe:ee:b1:11:3d:b8:c3:84:85:
f5:f4:0b:ea:8f:49:aa:fb:4d:c9:c7:63:91:56:21:
5a:a0:0f:55:8a:bb:71:68:6a:69:48:cc:2a:9c:ee:
20:e5:b6:df:96:54:d3:60:63:ac:f6:e3:db:5b:76:
4f:e7:45:39:a0:ae:a6:b7:6a:b5:93:ce:27:ed:18:
43:eb:90:4d:76:72:91:f9:ac:6d:60:53:27:7b:5e:
58:9a:e8:3d:44:d1:4e:d3:0b:f9:f4:39:2f:3a:fb:
4b:9e:10:15:a6:9b:ec:11:2d:f7:0d:8c:64:24:23:
c8:7d:ff:4a:16:28:28:45:e4:e8:c7:4a:e0:cb:f4:
8e:e3:5b:54:45:d5:d6:ad:e5:6d:cf:57:fc:e7:b7:
32:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:04:19:29:B7:05:C8:22:B3:89:CA:07:E1:06:24:82:39:5B:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS208328/0/
RPKI Manifest - URI:rsync://rpki.co/repo/AS208328/0/4DB9041929B705C822B389CA07E1062482395B5A.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208328
Signature Algorithm: sha256WithRSAEncryption
24:43:df:46:c0:fc:b1:fc:1d:04:9e:da:93:41:38:fa:c8:1a:
89:b1:5c:3e:80:b1:3e:18:e1:dc:3c:d4:f4:85:81:db:2e:50:
a7:c2:bd:a7:cf:c1:ec:15:6c:da:d8:bd:d6:f7:34:13:f8:98:
a2:95:8d:34:4f:67:1b:ed:e7:e2:83:32:84:41:80:e8:9c:a3:
75:0c:1e:2e:f5:37:59:59:cf:8b:95:e7:f8:ab:8a:5c:5b:38:
03:31:ef:e3:7d:ee:a7:33:dc:36:3c:16:78:89:63:e4:75:ed:
43:d6:1b:65:e5:5d:44:14:c1:7f:1c:c1:ff:8f:26:e3:74:30:
14:f1:f4:cf:f7:fb:6b:23:d6:d0:5a:d1:03:d0:74:c3:a1:88:
23:3f:02:d3:c9:97:85:4a:c3:5a:bd:bb:8a:2f:d1:ea:ba:bc:
bf:42:56:31:d2:42:c5:21:06:4f:91:50:c1:30:ab:8e:42:dc:
a1:b1:a8:94:8c:99:61:a5:02:db:7a:f3:75:21:93:2a:b3:77:
26:0c:4c:22:e0:05:30:c8:ca:53:8a:ff:39:4d:b9:31:15:e1:
bc:3c:2e:54:cc:7c:6c:9b:73:73:fd:36:c5:d8:e6:38:3a:de:
38:69:57:af:ca:88:31:4f:23:fa:88:ae:b7:75:87:dd:e9:7e:
ca:f3:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-fra.rpki-client.org