Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V60J2cT2Ey7z1QOkRF-IvWMpVkA.cer
File: V60J2cT2Ey7z1QOkRF-IvWMpVkA.cer (raw, json)
Hash identifier: NtFsOA2ZpgYJRd3G3xb/8wEn/wEAyaJfc67ZxSw5A84=
Subject key identifier: 57:AD:09:D9:C4:F6:13:2E:F3:D5:03:A4:44:5F:88:BD:63:29:56:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01906910C46C51B608E3879444B6B1944845
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/23/57AD09D9C4F6132EF3D503A4445F88BD63295640.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/23/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 30 Jun 2024 12:13:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216373
Validation: Failed, certificate revoked on Sun 07 Jul 2024 18:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:10:c4:6c:51:b6:08:e3:87:94:44:b6:b1:94:48:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 12:13:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57ad09d9c4f6132ef3d503a4445f88bd63295640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:89:9d:cc:d9:69:5a:8d:da:5a:f5:33:ff:c7:
49:ca:8e:56:70:38:e8:82:45:63:71:1d:6e:f4:00:
ee:36:5a:8c:44:f6:f3:13:65:12:88:e6:90:87:78:
d4:89:e9:b7:17:19:9f:83:cd:4e:7f:5f:b5:6b:ba:
f5:dc:02:f1:a1:34:d5:db:46:c5:8b:5c:45:11:b6:
fd:2c:f6:3f:c1:4a:a6:3d:0f:b9:44:78:a1:a5:e2:
97:72:2a:cb:eb:91:b8:ac:10:8b:ba:38:60:53:6d:
d0:c4:dd:0b:fd:b9:18:13:23:d9:dc:34:28:f8:ac:
74:70:e5:40:fc:1f:b5:c0:fc:9e:1f:e2:be:4d:d5:
e7:5e:49:42:6a:15:03:99:30:1a:88:ff:d2:db:d2:
52:61:75:14:2e:c6:24:f4:8b:b1:54:1d:9f:cd:cb:
5a:c5:13:fd:52:71:46:b5:73:e9:c2:c8:00:c3:b0:
e2:0c:41:07:a4:60:35:f8:bd:e4:84:4f:f7:4b:30:
73:2b:6d:57:97:1e:b7:b7:d6:99:d6:fa:ae:bc:19:
d4:a3:08:7e:d7:71:b5:17:65:cb:52:7c:53:42:c7:
65:cd:5a:96:c1:7d:84:a5:0f:cb:99:9c:9e:87:d0:
17:78:42:f3:6c:8e:d4:b2:b5:3d:58:92:eb:7d:3c:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AD:09:D9:C4:F6:13:2E:F3:D5:03:A4:44:5F:88:BD:63:29:56:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/23/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/23/57AD09D9C4F6132EF3D503A4445F88BD63295640.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216373
Signature Algorithm: sha256WithRSAEncryption
4b:77:a5:02:16:e1:2a:be:a3:0c:90:72:b2:51:01:8f:63:89:
80:d9:bc:e1:0a:2f:12:c3:e8:45:de:a7:77:91:5f:ee:f0:ac:
86:31:dc:30:9c:b7:7c:73:32:e7:80:fa:b3:ce:44:7b:ec:08:
14:b1:0a:6b:df:1f:1d:8c:8a:b2:84:7a:bd:b7:bc:d1:4e:da:
f8:19:a1:c5:ba:59:48:98:a7:8e:10:86:f4:bc:20:dd:f8:21:
60:0a:2b:5a:73:eb:e6:ff:99:e8:5c:2c:d4:f1:80:bf:2e:ab:
74:e3:ee:1f:dd:e4:a1:c6:29:c6:35:4e:9f:42:89:86:1b:b1:
e4:44:68:94:14:31:c7:8a:45:03:e8:8f:a7:3c:e4:3f:42:49:
4c:84:00:82:e7:2c:e6:5b:e6:33:d7:8b:96:94:33:81:9c:91:
a7:3e:f3:9e:39:9b:45:dd:b6:e2:57:dc:4c:4d:6a:2a:5c:5f:
ba:aa:60:39:4f:cb:ee:0b:a9:d5:16:42:15:52:ed:9c:6e:48:
8a:6f:78:8f:f9:a2:16:79:dd:79:2a:3d:1e:ae:5e:36:f0:3c:
0a:2c:7e:f1:ba:70:65:be:1f:40:19:d7:38:d0:8e:c0:9d:eb:
52:8f:77:dc:f6:49:19:a5:3c:93:37:18:95:e5:03:eb:fe:e3:
86:a6:38:ff
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAZBpEMRsUbYI44eURLaxlEhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjMwMTIxMzQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2FkMDlkOWM0ZjYxMzJlZjNkNTAzYTQ0NDVmODhiZDYzMjk1NjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA94mdzNlpWo3aWvUz/8dJyo5WcDjo
gkVjcR1u9ADuNlqMRPbzE2USiOaQh3jUiem3Fxmfg81Of1+1a7r13ALxoTTV20bF
i1xFEbb9LPY/wUqmPQ+5RHihpeKXcirL65G4rBCLujhgU23QxN0L/bkYEyPZ3DQo
+Kx0cOVA/B+1wPyeH+K+TdXnXklCahUDmTAaiP/S29JSYXUULsYk9IuxVB2fzcta
xRP9UnFGtXPpwsgAw7DiDEEHpGA1+L3khE/3SzBzK21Xlx63t9aZ1vquvBnUowh+
13G1F2XLUnxTQsdlzVqWwX2EpQ/LmZyeh9AXeELzbI7UsrU9WJLrfTx5YwIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFFetCdnE9hMu89UDpERfiL1jKVZAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFCBggrBgEFBQcBCwSCATQwggEwMGAGCCsGAQUFBzAFhlRy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgz
N2ZiLTYzOTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi8yMy8wgY0GCCsGAQUFBzAK
hoGAcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9k
ZGU4MzdmYi02MzkwLTQxYjUtODJhMC1mMGQwMmMwM2EyYzYvMjMvNTdBRDA5RDlD
NEY2MTMyRUYzRDUwM0E0NDQ1Rjg4QkQ2MzI5NTY0MC5tZnQwPAYIKwYBBQUHMA2G
MGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMD
TTUwDQYJKoZIhvcNAQELBQADggEBAEt3pQIW4Sq+owyQcrJRAY9jiYDZvOEKLxLD
6EXep3eRX+7wrIYx3DCct3xzMueA+rPORHvsCBSxCmvfHx2MirKEer23vNFO2vgZ
ocW6WUiYp44QhvS8IN34IWAKK1pz6+b/mehcLNTxgL8uq3Tj7h/d5KHGKcY1Tp9C
iYYbseREaJQUMceKRQPoj6c85D9CSUyEAILnLOZb5jPXi5aUM4Gckac+8545m0Xd
tuJX3ExNaipcX7qqYDlPy+4LqdUWQhVS7ZxuSIpveI/5ohZ53XkqPR6uXjbwPAos
fvG6cGW+H0AZ1zjQjsCd61KPd9z2SRmlPJM3GJXlA+v+44amOP8=
-----END CERTIFICATE-----
Generated at Sun Jul 7 20:10:42 2024 by rpki-client on console-ams.rpki-client.org