Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fkVwf4KYBWvBVM0x3Yu9R9zWrGE.cer
File: fkVwf4KYBWvBVM0x3Yu9R9zWrGE.cer (raw, json)
Hash identifier: FA5mYkFEkbZ2ajqCrlMGv8uGT5bQK6Zmq4BqOG2t6Ic=
Subject key identifier: 7E:45:70:7F:82:98:05:6B:C1:54:CD:31:DD:8B:BD:47:DC:D6:AC:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019121B81A344BD4D34CC9220B8C0050B801
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.nap.re/repo/pongery/4/7E45707F8298056BC154CD31DD8BBD47DCD6AC61.mft
caRepository: rsync://rpki.nap.re/repo/pongery/4/
Notify URL: https://rpki.nap.re:3030/rrdp/notification.xml
Certificate not before: Mon 05 Aug 2024 08:46:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213086
Validation: Failed, certificate revoked on Mon 12 Aug 2024 07:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:b8:1a:34:4b:d4:d3:4c:c9:22:0b:8c:00:50:b8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 5 08:46:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e45707f8298056bc154cd31dd8bbd47dcd6ac61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:66:f3:cb:ec:3f:25:14:b8:5e:72:bb:61:
64:3a:0f:2c:3d:be:43:57:cf:d4:db:26:f5:53:ce:
9c:d9:18:dc:1a:63:51:7b:78:77:53:b5:a0:db:81:
20:3c:b3:0f:82:98:e4:67:3a:c0:d9:d5:77:a4:a8:
7a:d6:0b:65:7b:c1:d3:a3:6e:f1:58:80:19:76:bb:
2b:ae:d0:37:f5:ae:ca:c6:97:b0:da:57:cd:72:29:
de:29:1c:81:7d:d3:ad:03:7c:0b:c8:93:99:05:b0:
8a:19:c2:95:d0:c3:fc:8d:74:74:7d:2e:cc:4c:e4:
f3:9e:d2:ce:3a:6c:d2:0e:a5:43:2e:32:a5:36:b5:
30:1b:be:9d:6b:b2:1a:63:57:72:e3:2d:57:0b:ed:
49:80:99:fb:92:a3:1e:42:0f:84:2c:a3:20:ac:1a:
c9:52:c7:3e:31:01:2e:ce:2b:fb:44:a9:8a:71:99:
07:71:61:9e:98:20:05:91:e9:ca:e5:e5:5f:19:42:
33:ff:37:68:30:e1:aa:cf:a5:6e:49:c2:35:8b:e3:
a4:10:4b:85:ce:8d:15:13:8c:65:36:22:46:4f:fb:
d2:e5:1a:28:b8:fc:c2:67:05:b9:fb:af:69:55:42:
f5:c4:44:53:eb:28:1a:1b:fa:fe:65:ca:6a:9c:51:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:45:70:7F:82:98:05:6B:C1:54:CD:31:DD:8B:BD:47:DC:D6:AC:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.nap.re/repo/pongery/4/
RPKI Manifest - URI:rsync://rpki.nap.re/repo/pongery/4/7E45707F8298056BC154CD31DD8BBD47DCD6AC61.mft
RPKI Notify - URI:https://rpki.nap.re:3030/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213086
Signature Algorithm: sha256WithRSAEncryption
8d:3f:99:01:59:72:31:a8:3b:a2:b6:41:49:59:f2:c0:ab:55:
24:b9:38:13:21:a9:ad:f9:b4:1a:f4:94:8c:0c:aa:f1:cb:f6:
