Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gDS07IcQOpeD0GcNVCJJzDoI60c.cer
File: gDS07IcQOpeD0GcNVCJJzDoI60c.cer (raw, json)
Hash identifier: hGXDKqNITCGPUDDyBWJHJxVMxSfH+18ICjm43CarKY4=
Subject key identifier: 80:34:B4:EC:87:10:3A:97:83:D0:67:0D:54:22:49:CC:3A:08:EB:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC41036FAC93D191472EF3BBF33CD0634
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/8034B4EC87103A9783D0670D542249CC3A08EB47.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:07:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204474
Validation: Failed, certificate revoked on Wed 03 Jan 2024 16:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:10:36:fa:c9:3d:19:14:72:ef:3b:bf:33:cd:06:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:07:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8034b4ec87103a9783d0670d542249cc3a08eb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:4e:67:30:00:01:c5:0e:6c:2e:f3:bb:d8:
db:8d:21:11:46:31:48:df:9e:37:52:b9:ed:9f:72:
54:09:7e:32:0d:61:20:0a:f0:41:42:e9:41:b6:bc:
08:40:6e:72:f3:dc:7e:a7:15:f4:86:75:83:67:23:
f5:20:60:5c:81:f4:02:e5:fd:23:e9:3a:d0:66:33:
db:8e:dd:fa:5d:5e:92:97:70:9b:a2:a2:a3:c4:8b:
02:6c:b9:de:a6:0a:ab:3e:24:24:3a:4c:5a:ed:8e:
53:6f:78:17:c4:57:25:ac:6b:30:2e:00:52:26:79:
67:45:1e:22:9e:78:30:36:93:04:ba:8e:4e:e8:5c:
a1:3c:74:56:b4:a4:1c:3a:8c:86:79:cb:74:f0:38:
6d:a1:f5:65:45:f9:11:1d:fe:c8:06:bb:78:51:ea:
97:7a:1f:59:03:e5:9f:14:2d:04:47:ce:55:3d:c9:
66:05:32:4d:d2:ad:cc:72:7e:9a:6c:42:c9:ee:87:
6d:10:de:91:7f:0a:de:fc:8d:2a:97:99:3d:64:e5:
40:4d:99:e3:74:69:82:30:eb:c8:da:33:57:0a:c4:
b3:ad:49:b4:78:11:29:1c:c2:a7:68:b9:cb:d0:ff:
82:57:9b:6a:af:00:5b:28:ea:70:96:01:70:a8:31:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:B4:EC:87:10:3A:97:83:D0:67:0D:54:22:49:CC:3A:08:EB:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/8034B4EC87103A9783D0670D542249CC3A08EB47.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204474
Signature Algorithm: sha256WithRSAEncryption
46:2f:d9:8b:b0:30:83:37:ac:9c:96:01:32:80:0e:e7:45:c7:
c4:82:55:1a:a5:d4:5f:76:93:46:e3:08:f2:ee:22:c0:1f:1b:
0b:60:02:e3:d4:e9:4b:5e:4b:53:28:0e:e3:c6:09:d7:0a:0e:
b1:b6:9c:17:e0:80:e0:53:8c:e8:6b:37:50:39:47:4d:50:7f:
7b:3d:4e:70:0a:2c:fe:36:25:a4:35:09:0d:03:c7:ec:89:d8:
a4:7c:fc:85:d8:41:eb:dd:8d:59:cf:ee:c3:af:8c:48:1a:34:
d4:e5:d5:ad:c1:41:71:91:3b:8c:ba:ef:a8:47:03:6d:38:95:
73:3a:cc:af:41:d2:1e:da:13:fb:eb:e6:08:b4:0f:b1:e3:02:
44:38:80:75:54:91:c0:b2:ce:c1:92:0f:f9:2b:a2:5b:ee:25:
a0:f0:5d:79:9f:dc:31:45:e6:0a:87:61:1b:2b:9c:0b:82:4b:
79:8d:1f:21:63:2b:d3:4b:5e:73:8d:9c:bf:b9:7c:19:01:f7:
d9:28:ac:dc:cb:f9:34:d0:8a:74:b5:b0:5f:bf:65:66:82:08:
ae:2a:49:30:67:73:ae:62:e6:01:b8:82:63:78:81:40:8f:fc:
5b:6a:de:e0:11:82:ba:b9:84:04:1f:98:f3:ce:0d:09:ab:55:
c0:b4:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:01 2024 by rpki-client on console-ams.rpki-client.org