
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vca5ob2tmXLrea3PdqEmTG83zo4.cer
File: Vca5ob2tmXLrea3PdqEmTG83zo4.cer (raw, json)
Hash identifier: DRnaFVwZByLX0tpRb+c4qSZIrEs8YHVsGxSbNq0KVGE=
Subject key identifier: 55:C6:B9:A1:BD:AD:99:72:EB:79:AD:CF:76:A1:26:4C:6F:37:CE:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEA8275566FF7EB731DCDC5FA4FB08
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/0da540-510e-4172-bd73-134a6fd99931/1/Vca5ob2tmXLrea3PdqEmTG83zo4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/0da540-510e-4172-bd73-134a6fd99931/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207860
Validation: Failed, certificate revoked on Thu 08 Feb 2024 11:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a8:27:55:66:ff:7e:b7:31:dc:dc:5f:a4:fb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55c6b9a1bdad9972eb79adcf76a1264c6f37ce8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ef:e5:af:4a:61:c9:a2:15:ce:bc:22:51:68:
83:1c:47:40:65:0e:55:1a:ba:50:69:bc:ec:ef:96:
d3:9b:f3:77:5b:d2:d9:fe:f7:a3:bd:64:d0:cc:66:
e9:a2:b5:68:e9:1c:e9:cc:3d:f2:d1:9e:a0:e3:4d:
6f:07:09:51:0d:37:7c:d4:fb:6c:b6:fe:2d:ae:70:
2f:d4:7e:ea:5d:af:3a:56:5b:d8:96:04:75:0f:e1:
9e:aa:f3:e3:3d:07:45:db:c0:77:c7:62:b3:e8:7d:
fa:66:41:c6:ab:c4:bb:27:7c:1f:0d:8e:ee:d7:3e:
70:ad:27:b3:24:66:46:68:70:19:36:18:63:f4:84:
46:59:70:86:82:27:92:20:04:e2:c1:03:00:56:da:
85:c0:cf:de:db:03:c2:19:53:21:a6:6e:ab:c9:bb:
97:53:80:7c:fe:43:f5:1b:84:22:ab:3c:01:42:11:
8e:b1:69:38:6c:3c:1f:2c:6e:04:09:ef:81:b4:9e:
fd:42:12:a0:e5:fc:3a:85:47:c6:bb:6a:b5:a2:07:
d3:2f:80:fa:a2:ba:10:7f:a3:5c:96:5a:43:e0:b7:
45:ab:18:e1:7c:92:58:90:16:0f:90:6e:ea:b6:2f:
2e:cf:4d:3a:c6:12:93:7e:79:4c:fa:b9:a5:d1:97:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C6:B9:A1:BD:AD:99:72:EB:79:AD:CF:76:A1:26:4C:6F:37:CE:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0da540-510e-4172-bd73-134a6fd99931/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0da540-510e-4172-bd73-134a6fd99931/1/Vca5ob2tmXLrea3PdqEmTG83zo4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207860
Signature Algorithm: sha256WithRSAEncryption
8b:4a:3c:bb:59:b8:f9:4d:32:ea:db:48:4a:2c:86:16:ea:10:
4e:91:65:1b:1f:28:09:7a:44:94:de:c3:e4:91:6e:1f:92:be:
a3:2f:6b:18:8c:31:85:67:83:b1:dc:4b:aa:20:aa:ba:19:7c:
b1:b9:76:d4:76:0b:ee:14:1c:7e:52:be:7d:7e:e7:3d:24:91:
fd:76:db:aa:8b:c7:01:8c:dd:6f:a7:f4:b4:3b:ff:f6:5f:0d:
e5:b7:c4:44:08:25:75:51:89:12:2c:ac:44:35:10:a9:75:85:
dc:08:cd:8a:5b:ee:be:7b:47:1a:e9:cd:9f:67:e7:ea:b5:d5:
c6:a4:79:e5:d8:fa:18:84:49:5c:04:a4:b9:51:30:3d:f1:0f:
39:06:68:a0:88:12:a7:5c:da:a3:b6:52:b8:f8:4e:6c:34:2c:
37:8f:56:db:54:a7:f2:36:ae:d7:79:eb:37:e8:e2:d2:f5:25:
e3:a9:2b:00:7b:8d:a6:3d:fd:e8:23:6e:f7:f2:10:9b:4e:98:
bf:17:9a:bb:45:f0:09:14:b8:b7:90:dc:87:36:b2:7d:2a:bc:
17:d4:a0:b4:ac:fe:e9:58:07:77:08:8b:e8:b4:80:5d:57:52:
c9:4a:a1:49:d4:62:bf:f5:bb:76:c5:8f:20:c3:05:50:c3:96:
50:2b:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:16:05 2025 by rpki-client