Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aWkPFbbH2Y0RJM78z33Hyu8URVk.cer
File: aWkPFbbH2Y0RJM78z33Hyu8URVk.cer (raw, json)
Hash identifier: 2cLYxkHnW5U9DCl2380AgFNhTpKFSqi+0KXc6Kc1J9A=
Subject key identifier: 69:69:0F:15:B6:C7:D9:8D:11:24:CE:FC:CF:7D:C7:CA:EF:14:45:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01906910E3D45E2A59B178AC0E6E7F5D14B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/24/69690F15B6C7D98D1124CEFCCF7DC7CAEF144559.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/24/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 30 Jun 2024 12:13:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216208
Validation: Failed, certificate revoked on Sun 07 Jul 2024 18:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:10:e3:d4:5e:2a:59:b1:78:ac:0e:6e:7f:5d:14:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 12:13:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69690f15b6c7d98d1124cefccf7dc7caef144559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:57:f9:ea:3f:1f:54:a9:22:a8:94:f4:d3:
9e:47:42:01:d2:71:25:0a:61:22:60:47:a5:80:c4:
e3:cb:12:60:47:1f:7b:49:89:43:9c:bb:a2:ce:05:
04:9e:1c:28:cb:8e:1f:01:a9:16:71:a9:7c:78:bd:
05:e1:a8:ce:35:c6:c0:8a:90:15:83:10:ea:08:e9:
5f:f5:bd:80:e3:3d:e4:31:83:b4:7b:a3:e5:15:c9:
9f:da:06:6d:96:62:c7:07:40:68:53:3a:e4:a3:a8:
80:e0:45:9d:31:e5:bd:21:2c:7c:d5:1f:34:40:df:
7a:21:9a:46:c5:ed:6f:1f:68:75:f5:5f:f8:14:8e:
65:3c:9c:fe:7b:1b:c7:db:f0:d9:e8:ff:e1:5a:2a:
b3:90:a8:9b:30:c0:d8:28:b3:68:60:dd:60:86:a2:
0a:18:b9:ac:85:8f:c2:68:83:7a:28:50:2f:14:c7:
fd:26:47:6b:e6:cb:c1:ce:af:a0:72:23:9b:02:88:
47:69:52:a0:14:a9:78:4b:82:89:33:80:cd:3a:bd:
85:3e:4f:91:65:e4:e7:2e:fe:d5:ab:e2:14:a3:1e:
01:11:d3:19:de:71:3c:61:2b:ca:ac:5c:bf:19:db:
97:72:09:d3:90:b7:e3:62:e3:bf:f5:37:e6:ec:07:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:0F:15:B6:C7:D9:8D:11:24:CE:FC:CF:7D:C7:CA:EF:14:45:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/24/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/24/69690F15B6C7D98D1124CEFCCF7DC7CAEF144559.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216208
Signature Algorithm: sha256WithRSAEncryption
27:3a:56:5a:d0:7c:da:0f:4d:b6:e5:d1:4c:13:65:7c:38:0b:
cd:82:45:3b:62:8e:71:28:c7:9c:9a:5a:a1:33:0d:31:16:7a:
a1:5d:ea:3a:d8:fd:17:0e:0a:9f:76:b5:e3:ea:9f:0e:12:94:
c7:0b:09:67:20:ed:df:ac:0f:ff:3b:54:fc:fa:43:5a:e0:40:
e0:aa:1c:64:6b:a1:89:21:1a:22:e2:e3:cf:b3:68:5d:ad:55:
71:75:a4:ff:82:46:fa:68:95:69:56:c1:8a:7b:ab:fa:ba:24:
b7:03:38:8d:98:d0:9d:7c:8b:a1:21:75:9a:9b:aa:cc:6d:2f:
30:3d:04:22:83:08:da:78:9f:5a:9d:95:d3:c6:3d:66:e1:23:
6a:92:84:36:47:9e:44:12:a7:49:44:82:4d:90:52:51:95:4b:
a5:48:4b:dc:d3:eb:9b:4d:d1:a6:59:9d:a9:83:07:00:b6:ce:
a8:aa:8f:1b:13:bd:7e:76:4e:34:5d:fe:ff:9c:ee:82:8d:b2:
88:b5:33:c5:10:78:67:df:92:e9:60:67:57:ff:81:f0:08:2e:
ed:6c:66:45:72:26:c8:6e:68:7a:d7:ee:9d:ba:79:b2:9c:78:
e6:86:ca:e4:83:02:0b:1a:4d:f1:6f:cd:73:46:21:4f:31:29:
47:c7:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:08:25 2024 by rpki-client on console-fra.rpki-client.org