Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y2OvmufUdL6nSEsTGnefS3QEe7g.cer
File: Y2OvmufUdL6nSEsTGnefS3QEe7g.cer (raw, json)
Hash identifier: 3LcNMINtMA259qGnNS5tXiGXpxz13SkTQDdPJ3SO1C0=
Subject key identifier: 63:63:AF:9A:E7:D4:74:BE:A7:48:4B:13:1A:77:9F:4B:74:04:7B:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAC9E23E086EA83B76BD66D729041DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0faaf-a25d-4c05-b95a-052e4fce991c/1/Y2OvmufUdL6nSEsTGnefS3QEe7g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0faaf-a25d-4c05-b95a-052e4fce991c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 208884
Validation: Failed, certificate revoked on Wed 26 Apr 2023 13:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ac:9e:23:e0:86:ea:83:b7:6b:d6:6d:72:90:41:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6363af9ae7d474bea7484b131a779f4b74047bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:ed:c5:11:22:c5:1d:5c:a4:e1:8a:40:e3:
70:d6:5e:d8:ec:35:9d:9c:51:5f:20:90:1d:97:5d:
b1:25:4b:36:81:9c:6f:1e:01:e3:67:42:42:c2:1d:
1b:08:db:1d:ed:1f:7f:38:da:71:88:c5:bf:75:6d:
f4:66:3c:b2:ef:44:8d:f7:fe:fa:ae:d4:78:64:3b:
b0:62:a5:f1:1b:f1:fd:fc:43:26:52:c4:e1:b6:38:
9e:0e:b5:39:c9:a7:05:b5:be:e0:41:22:2b:a9:19:
6c:d7:d8:32:0f:4d:87:95:2b:50:d0:4d:3f:b4:b2:
db:4d:99:58:d5:4e:b6:c6:f8:ed:6d:1b:a8:22:e8:
9d:ff:ea:33:18:14:1a:08:2b:bf:24:c8:76:51:3b:
06:bd:8f:5f:0c:c9:8c:17:12:df:72:94:96:53:3e:
0b:19:8d:e5:cb:74:dc:f7:bd:7b:f1:65:d0:48:ed:
62:8f:bd:7f:30:5e:42:3a:a8:60:02:24:ba:b5:aa:
15:4b:cd:a7:11:a9:a7:ec:c8:50:a7:b5:57:12:78:
90:4f:b5:f6:5f:dd:71:23:49:24:39:e6:a9:82:35:
ef:57:db:f6:b3:2b:bf:a1:12:e6:b1:f7:96:e0:99:
72:b2:aa:4f:6a:47:40:53:9e:06:cc:73:98:9c:a8:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:63:AF:9A:E7:D4:74:BE:A7:48:4B:13:1A:77:9F:4B:74:04:7B:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0faaf-a25d-4c05-b95a-052e4fce991c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0faaf-a25d-4c05-b95a-052e4fce991c/1/Y2OvmufUdL6nSEsTGnefS3QEe7g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208884
Signature Algorithm: sha256WithRSAEncryption
4d:ea:62:33:83:f8:07:32:62:45:d6:13:cf:cf:71:8b:a7:17:
55:24:96:02:dd:9a:4d:29:e4:4d:2e:71:49:7d:86:4a:fd:28:
a2:7b:e2:8d:86:68:32:a3:2a:a5:96:02:31:dc:65:bc:04:34:
f2:14:04:8d:65:73:f7:9d:29:9c:db:fe:12:44:b3:2c:43:7f:
1f:72:d1:e2:89:9e:4b:28:52:30:2b:77:3d:2f:c3:09:d4:76:
84:c5:6d:4a:a5:4c:1e:fa:3a:ef:33:f7:f7:25:c1:1c:6e:a0:
14:89:da:a4:33:fb:b6:ea:96:5e:c4:bd:06:ca:2a:60:a1:89:
b0:7a:93:bc:d6:3c:c9:77:b4:67:a6:84:9e:3d:f4:1d:fe:00:
35:e3:24:8f:85:79:16:ff:31:73:8a:a8:11:21:83:03:f0:63:
b4:f4:03:55:d2:78:13:ff:18:9a:52:78:a1:59:ff:b4:b2:eb:
82:99:37:a8:0a:20:ca:08:1a:d2:4c:0c:f4:23:a9:ae:ef:9c:
16:25:e5:bd:4c:f3:a7:d4:41:1e:e6:36:67:29:36:02:05:d3:
e4:a1:e7:fd:79:0f:a8:d0:78:57:6d:6d:4e:89:60:4f:9f:17:
f0:61:84:f2:0b:8a:08:15:ff:94:27:da:58:b2:e8:02:72:22:
0d:e9:6e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:46 2024 by rpki-client on console-ams.rpki-client.org