Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cNOdYUZdumsQ8yPnrRR9mQ-1SXY.cer
File: cNOdYUZdumsQ8yPnrRR9mQ-1SXY.cer (raw, json)
Hash identifier: 0GKNdmgRNMAGsScq5MucKXMITJD4yuIW0uP0R1Ryu1k=
Subject key identifier: 70:D3:9D:61:46:5D:BA:6B:10:F3:23:E7:AD:14:7D:99:0F:B5:49:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D5F55E894B87C11F31374E24B3722
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/9/70D39D61465DBA6B10F323E7AD147D990FB54976.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/9/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60025
Validation: Failed, certificate revoked on Mon 08 Apr 2024 07:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5f:55:e8:94:b8:7c:11:f3:13:74:e2:4b:37:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70d39d61465dba6b10f323e7ad147d990fb54976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:83:53:de:90:b3:62:26:59:2a:39:36:84:
01:51:14:3b:83:87:1b:24:ea:8f:de:8b:d3:2b:c4:
bb:0d:4f:a2:8b:9a:4c:00:f8:fc:9b:8f:91:6b:03:
83:45:9a:d3:07:95:6f:ca:12:ad:b6:95:8a:66:bf:
79:1c:21:32:48:a9:93:e6:b5:cd:17:3f:4f:53:73:
fa:25:cf:5d:9d:1b:4e:4c:40:4f:33:c6:e4:ff:9c:
e8:1a:71:b9:6d:c3:39:3a:d9:91:06:4c:0c:7c:e6:
90:69:4b:c4:21:2c:61:40:db:03:38:af:6c:53:c3:
74:8d:06:33:03:ff:90:ad:15:53:99:22:f0:de:28:
b7:90:28:33:6a:14:2a:c3:19:cd:8d:cc:65:6c:e3:
bd:90:da:4c:13:22:12:9e:41:7f:50:7d:eb:64:14:
e4:56:88:a6:eb:0b:8d:ce:e7:ab:06:4c:34:24:be:
33:20:74:a3:34:b6:48:eb:4a:5d:88:65:de:49:3a:
8c:0f:96:da:ee:45:23:9e:ab:4c:78:1a:54:d8:53:
0a:49:18:28:76:2e:76:53:e8:79:61:32:bd:bf:bd:
05:fa:b8:4e:48:31:b1:39:00:4d:83:00:11:59:74:
e8:47:31:41:d5:f0:cc:6f:d9:b3:79:6a:48:03:7f:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D3:9D:61:46:5D:BA:6B:10:F3:23:E7:AD:14:7D:99:0F:B5:49:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/9/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/9/70D39D61465DBA6B10F323E7AD147D990FB54976.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60025
Signature Algorithm: sha256WithRSAEncryption
4c:e6:7a:fd:6c:a3:78:86:cb:a0:a7:52:ee:95:11:fb:5b:83:
0c:2e:0e:03:01:e6:a1:66:d5:56:b9:0d:f3:ca:4f:3e:f0:7f:
5a:1b:d8:30:c9:f8:1d:4b:6c:f8:73:fc:65:6f:a5:71:54:c9:
bf:fb:c2:27:e5:09:a5:9e:95:60:6c:a4:bc:4b:24:74:16:0b:
0d:3e:af:76:5f:28:34:16:f6:9a:9b:ce:d4:de:4d:7d:ea:27:
5b:44:22:c0:ea:5a:a4:95:94:f4:38:f6:09:16:02:5a:ab:f9:
85:ee:43:af:2c:97:40:b2:e4:6b:94:41:b9:cd:ea:ea:64:36:
0b:ae:35:8a:a5:27:34:aa:f1:52:de:36:bb:f7:11:aa:fb:7d:
ea:3c:e2:8b:17:d9:b8:c3:77:d9:dd:83:58:b8:f2:c1:21:97:
3c:f1:97:5b:02:81:37:79:4a:24:33:e1:1f:7d:7c:71:96:89:
d6:f2:7d:b8:28:0a:2c:a0:ef:15:d1:a3:df:be:b4:6b:7b:87:
1d:93:cd:af:07:02:0e:da:a4:d3:fa:63:9d:fd:35:41:53:4f:
16:2c:a2:d9:84:f1:7c:f4:e7:00:80:6b:7d:af:2a:2b:24:9b:
39:55:85:03:d0:06:6a:77:5c:d6:f7:0f:96:02:f6:51:0a:ca:
45:de:f9:f9
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAYzCbV9V6JS4fBHzE3TiSzciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGQzOWQ2MTQ2NWRiYTZiMTBmMzIzZTdhZDE0N2Q5OTBmYjU0OTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXSDU96Qs2ImWSo5NoQBURQ7g4cb
JOqP3ovTK8S7DU+ii5pMAPj8m4+RawODRZrTB5VvyhKttpWKZr95HCEySKmT5rXN
Fz9PU3P6Jc9dnRtOTEBPM8bk/5zoGnG5bcM5OtmRBkwMfOaQaUvEISxhQNsDOK9s
U8N0jQYzA/+QrRVTmSLw3ii3kCgzahQqwxnNjcxlbOO9kNpMEyISnkF/UH3rZBTk
Voim6wuNzuerBkw0JL4zIHSjNLZI60pdiGXeSTqMD5ba7kUjnqtMeBpU2FMKSRgo
di52U+h5YTK9v70F+rhOSDGxOQBNgwARWXToRzFB1fDMb9mzeWpIA38W+QIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFHDTnWFGXbprEPMj560UfZkPtUl2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5
MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC85LzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjZi
ZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzkvNzBEMzlENjE0NjVE
QkE2QjEwRjMyM0U3QUQxNDdEOTkwRkI1NDk3Ni5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA6nkw
DQYJKoZIhvcNAQELBQADggEBAEzmev1so3iGy6CnUu6VEftbgwwuDgMB5qFm1Va5
DfPKTz7wf1ob2DDJ+B1LbPhz/GVvpXFUyb/7wiflCaWelWBspLxLJHQWCw0+r3Zf
KDQW9pqbztTeTX3qJ1tEIsDqWqSVlPQ49gkWAlqr+YXuQ68sl0Cy5GuUQbnN6upk
NguuNYqlJzSq8VLeNrv3Ear7feo84osX2bjDd9ndg1i48sEhlzzxl1sCgTd5SiQz
4R99fHGWidbyfbgoCiyg7xXRo9++tGt7hx2Tza8HAg7apNP6Y539NUFTTxYsotmE
8Xz05wCAa32vKiskmzlVhQPQBmp3XNb3D5YC9lEKykXe+fk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:52 2024 by rpki-client on console-fra.rpki-client.org