Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y8nXcI_0N5PF8PHa5uJh7_S3A0M.cer
File: Y8nXcI_0N5PF8PHa5uJh7_S3A0M.cer (raw, json)
Hash identifier: th7r40vKMYZ9Afnv5RJrigC/0+6NL7Etumm2mJb2z/E=
Subject key identifier: 63:C9:D7:70:8F:F4:37:93:C5:F0:F1:DA:E6:E2:61:EF:F4:B7:03:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0186986DDD4C40E595F2054633129AD1D32D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/46d936-96db-443f-8c83-9f287c4849a4/1/Y8nXcI_0N5PF8PHa5uJh7_S3A0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/46d936-96db-443f-8c83-9f287c4849a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Feb 2023 14:29:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 199691
Validation: Failed, certificate revoked on Fri 13 Oct 2023 11:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:6d:dd:4c:40:e5:95:f2:05:46:33:12:9a:d1:d3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 28 14:29:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63c9d7708ff43793c5f0f1dae6e261eff4b70343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:29:a2:46:13:dc:1a:95:41:d4:12:61:7f:
2d:85:c9:ca:d5:1a:b4:a3:83:4d:b2:06:d5:d8:dd:
d6:73:13:92:1b:60:2f:20:25:eb:34:9b:f1:8d:b2:
48:c2:16:fd:f2:8f:a3:36:7c:03:33:af:1d:57:58:
ad:54:90:0f:64:78:09:13:2a:72:c6:a3:1b:08:8f:
80:c5:6e:c9:10:bc:d7:ea:88:5a:ce:4f:9c:a7:b8:
c7:0f:8c:4d:95:c1:ed:27:cc:48:45:07:72:51:3e:
89:96:df:db:f4:5b:f3:1b:93:8c:2b:44:6e:45:53:
4e:5a:a0:5f:64:7c:52:0a:92:03:d1:38:db:64:88:
8a:5e:2d:dd:c5:4c:15:70:1e:de:0f:49:44:1a:58:
66:44:d3:87:da:16:b3:58:f4:be:f7:f6:25:cb:d0:
bc:82:13:31:11:70:69:93:97:6f:23:9a:c8:9b:1b:
6a:27:99:49:12:5c:27:68:73:f6:84:6c:53:6b:69:
a5:13:36:d5:61:29:7a:91:ef:12:07:81:b4:28:9b:
e2:29:e9:6d:00:70:ce:20:b0:4f:ad:0c:e2:c2:30:
20:3c:2a:e0:f4:fc:7f:6e:7d:45:8f:14:be:84:54:
85:02:0f:30:7a:63:f5:f8:09:70:5e:7d:7c:a5:1d:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C9:D7:70:8F:F4:37:93:C5:F0:F1:DA:E6:E2:61:EF:F4:B7:03:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/46d936-96db-443f-8c83-9f287c4849a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/46d936-96db-443f-8c83-9f287c4849a4/1/Y8nXcI_0N5PF8PHa5uJh7_S3A0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199691
Signature Algorithm: sha256WithRSAEncryption
a8:c1:d1:de:ca:49:de:f4:13:3b:4a:89:c4:1f:8c:3e:3d:ad:
6d:9d:82:41:10:3f:b5:5e:3e:53:78:11:d5:cf:ff:d3:e1:b9:
85:df:95:22:b7:21:0c:4d:97:ff:2f:bb:51:29:7a:75:d2:3a:
a2:a5:5a:85:86:b1:e4:c2:e2:cf:79:fa:28:28:6e:d3:53:ee:
d5:aa:12:fd:35:f8:98:44:89:e9:ed:62:a1:78:60:e9:1b:d5:
00:3d:7f:ec:41:9c:bc:f4:85:ec:ee:30:40:01:fa:87:06:24:
77:eb:be:27:df:4d:3e:14:b0:20:a8:9d:f5:e7:7a:1a:2d:d4:
bb:25:0d:bd:34:b5:99:56:30:5f:cb:ed:d1:83:cb:b9:ad:03:
40:24:5c:45:c0:b9:09:1e:02:b9:2f:f9:a3:76:d2:30:52:aa:
e8:15:5b:bc:53:6b:0c:53:34:91:6e:08:1b:de:73:8e:ed:2e:
ce:28:34:9d:41:07:8e:68:30:ec:7c:2d:1e:a8:5a:85:20:9c:
ad:b3:72:55:d6:15:10:bc:d8:61:91:22:90:85:c0:78:5f:ca:
6d:b6:ac:9b:48:32:f0:4e:ef:54:a8:1d:84:a4:ed:be:eb:11:
85:25:44:fd:b3:9c:75:6c:a8:2e:b4:1a:a2:bf:52:90:0d:61:
57:e7:5d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:05 2024 by rpki-client on console-fra.rpki-client.org