Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dsQ3QELRDVRyU9UlYC-0BogqMbY.cer
File: dsQ3QELRDVRyU9UlYC-0BogqMbY.cer (raw, json)
Hash identifier: nkyBjPLr+iUFNltOlFj19pJKiqqhM0++dIwZU1pOtdk=
Subject key identifier: 76:C4:37:40:42:D1:0D:54:72:53:D5:25:60:2F:B4:06:88:2A:31:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A7516CCA6E95F9F7F203AA1F5AE3F4EEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/1/76C4374042D10D547253D525602FB406882A31B6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/1
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 08 Sep 2023 13:59:03 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210912
Validation: Failed, certificate revoked on Fri 22 Dec 2023 07:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:16:cc:a6:e9:5f:9f:7f:20:3a:a1:f5:ae:3f:4e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 8 13:59:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76c4374042d10d547253d525602fb406882a31b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:4c:cb:a3:5e:07:2f:f7:93:cd:4f:aa:a3:
f6:94:ce:6b:f3:91:f4:00:a8:02:a3:bc:7f:de:02:
d1:71:71:24:83:a4:2d:21:90:96:7b:a7:1d:40:fe:
ad:1e:ea:90:be:54:54:b8:c8:3f:8f:ac:fb:24:da:
4b:d3:70:a3:e1:79:95:54:cf:c3:e2:b9:f7:e8:55:
b2:5d:27:0e:23:a9:47:fd:0f:e3:61:c6:b3:95:05:
9b:73:44:b6:80:3b:1f:d3:b0:88:36:4a:1d:20:3e:
a1:ca:59:fb:94:4d:3e:05:f1:63:a0:7c:bc:7b:30:
87:d2:ba:30:58:47:d4:e3:cf:9a:d7:0b:e0:91:eb:
15:e2:16:c9:c1:1b:6f:f3:13:28:34:f1:62:e6:f1:
75:8f:4c:46:e0:d1:2a:0c:f2:a0:53:45:5c:3b:59:
13:17:d5:0a:d0:c2:f2:8f:2d:d5:37:57:00:ea:61:
3b:5c:1a:bb:90:7d:bf:32:73:3a:38:08:eb:d3:14:
be:ea:cc:d8:cc:28:f6:ef:01:d0:ce:cc:1b:09:74:
54:22:25:97:b5:1e:e7:f2:00:25:84:69:83:64:e3:
78:fd:61:47:dd:56:57:25:fa:75:4a:03:69:2d:cb:
25:9e:d0:6b:1c:e4:ca:f2:ff:15:16:ca:fe:a5:b0:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C4:37:40:42:D1:0D:54:72:53:D5:25:60:2F:B4:06:88:2A:31:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/1
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/1/76C4374042D10D547253D525602FB406882A31B6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210912
Signature Algorithm: sha256WithRSAEncryption
1f:81:22:07:af:c5:d9:41:83:e0:94:17:09:34:15:30:51:40:
7f:87:28:af:c4:ce:28:9e:5e:7e:e1:8e:3e:d8:1f:39:4c:cf:
f9:0a:44:be:2f:4a:a5:64:7d:fb:9f:a3:c4:ac:4f:1d:ac:0b:
b7:00:6e:43:3c:d2:1d:cf:23:eb:00:cd:aa:6a:19:37:85:cd:
a3:a9:54:29:22:0a:c2:ca:10:57:ab:69:9a:f5:b0:bb:4d:54:
9f:d7:14:2d:a3:d3:81:5d:cd:73:6c:b3:46:a6:32:3d:b7:f9:
e3:01:fa:e4:81:09:53:7c:aa:ba:08:e5:2a:b9:35:68:28:cb:
f4:67:76:ce:ed:17:e4:79:dd:f1:bd:6b:26:10:2c:5f:f0:8d:
18:a4:af:17:1e:b6:50:e7:e6:65:d7:8a:bc:a2:cd:1a:4d:62:
5f:da:49:e9:ad:2c:fb:10:78:47:f9:51:29:32:fa:71:03:0f:
63:c0:26:b5:56:9b:8e:67:d2:97:d8:20:32:a5:4f:e1:59:32:
8e:2c:be:9b:5c:9c:a7:27:26:6c:9d:15:0a:3f:c1:99:7b:7d:
4b:1a:fa:7a:11:72:57:c1:7c:57:21:ce:a3:b9:9e:c7:26:12:
ee:d3:6f:68:28:f2:9e:62:7f:aa:3e:e6:bd:d4:5e:d1:68:6a:
9d:ea:57:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:33 2024 by rpki-client on console-ams.rpki-client.org