Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_FmVDknfiJhasHJyeDIMaE0gdL4.cer
File: _FmVDknfiJhasHJyeDIMaE0gdL4.cer (raw, json)
Hash identifier: rlD3kZxag++lntffFc/5Ojk+iI2rIZhe7H2T524QB/Y=
Subject key identifier: FC:59:95:0E:49:DF:88:98:5A:B0:72:72:78:32:0C:68:4D:20:74:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F2037FA35C58D42656D391473D887F392
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/FC59950E49DF88985AB0727278320C684D2074BE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 27 Apr 2024 15:41:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215190
AS: 215751
IP: 2a0b:4e00::/29
Validation: Failed, certificate revoked on Tue 11 Jun 2024 02:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:37:fa:35:c5:8d:42:65:6d:39:14:73:d8:87:f3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 27 15:41:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc59950e49df88985ab0727278320c684d2074be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:f2:e1:01:86:f1:09:10:6d:b5:ba:2e:a9:
a0:6b:2b:d9:bc:c2:e6:37:a4:34:11:87:80:b2:ca:
2b:8a:04:2e:ce:61:16:16:af:62:a3:e3:3e:c5:19:
9b:90:b3:7f:ff:a1:16:ba:c5:fa:7e:bb:63:58:b0:
05:6b:0b:f3:b1:0f:e7:63:9a:4f:17:08:00:3a:86:
8f:01:47:b4:1a:ed:39:c9:c7:b4:aa:05:fd:32:b1:
90:4f:88:25:7c:28:ff:aa:d2:6b:a9:a3:d8:7c:5c:
74:c4:f4:2e:e1:8e:1b:a8:46:9e:31:8a:52:7d:31:
9a:b6:9a:64:40:f1:0a:98:ed:54:a5:ab:e3:1e:57:
d7:69:b3:4e:17:87:91:8e:37:c3:e2:d0:13:4c:85:
1e:7b:a7:08:09:30:c4:c6:59:d6:25:85:3f:ea:00:
5a:2d:4f:f7:b3:b1:dd:2a:a1:9c:49:90:fd:6e:6b:
c8:86:c5:2d:38:b7:0c:16:cf:71:6e:b2:31:86:b2:
fb:1f:e8:89:67:25:a6:97:8b:7e:0d:4d:eb:64:c2:
01:22:51:6c:b0:c5:c6:53:15:be:eb:9d:ef:bf:a3:
98:6a:7b:56:5b:20:aa:bb:a9:8c:20:4c:3f:58:f8:
92:ca:0b:e8:e8:08:af:07:39:c2:6d:5b:74:b2:fa:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:59:95:0E:49:DF:88:98:5A:B0:72:72:78:32:0C:68:4D:20:74:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/FC59950E49DF88985AB0727278320C684D2074BE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215190
215751
Signature Algorithm: sha256WithRSAEncryption
4b:38:79:40:c3:57:15:c3:27:02:44:31:94:e4:7d:e4:b7:23:
a3:72:c3:1e:fc:47:3f:a3:00:96:95:6a:40:bd:ba:62:c1:a2:
62:c3:43:c9:c6:ae:fc:9b:e5:94:53:60:04:6d:a7:bd:c8:13:
ae:40:d6:91:c2:5d:29:29:ec:03:eb:a0:dc:81:82:2c:09:a5:
2d:3e:f4:35:d4:6d:40:bf:60:78:68:2a:5e:4c:b9:c8:f8:b4:
22:04:c5:5e:42:b7:27:2d:f4:30:33:72:56:31:03:2b:e7:23:
3f:9e:27:09:80:41:3d:75:06:9e:25:f7:56:39:6f:6f:a1:60:
6d:c7:e0:4e:13:12:3e:62:94:aa:ef:01:29:7e:79:0e:06:8c:
9b:87:b4:27:75:67:d1:72:53:4d:d9:6b:43:59:1b:52:7c:54:
a4:63:98:ac:20:5f:45:c8:4d:1a:b4:54:08:e6:85:c7:c1:c2:
9f:41:86:f7:32:6e:45:4d:e6:cc:18:95:d8:6b:f6:d3:74:ac:
b1:8d:af:f7:58:90:3a:50:1b:79:c4:0d:44:f2:80:6d:0b:e0:
cb:36:63:be:5e:bd:d4:3a:5f:ce:c4:41:73:c7:9d:ee:e3:1e:
7d:23:97:97:63:09:0b:59:e7:43:53:73:49:37:9e:cc:2a:1b:
b9:7c:39:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 05:06:49 2024 by rpki-client on console-fra.rpki-client.org