Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fpvulJxgwggmNISNZqXsKdQ8MRs.cer
File: fpvulJxgwggmNISNZqXsKdQ8MRs.cer (raw, json)
Hash identifier: hkaQgI2+uxB9NK3sR42TXDkghGuQ4VN5hzX2NB2EDE4=
Subject key identifier: 7E:9B:EE:94:9C:60:C2:08:26:34:84:8D:66:A5:EC:29:D4:3C:31:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F859B7653C842FDE9D5616CAB6179783C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c5c57c17-140a-4393-b7cb-bce0179f50e8/0/7E9BEE949C60C2082634848D66A5EC29D43C311B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c5c57c17-140a-4393-b7cb-bce0179f50e8/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 17 May 2024 08:11:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215126
Validation: Failed, certificate revoked on Fri 17 May 2024 23:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:9b:76:53:c8:42:fd:e9:d5:61:6c:ab:61:79:78:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 17 08:11:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e9bee949c60c2082634848d66a5ec29d43c311b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:4e:27:e4:64:47:63:1a:49:0d:ca:51:5f:
c8:c5:4f:45:39:44:9f:88:dc:af:cb:4d:58:9d:29:
da:b5:cc:c1:15:83:6d:45:1b:c9:81:f5:89:1a:f5:
f3:24:3a:3c:95:cf:1b:08:86:9b:da:3b:e9:54:5c:
cf:ac:60:54:fc:a7:47:6c:10:e6:6a:5d:ae:96:36:
ad:28:aa:f9:39:7b:3e:21:11:9a:ec:ec:45:f2:c6:
aa:6b:9c:b9:62:8e:e1:19:05:22:f0:b2:82:37:38:
50:84:25:62:c7:8a:4a:a0:6b:ca:0d:e2:7e:65:a7:
c0:f5:3b:d3:4d:8c:14:41:82:a0:48:3d:e9:ba:fa:
88:78:e1:03:8e:41:77:f9:65:a7:39:19:f5:bb:5b:
f1:ae:46:b4:2c:71:e3:6a:7f:08:44:f1:a5:b7:5e:
d3:d2:36:d5:2a:51:cb:44:17:ef:d2:c9:ec:39:84:
0b:11:dc:da:75:05:8c:5d:ef:d5:16:27:ee:32:57:
6c:60:b1:b3:24:78:2a:0f:d0:3e:c8:14:18:b0:db:
90:e8:2d:87:6a:2d:a7:a9:eb:23:37:2f:d2:aa:ab:
4b:61:07:f9:55:89:4d:c7:84:cd:10:1b:41:e2:7e:
b4:73:32:94:f8:0f:c2:db:b1:f4:21:61:f6:66:26:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:EE:94:9C:60:C2:08:26:34:84:8D:66:A5:EC:29:D4:3C:31:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5c57c17-140a-4393-b7cb-bce0179f50e8/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5c57c17-140a-4393-b7cb-bce0179f50e8/0/7E9BEE949C60C2082634848D66A5EC29D43C311B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215126
Signature Algorithm: sha256WithRSAEncryption
8b:a8:a5:97:de:66:ea:0c:34:86:60:78:46:5a:4e:77:39:a5:
23:98:a1:a5:91:5a:3e:26:99:45:2b:38:13:82:6a:77:a5:1f:
12:5a:7b:ab:8c:f7:83:3f:5a:f3:47:ea:cb:5d:d6:a4:e1:98:
3f:f9:ec:63:93:81:ff:c0:1c:16:73:25:fa:70:e6:16:bd:74:
12:53:60:2c:fa:35:10:1e:7e:fd:8a:42:f1:ec:aa:75:46:6b:
b1:53:57:65:53:fe:ef:0c:cc:32:1c:eb:24:d2:d0:74:11:56:
3f:bc:77:7e:59:f8:0d:32:6c:af:62:43:fb:24:7c:7d:da:d4:
91:f4:db:a2:89:05:5f:f1:19:c1:c8:8b:db:20:fa:f7:68:cf:
ce:0d:67:3b:42:09:b8:65:a7:17:f2:41:b0:5c:fc:f8:64:ec:
b5:11:f3:b2:ef:a0:49:b8:31:e7:c3:06:5c:da:60:47:ac:9b:
50:2a:77:ed:aa:80:e2:0e:13:af:2f:fc:43:ff:a8:97:77:c3:
a1:2e:dc:f2:2b:72:b3:49:c3:6b:dd:19:2f:ce:18:87:ac:66:
4b:0a:f1:12:d7:76:45:7f:99:f8:f3:2d:fc:7d:af:e8:61:71:
c6:69:6b:51:c3:33:fb:12:78:01:56:6f:47:2a:80:a1:ba:ff:
e5:12:ab:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:20 2024 by rpki-client on console-fra.rpki-client.org