Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZF3KOAPEJuh4q7RoKutSSf5XBO4.cer
File: ZF3KOAPEJuh4q7RoKutSSf5XBO4.cer (raw, json)
Hash identifier: tByjYRLJvqv+Ikty7sdB3Urfza2PUV8IzuiIph8bibs=
Subject key identifier: 64:5D:CA:38:03:C4:26:E8:78:AB:B4:68:2A:EB:52:49:FE:57:04:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DD27BFB1B69AE9B192A5F88A77B00E034
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6f60d80d-fbc6-4d4e-a80a-7432661231c1/0/645DCA3803C426E878ABB4682AEB5249FE5704EE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6f60d80d-fbc6-4d4e-a80a-7432661231c1/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 22 Feb 2024 20:22:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48752
AS: 202197
Validation: Failed, certificate revoked on Sun 03 Mar 2024 20:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d2:7b:fb:1b:69:ae:9b:19:2a:5f:88:a7:7b:00:e0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 22 20:22:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=645dca3803c426e878abb4682aeb5249fe5704ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:74:7a:01:0b:c3:49:56:ab:ee:e6:86:de:
70:a8:f1:23:7b:aa:19:be:a5:bd:5e:00:3c:86:6c:
c3:02:95:d8:af:3c:f3:09:4a:cc:53:ce:43:51:f1:
b0:50:10:5e:4c:bf:4e:01:25:71:b3:69:a4:4d:57:
1c:26:f5:c0:4a:45:ed:ac:e5:0f:5b:ce:d0:21:b0:
96:39:04:fb:58:72:bb:8b:1d:7e:e1:aa:38:18:3a:
a2:50:63:20:17:3b:0e:9f:56:c7:fd:bd:b0:94:88:
7b:df:7e:a8:47:71:e1:eb:8b:82:59:af:c3:a7:82:
d6:be:7d:60:2f:8d:87:aa:e6:82:e1:4f:c2:da:f4:
50:a3:2f:ad:84:ca:b4:77:f7:df:84:64:df:be:be:
2f:df:ac:57:0e:4e:be:ea:a9:df:3d:d9:a4:84:f4:
b9:ff:f8:1c:3e:4a:32:03:56:69:c0:e0:00:af:9e:
b2:89:09:bc:29:c6:02:af:50:30:1f:74:c1:4d:ff:
cf:d0:bd:11:68:79:93:3f:88:89:84:6a:9f:51:05:
e4:ff:24:10:77:25:dd:0e:5c:91:0b:71:dc:e1:fd:
af:e8:ca:46:54:d7:5a:fa:6e:22:87:9e:9f:ef:c2:
1c:e8:ad:12:4c:88:ba:7a:55:99:75:d7:04:bb:a0:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5D:CA:38:03:C4:26:E8:78:AB:B4:68:2A:EB:52:49:FE:57:04:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6f60d80d-fbc6-4d4e-a80a-7432661231c1/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6f60d80d-fbc6-4d4e-a80a-7432661231c1/0/645DCA3803C426E878ABB4682AEB5249FE5704EE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48752
202197
Signature Algorithm: sha256WithRSAEncryption
88:1e:d5:25:67:ca:f0:9d:bc:ae:0b:27:1e:b3:48:a3:0b:e7:
7f:7b:9e:6d:0e:4f:74:94:b4:33:84:0a:26:7a:5b:97:c7:fa:
1e:77:75:a6:67:c6:e7:e8:a7:54:4e:9c:83:53:d4:a9:46:f2:
13:70:d5:e3:51:8e:dd:87:9a:55:56:88:24:27:86:91:c3:65:
bb:de:e7:6c:47:c3:1f:23:73:ea:c9:83:44:7e:ec:60:a8:a6:
b7:cc:43:b1:64:ac:7f:81:a9:c7:11:e3:18:ee:5d:95:68:c5:
77:43:16:47:42:2c:43:4d:94:e5:e9:07:01:f8:ce:e9:84:45:
e1:99:24:c0:62:83:34:d0:9e:bf:01:7b:f8:35:d0:76:96:e1:
14:5c:8d:1a:b3:8b:c4:48:4d:56:98:a1:38:bf:7d:16:81:9c:
89:5f:29:17:a9:a2:fa:3c:e3:6f:83:aa:f1:83:37:9e:9b:3c:
1e:69:ca:e0:05:b8:ba:2d:f9:13:79:ae:bc:5c:7e:69:fa:d0:
65:e5:00:6a:a5:d4:aa:46:24:c1:41:5f:cf:da:0d:51:b7:c9:
6f:36:b7:2e:cf:8f:fa:09:31:41:1b:c3:68:10:87:0d:07:8c:
66:c3:ad:f0:ee:36:f3:cc:b1:c7:52:4a:36:07:15:98:41:b8:
bc:9e:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:22 2024 by rpki-client on console-fra.rpki-client.org