Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xc_QKPjKgTL-a5siGzQqtEko6kg.cer
File: Xc_QKPjKgTL-a5siGzQqtEko6kg.cer (raw, json)
Hash identifier: En66DGO5KZSavHL3biTAVzEhJ4hkadqdzDVSvvDMikQ=
Subject key identifier: 5D:CF:D0:28:F8:CA:81:32:FE:6B:9B:22:1B:34:2A:B4:49:28:EA:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191DBD2C7381F3D3D08419E42F7CCABA078
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7/5DCFD028F8CA8132FE6B9B221B342AB44928EA48.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 10 Sep 2024 12:05:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198980
Validation: Failed, certificate revoked on Wed 11 Sep 2024 08:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:d2:c7:38:1f:3d:3d:08:41:9e:42:f7:cc:ab:a0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 12:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dcfd028f8ca8132fe6b9b221b342ab44928ea48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:3c:e1:72:2b:e6:fc:4c:13:3a:ec:3f:a8:
ba:50:61:5a:2f:02:75:cf:cb:a7:f6:5e:e3:3f:82:
05:97:43:dd:21:b7:82:95:63:cd:5e:2c:6e:3a:c1:
e6:50:7b:6a:27:47:b1:ea:ff:cb:5d:94:39:2f:37:
5d:e3:cc:30:84:93:fd:a9:54:ca:ec:43:4a:d5:14:
af:6e:4e:07:6d:85:c3:2e:59:a5:7f:35:8d:40:fc:
05:f6:37:dc:9e:41:e9:0b:8e:71:60:1f:53:72:df:
16:40:eb:79:85:b6:94:f6:24:1e:2e:1d:95:0c:51:
f5:8a:f7:32:36:8e:f5:a2:9b:9e:a7:56:b1:d4:51:
1d:00:a6:38:a1:30:8c:80:46:99:4d:d5:45:46:eb:
80:17:b1:51:5b:4c:ef:40:7a:6b:a7:c0:db:4a:d0:
07:02:5b:98:9d:0f:81:53:ce:1e:15:6a:8e:0c:fd:
77:58:ec:31:d1:98:f8:d6:35:33:17:e3:67:7d:ff:
de:ea:4a:4b:d3:89:ad:ab:7a:84:86:f4:2c:00:b0:
5d:1f:14:53:a3:9c:26:91:2d:a7:cc:e9:7d:d0:25:
c2:ae:62:58:19:fa:8d:df:63:cc:86:b9:2a:85:34:
07:55:4e:13:51:ce:78:57:28:a1:ec:c9:7e:12:7b:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CF:D0:28:F8:CA:81:32:FE:6B:9B:22:1B:34:2A:B4:49:28:EA:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7/5DCFD028F8CA8132FE6B9B221B342AB44928EA48.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198980
Signature Algorithm: sha256WithRSAEncryption
02:34:92:36:1f:35:0f:04:72:0c:bc:95:a4:14:9e:e9:5f:5e:
b4:f8:ed:a0:06:84:4c:51:98:00:68:87:97:ea:17:f0:48:95:
01:4c:ae:2f:ef:77:53:b8:47:80:10:6c:fc:42:14:80:bd:f9:
1f:9d:dc:5e:4b:fd:16:08:cc:eb:36:fa:27:5e:52:ec:7b:3e:
ce:54:ef:8e:66:8b:94:79:cc:04:26:67:ca:ae:e3:7f:8d:63:
c3:b8:e7:f0:31:00:90:79:79:68:60:b1:aa:24:ca:df:e4:88:
29:54:d4:6a:76:a2:fe:ec:0e:cf:7c:ce:10:19:f1:19:b3:d5:
ae:3b:fe:e9:a3:3b:45:e9:c2:93:9d:2d:cb:af:18:6b:2f:f6:
be:15:dd:12:5b:58:96:7b:09:ab:b9:ff:ab:d1:83:21:b0:59:
fd:9e:48:ce:cc:c1:13:fe:fa:fd:81:3d:26:a1:97:fd:92:65:
79:1a:0f:78:b7:f8:20:7c:1a:82:9f:fe:7f:c7:90:c4:30:11:
c2:b2:cb:40:c6:4f:45:c1:50:12:9d:9e:e4:95:bb:e9:c4:49:
03:a5:eb:f0:8b:67:69:5a:5e:59:55:81:0b:83:4a:be:57:1f:
dc:87:5b:9a:e2:a0:ee:1c:59:35:a2:43:48:cb:0a:35:10:cb:
24:49:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 09:55:36 2024 by rpki-client on console-fra.rpki-client.org