Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZFOra3fMvxhjn_Pr8mwjSMtOUNs.cer
File: ZFOra3fMvxhjn_Pr8mwjSMtOUNs.cer (raw, json)
Hash identifier: OJnkZOdgzqGmb6hvAkgKNVtmIm/Gpu0pAeDftvQoqnw=
Subject key identifier: 64:53:AB:6B:77:CC:BF:18:63:9F:F3:EB:F2:6C:23:48:CB:4E:50:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01906910FA401A88F9AC5017CE705EDA51B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/26/6453AB6B77CCBF18639FF3EBF26C2348CB4E50DB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/26/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 30 Jun 2024 12:13:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216141
Validation: Failed, certificate revoked on Sun 07 Jul 2024 18:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:10:fa:40:1a:88:f9:ac:50:17:ce:70:5e:da:51:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 12:13:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6453ab6b77ccbf18639ff3ebf26c2348cb4e50db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:af:ee:05:ab:b6:a3:e9:fc:6b:47:f4:50:
f3:74:7a:3a:6a:5a:e2:af:f1:00:97:05:c4:37:a2:
04:1d:ad:fa:16:3e:71:fd:f4:6a:52:31:a4:88:cd:
29:2c:73:d2:71:c3:98:45:eb:0d:b2:c7:11:ef:f1:
b2:1f:29:e0:9b:8b:45:c9:df:db:2a:62:f6:27:5a:
be:05:b4:3c:5e:4b:c2:34:12:2a:31:6d:38:a3:b6:
a5:89:32:71:46:16:f4:3b:e1:97:ea:f8:8d:66:fa:
d0:cd:a7:4f:07:09:78:7d:f7:5d:30:60:f8:af:87:
ba:7b:50:f7:a2:13:d4:ad:62:19:1f:60:97:d1:57:
9a:b9:ee:2a:fd:21:5d:a5:f2:1a:94:9b:b5:d8:20:
40:95:54:8d:30:2a:b6:19:a8:02:e8:7e:eb:1b:20:
02:0b:b5:29:a6:bf:4e:8b:c9:e8:14:7e:3c:72:ff:
e3:3d:b8:cc:0a:5f:47:bc:de:22:61:60:54:21:d2:
27:d9:82:71:ca:b6:92:78:39:25:27:38:9b:f9:b8:
b1:b4:95:23:d2:a3:33:2c:9c:3d:3a:67:13:1a:74:
b2:21:2e:b4:19:e7:13:ee:a8:4a:d4:78:f5:a0:9c:
da:e1:ee:07:de:85:12:8a:a5:09:19:cd:a3:eb:d6:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:53:AB:6B:77:CC:BF:18:63:9F:F3:EB:F2:6C:23:48:CB:4E:50:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/26/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/26/6453AB6B77CCBF18639FF3EBF26C2348CB4E50DB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216141
Signature Algorithm: sha256WithRSAEncryption
51:50:42:a1:ad:3c:3e:6f:cf:4e:bc:07:e0:f9:a2:6b:e2:20:
70:8f:24:cb:cd:ba:ac:e8:f1:83:cb:30:dd:74:ae:40:d3:93:
3e:0c:f9:25:e8:20:d8:a3:f0:31:b3:04:4d:5d:b0:2a:dc:c7:
19:7b:6a:fb:18:94:c0:d0:f6:ef:69:12:26:36:3d:21:fc:8b:
0d:1a:6a:f9:7c:db:2e:27:cb:63:7d:ad:13:0d:10:ab:77:72:
06:f7:03:25:97:a5:35:77:e3:4e:d6:5f:23:a7:a7:30:f6:a5:
71:c1:61:7b:79:bd:ab:b2:53:3c:78:34:ab:58:c8:01:f2:e4:
21:c6:db:33:d3:33:b7:23:a6:69:00:95:1e:9f:0f:bb:33:fd:
e4:1f:79:80:1a:64:27:36:0e:16:87:de:68:d8:11:dd:0c:fd:
84:41:8f:64:9c:83:61:9c:9c:64:14:4e:f7:95:28:d1:fb:61:
7a:d6:b2:d6:9c:33:0d:12:9e:c3:8b:19:3c:e2:8b:d6:da:4f:
d2:fa:5d:74:00:30:3c:09:f4:b7:3b:85:5b:f7:30:0f:b0:f7:
63:78:53:e0:8d:4a:e5:d6:f7:8c:45:eb:11:1b:1d:7e:ec:e5:
c4:da:ea:3c:df:bd:1a:08:fd:45:12:32:d9:ee:c7:e9:48:e4:
1c:09:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:10:42 2024 by rpki-client on console-ams.rpki-client.org