Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aSXyY2UBOyua-9X-xx3dSHuB8I4.cer
File: aSXyY2UBOyua-9X-xx3dSHuB8I4.cer (raw, json)
Hash identifier: Am/8KZsVFdhldv8hDAAoYHeH9cY80RFrEBIte06R4Rw=
Subject key identifier: 69:25:F2:63:65:01:3B:2B:9A:FB:D5:FE:C7:1D:DD:48:7B:81:F0:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A433D3C6341AD55EA4CBE8C4F13DA5B1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/074b02-0f8a-4b2d-b34e-9ecb8c8d6239/1/aSXyY2UBOyua-9X-xx3dSHuB8I4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/074b02-0f8a-4b2d-b34e-9ecb8c8d6239/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Aug 2023 21:40:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 216389
Validation: Failed, certificate revoked on Wed 30 Aug 2023 09:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:3d:3c:63:41:ad:55:ea:4c:be:8c:4f:13:da:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 29 21:40:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6925f26365013b2b9afbd5fec71ddd487b81f08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:04:29:6d:ff:33:30:06:15:50:35:02:31:
8b:38:2e:bc:96:e7:64:90:0b:92:43:6f:91:4e:88:
e6:c9:e0:bb:28:4f:6d:34:68:a1:06:07:d8:b7:46:
96:ab:30:17:89:83:4e:df:82:d3:1b:fa:60:67:0b:
e4:a2:73:cf:2a:df:1e:31:98:f9:dd:07:ef:43:78:
95:a8:df:9a:ac:2f:c1:42:0f:45:df:0f:e4:1c:10:
18:9e:e3:3f:51:df:84:8f:49:65:a9:ff:44:d7:a3:
51:40:e5:61:67:e5:c3:cc:a0:44:2c:cc:c7:d5:ab:
9d:68:db:f3:7f:14:95:f4:99:50:9e:8a:12:e9:fa:
c5:8a:a9:b3:7b:77:78:58:be:08:da:e5:81:08:30:
69:cb:15:1a:cd:ee:42:bb:54:cf:8e:ce:fe:03:8b:
a8:b5:a5:f3:97:3b:89:b6:16:dd:39:e8:3d:e0:ba:
65:fe:e6:1f:a7:1a:1b:3c:85:f5:27:62:09:75:2c:
2a:c1:8e:ed:7f:57:36:c1:e4:e2:cd:5f:c6:34:80:
4d:23:1b:4f:c8:73:39:76:2c:77:e2:bf:34:5e:26:
56:2b:80:55:2c:ad:32:11:75:77:31:36:77:7e:c4:
8b:55:6d:92:6b:8d:de:e9:0d:1d:89:26:21:6f:2b:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:25:F2:63:65:01:3B:2B:9A:FB:D5:FE:C7:1D:DD:48:7B:81:F0:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/074b02-0f8a-4b2d-b34e-9ecb8c8d6239/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/074b02-0f8a-4b2d-b34e-9ecb8c8d6239/1/aSXyY2UBOyua-9X-xx3dSHuB8I4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216389
Signature Algorithm: sha256WithRSAEncryption
17:1c:35:17:6d:c3:cc:aa:66:76:02:8a:92:db:88:67:0c:a9:
2c:67:85:57:37:05:43:1f:e4:e8:13:48:07:64:b2:28:51:98:
16:2f:98:60:2d:70:ce:34:be:36:f0:82:be:80:e4:26:f5:c3:
25:74:2f:ab:08:72:13:8c:80:e5:22:7b:3e:a1:b2:df:d9:e5:
87:d3:84:75:84:5c:9c:dd:76:25:6b:38:98:98:c3:75:fc:3a:
01:d3:08:0a:07:e9:38:49:66:cd:30:0e:6b:d9:5e:e8:e8:19:
bc:f1:46:1a:3d:7c:34:0e:d9:41:9f:a5:4c:ec:d9:27:65:d8:
cc:3f:85:59:8c:54:96:46:84:cd:db:18:32:5b:19:3c:38:b6:
26:75:82:58:6d:ba:b9:26:44:a3:a3:54:c4:54:0f:d1:c5:88:
af:a9:82:80:e5:7a:ca:a0:00:b3:6d:33:b8:7e:ac:82:6c:65:
42:9b:8e:24:a7:5d:3c:60:9a:b5:0e:68:e1:d2:eb:57:3b:08:
d5:f0:77:37:7f:98:ff:da:11:f5:f8:39:5e:c2:e8:3b:8a:b1:
1a:ca:10:10:ce:f4:3d:68:4e:3f:05:0a:07:23:8e:3a:d3:02:
09:60:2e:8f:9e:d5:ea:75:9f:e9:2f:3f:24:c5:6e:44:1c:23:
a1:83:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:08 2024 by rpki-client on console-fra.rpki-client.org