Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gBCTAfdFigckETVClxEaC4Gvg1s.cer
File: gBCTAfdFigckETVClxEaC4Gvg1s.cer (raw, json)
Hash identifier: LR7neEC4MRyGzAj2uVp4/5aS0yvHTlV2yOeYUSvbut4=
Subject key identifier: 80:10:93:01:F7:45:8A:07:24:11:35:42:97:11:1A:0B:81:AF:83:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801E789EA9001240C7662D285751FC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/048d41-8019-4cd9-b46e-829a7df7f890/1/gBCTAfdFigckETVClxEaC4Gvg1s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/048d41-8019-4cd9-b46e-829a7df7f890/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 33954
Validation: Failed, certificate revoked on Mon 05 Feb 2024 12:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:e7:89:ea:90:01:24:0c:76:62:d2:85:75:1f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80109301f7458a072411354297111a0b81af835b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:fe:23:44:4d:20:8b:c1:63:72:ce:e5:c1:
21:a6:b8:ea:91:ca:b2:ee:2f:ba:49:0c:a3:e0:47:
39:e4:e0:1f:bf:aa:bc:4a:a3:cc:14:5b:c5:34:96:
d7:57:bd:41:52:a2:f7:df:53:9e:5e:59:07:2a:f0:
84:66:e1:45:2d:4b:4c:5b:fe:79:e7:b2:84:30:da:
19:f6:de:32:2a:38:f3:33:f4:7e:1b:64:53:06:b5:
8c:2b:23:4f:f3:dd:b5:7e:e8:48:80:f0:66:29:5c:
3c:f4:a7:c5:3a:a7:2e:bf:fe:4d:4b:4b:7d:6a:d5:
00:34:3a:dc:0d:81:e2:4a:69:a3:da:7c:52:bd:ab:
86:00:7f:35:fb:00:01:e7:67:0d:e5:be:6f:d3:7f:
45:ed:91:ee:d2:77:d8:87:73:16:3a:2d:c3:a8:65:
ca:3b:9c:1c:21:0c:45:3b:0c:91:bd:97:4a:7a:85:
64:63:ca:23:45:bb:03:de:74:94:44:3d:9b:9b:00:
05:f9:54:5e:ce:76:00:80:93:dc:c7:3a:6e:07:d9:
5b:32:78:e8:20:0d:2f:94:0a:3d:83:9c:d6:5e:16:
96:73:c0:63:22:94:bc:ff:4c:40:b9:a8:7a:f0:2e:
2b:79:40:8f:bf:60:c7:cf:26:81:6d:31:c6:16:21:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:10:93:01:F7:45:8A:07:24:11:35:42:97:11:1A:0B:81:AF:83:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/048d41-8019-4cd9-b46e-829a7df7f890/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/048d41-8019-4cd9-b46e-829a7df7f890/1/gBCTAfdFigckETVClxEaC4Gvg1s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33954
Signature Algorithm: sha256WithRSAEncryption
41:a8:bd:a6:f3:fe:61:b6:61:97:8e:8c:fd:83:33:6f:f7:26:
11:3f:22:9e:ab:ba:e3:10:25:25:4e:77:9c:49:c5:84:54:06:
ea:da:ae:7d:82:69:aa:70:f2:0f:9b:c3:13:4b:fa:91:ad:4b:
34:43:31:b6:71:7a:c0:fa:94:58:45:ad:63:c5:9c:03:f6:e0:
10:9a:ce:e9:a9:02:36:7f:57:80:7e:a4:29:3f:6e:6f:46:1e:
ad:0d:d5:32:dd:14:28:da:89:bf:75:4c:fc:cb:82:24:5a:45:
05:e2:64:26:7d:ac:b7:cf:20:ff:46:b4:54:cf:5c:e8:9a:b3:
2b:6d:a2:85:23:85:f7:8b:6b:09:71:26:9e:28:7a:73:5f:a3:
c9:48:d7:1f:84:4f:60:91:20:1d:4f:6b:95:0a:79:c3:92:da:
c5:d0:83:66:7c:34:f2:5a:26:cf:a3:14:f5:27:72:7f:8c:3f:
6c:dd:e9:f6:6c:d9:29:f3:91:2d:c3:ed:cd:1f:24:1d:6c:97:
6f:2a:5d:2f:1b:4a:98:b4:26:87:c6:6d:9e:90:0b:1d:bd:2f:
dd:56:11:de:29:fb:0d:cb:cd:a8:03:57:a2:cf:e6:f4:2e:c0:
82:e7:96:8d:b9:3f:8c:cf:b9:45:a0:5e:43:25:18:ef:e4:00:
45:3f:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:22 2024 by rpki-client on console-fra.rpki-client.org