Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/URO9UdyLyX54fn3F_zFvvwYch_s.cer
File: URO9UdyLyX54fn3F_zFvvwYch_s.cer (raw, json)
Hash identifier: 1xJcJhFKRmXKpNzWqbVX07Zm3zLuRiO1kf8O4fTHLkQ=
Subject key identifier: 51:13:BD:51:DC:8B:C9:7E:78:7E:7D:C5:FF:31:6F:BF:06:1C:87:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B67598D1B75C9CE61C404C677A971B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ccf8-5a3f-463f-8069-4bb6f8d403a4/1/URO9UdyLyX54fn3F_zFvvwYch_s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ccf8-5a3f-463f-8069-4bb6f8d403a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211481
Validation: Failed, certificate revoked on Wed 14 Feb 2024 08:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:75:98:d1:b7:5c:9c:e6:1c:40:4c:67:7a:97:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5113bd51dc8bc97e787e7dc5ff316fbf061c87fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:76:ca:0d:c2:aa:c1:ca:95:76:6f:62:2e:
f3:f1:af:fe:d6:db:0b:30:ba:ba:69:9c:56:46:bf:
64:07:80:a3:4c:2e:95:7a:fc:13:b2:08:10:49:42:
1f:2d:d9:4c:99:b6:fb:c2:4f:fb:da:84:93:7a:0b:
7f:94:5f:5e:ab:89:61:8c:17:77:e7:59:3f:77:7d:
2a:a6:b1:8d:91:31:aa:f7:d6:d2:8a:9d:76:ce:c2:
34:da:bd:13:fa:72:19:53:23:ca:b1:60:6e:4a:b9:
5d:2a:bc:23:0e:31:de:34:5d:45:0e:78:0f:e7:10:
b7:48:52:fd:f8:3e:40:5d:4b:05:67:da:25:dc:1e:
bf:fc:6a:89:a1:56:a7:af:04:b4:aa:30:0e:43:50:
06:0c:69:75:71:43:1c:d2:6c:cb:06:9f:63:8e:b0:
39:a6:13:e4:50:48:50:2e:8d:e2:bf:d8:a6:a8:47:
a9:fd:10:de:20:87:a8:3c:e9:a6:9f:5d:09:3f:ae:
67:29:8b:f4:a9:28:a1:80:80:e6:3a:21:c8:93:eb:
78:ed:99:de:ff:c3:ff:8f:c4:fe:ea:c3:dc:89:7e:
61:df:b0:06:47:a7:b5:e6:c5:8d:5d:f7:fb:98:36:
7b:95:e9:2d:db:3c:3a:b7:0e:36:5d:e5:1a:f6:4e:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:13:BD:51:DC:8B:C9:7E:78:7E:7D:C5:FF:31:6F:BF:06:1C:87:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ccf8-5a3f-463f-8069-4bb6f8d403a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ccf8-5a3f-463f-8069-4bb6f8d403a4/1/URO9UdyLyX54fn3F_zFvvwYch_s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211481
Signature Algorithm: sha256WithRSAEncryption
5c:14:3f:6a:6b:ae:d5:05:b0:c5:8e:5c:31:08:ae:fa:de:73:
61:62:ec:96:d5:a1:62:0e:98:99:98:7a:1d:fa:41:2e:ca:93:
12:5e:e8:97:4f:69:9d:3f:c8:c6:fb:09:78:0f:8b:06:9a:fd:
50:40:bc:7a:22:be:5f:e2:f6:09:64:fd:be:9b:0e:d9:48:29:
f5:d0:52:37:c0:cf:a5:06:2a:ac:67:29:10:18:0d:60:5d:c9:
c8:19:12:3b:b6:59:ee:4e:e8:40:b5:df:c5:75:3b:b5:7e:85:
71:28:1e:ce:b5:e1:f3:c9:b0:38:b7:5e:c1:f8:c3:0a:db:27:
3f:db:f2:87:47:0a:d7:7b:7b:27:52:49:b5:6c:a7:ed:50:eb:
86:c4:32:6b:d4:32:00:9f:c9:4e:56:f6:e4:66:b1:d7:31:9e:
1f:07:ac:8f:07:24:de:d6:a7:2f:48:85:51:0e:b7:c0:0a:27:
33:bf:82:cb:c8:06:bd:58:93:98:f8:5e:6e:a0:ef:8a:62:62:
aa:12:10:23:2c:44:1b:c3:ff:ec:7e:57:a9:b8:3f:eb:ae:8b:
24:43:a1:5e:17:29:fb:3d:14:eb:b3:06:bf:8b:78:ab:5b:3d:
18:7a:a9:b5:30:b6:de:56:ba:d2:dc:45:3a:56:21:4b:fa:91:
31:91:ed:27
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzDtnWY0bdcnOYcQExnepcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTEzYmQ1MWRjOGJjOTdlNzg3ZTdkYzVmZjMxNmZiZjA2MWM4N2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Fx2yg3CqsHKlXZvYi7z8a/+1tsL
MLq6aZxWRr9kB4CjTC6VevwTsggQSUIfLdlMmbb7wk/72oSTegt/lF9eq4lhjBd3
51k/d30qprGNkTGq99bSip12zsI02r0T+nIZUyPKsWBuSrldKrwjDjHeNF1FDngP
5xC3SFL9+D5AXUsFZ9ol3B6//GqJoVanrwS0qjAOQ1AGDGl1cUMc0mzLBp9jjrA5
phPkUEhQLo3iv9imqEep/RDeIIeoPOmmn10JP65nKYv0qSihgIDmOiHIk+t47Zne
/8P/j8T+6sPciX5h37AGR6e15sWNXff7mDZ7lekt2zw6tw42XeUa9k6lJQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFETvVHci8l+eH59xf8xb78GHIf7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2Q5Y2Nm
OC01YTNmLTQ2M2YtODA2OS00YmI2ZjhkNDAzYTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvZDljY2Y4
LTVhM2YtNDYzZi04MDY5LTRiYjZmOGQ0MDNhNC8xL1VSTzlVZHlMeVg1NGZuM0Zf
ekZ2dndZY2hfcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM6GTANBgkqhkiG9w0BAQsFAAOCAQEAXBQ/amuu1QWw
xY5cMQiu+t5zYWLsltWhYg6YmZh6HfpBLsqTEl7ol09pnT/IxvsJeA+LBpr9UEC8
eiK+X+L2CWT9vpsO2Ugp9dBSN8DPpQYqrGcpEBgNYF3JyBkSO7ZZ7k7oQLXfxXU7
tX6FcSgezrXh88mwOLdewfjDCtsnP9vyh0cK13t7J1JJtWyn7VDrhsQya9QyAJ/J
Tlb25Gax1zGeHwesjwck3tanL0iFUQ63wAonM7+Cy8gGvViTmPhebqDvimJiqhIQ
IyxEG8P/7H5Xqbg/666LJEOhXhcp+z0U67MGv4t4q1s9GHqptTC23la60txFOlYh
S/qRMZHtJw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:31 2024 by rpki-client on console-ams.rpki-client.org