59:4b:f7:6b:16:d4:c4:a9:92:e9:f9:31:d9:47:89:78:26:0c:
40:0b:25:54:fc:45:32:fb:92:8c:07:3c:64:c3:4d:23:13:27:
32:e8:be:bf:13:a0:7a:52:62:b9:91:60:40:82:f4:f0:1e:f1:
e3:23:15:3d:ee:bc:c8:62:7a:3a:fb:fd:85:79:cf:7f:93:2f:
29:e2:1c:1b:22:d8:6d:2d:d1:6f:a2:5f:d2:bd:5f:7f:f3:cf:
29:74:ac:99:14:2c:f4:e0:84:75:51:c7:3c:0a:c9:c0:a1:38:
7e:7d:47:cd:85:4d:f1:a6:e8:b6:74:a4:03:54:a3:7a:f9:40:
a2:05:26:67:73:40:50:42:fc:a9:de:c6:79:02:0e:65:47:d7:
eb:b0:60:15:f6:23:11:07:b2:8b:bc:ed:01:4a:3e:a7:4a:c5:
39:57:6a:d6:4e:b0:d4:cd:48:65:1b:2a:25:a3:e5:56:b2:28:
ac:bb:8f:f8:bb:c2:ab:9b:3a:1e:c6:6d:63:a3:2f:e8:83:22:
91:ae:22:d3:fd:f8:ba:f4:4f:5d:0e:f6:e9:d3:07:5e:87:a3:
7a:2c:6f:3f
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZEhuBo0S9TTTMkiC4wAULgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwODA1MDg0NjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTQ1NzA3ZjgyOTgwNTZiYzE1NGNkMzFkZDhiYmQ0N2RjZDZhYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq9m88vsPyUUuF5yu2FkOg8sPb5D
V8/U2yb1U86c2RjcGmNRe3h3U7Wg24EgPLMPgpjkZzrA2dV3pKh61gtle8HTo27x
WIAZdrsrrtA39a7Kxpew2lfNcineKRyBfdOtA3wLyJOZBbCKGcKV0MP8jXR0fS7M
TOTzntLOOmzSDqVDLjKlNrUwG76da7IaY1dy4y1XC+1JgJn7kqMeQg+ELKMgrBrJ
Usc+MQEuziv7RKmKcZkHcWGemCAFkenK5eVfGUIz/zdoMOGqz6VuScI1i+OkEEuF
zo0VE4xlNiJGT/vS5RoouPzCZwW5+69pVUL1xERT6ygaG/r+ZcpqnFHCGQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFH5FcH+CmAVrwVTNMd2LvUfc1qxhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgdoGCCsGAQUFBwELBIHNMIHKMC8GCCsGAQUFBzAFhiNyc3lu
YzovL3Jwa2kubmFwLnJlL3JlcG8vcG9uZ2VyeS80LzBbBggrBgEFBQcwCoZPcnN5
bmM6Ly9ycGtpLm5hcC5yZS9yZXBvL3BvbmdlcnkvNC83RTQ1NzA3RjgyOTgwNTZC
QzE1NENEMzFERDhCQkQ0N0RDRDZBQzYxLm1mdDA6BggrBgEFBQcwDYYuaHR0cHM6
Ly9ycGtpLm5hcC5yZTozMDMwL3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8E
UjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZB
VUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDQF4wDQYJKoZI
hvcNAQELBQADggEBAI0/mQFZcjGoO6K2QUlZ8sCrVSS5OBMhqa35tBr0lIwMqvHL
9llL92sW1MSpkun5MdlHiXgmDEALJVT8RTL7kowHPGTDTSMTJzLovr8ToHpSYrmR
YECC9PAe8eMjFT3uvMhiejr7/YV5z3+TLyniHBsi2G0t0W+iX9K9X3/zzyl0rJkU
LPTghHVRxzwKycChOH59R82FTfGm6LZ0pANUo3r5QKIFJmdzQFBC/KnexnkCDmVH
1+uwYBX2IxEHsou87QFKPqdKxTlXatZOsNTNSGUbKiWj5VayKKy7j/i7wqubOh7G
bWOjL+iDIpGuItP9+Lr0T10O9unTB16Ho3osbz8=
-----END CERTIFICATE-----
Generated at Mon Aug 12 09:16:33 2024 by rpki-client on console-ams.rpki-client.org