Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gE6cvNqBX80mDHAuK2bU2mDCREQ.cer
File: gE6cvNqBX80mDHAuK2bU2mDCREQ.cer (raw, json)
Hash identifier: 2d3C9glBI9Rd5PDZ3yxw5j1X8UZ7M7EJmMi4x+BOoBU=
Subject key identifier: 80:4E:9C:BC:DA:81:5F:CD:26:0C:70:2E:2B:66:D4:DA:60:C2:44:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ABA3EFF3878EE549A366175B450A4E400
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8b99407c-0c4d-4a69-a482-fc8a9d8dd905/0/804E9CBCDA815FCD260C702E2B66D4DA60C24444.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8b99407c-0c4d-4a69-a482-fc8a9d8dd905/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 22 Sep 2023 00:16:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 197464
Validation: Failed, certificate revoked on Sat 02 Dec 2023 16:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ba:3e:ff:38:78:ee:54:9a:36:61:75:b4:50:a4:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 00:16:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804e9cbcda815fcd260c702e2b66d4da60c24444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:8a:1b:50:48:d1:56:ef:a3:28:16:cf:06:
fa:99:a4:94:8d:99:59:30:33:e4:ee:19:2f:fb:e9:
52:e0:b3:78:15:f0:40:d4:c7:3a:59:94:9d:d6:7c:
7a:b3:4f:c7:8e:1d:72:32:a2:5e:11:aa:89:3a:f5:
99:aa:0a:a7:6f:bb:5e:45:0f:77:ee:94:51:c4:aa:
3d:05:7d:2a:b5:f2:d8:09:73:22:a4:f1:29:16:d0:
85:f3:91:91:ec:a3:82:05:bb:01:12:d0:10:f1:a1:
b6:69:93:b3:12:00:68:a6:a5:61:e0:49:b0:06:50:
3d:8b:b7:23:ac:07:f9:49:31:1c:c1:ea:84:d1:90:
21:27:57:c7:91:2a:81:bf:d4:4f:44:d6:1c:fe:96:
db:43:71:73:cc:d8:93:2d:b5:07:a4:10:5b:84:c9:
fb:78:7c:c3:21:cd:fa:cb:88:87:0d:cb:ad:a8:40:
4c:4c:ed:00:af:60:9c:84:b6:be:28:8d:be:40:5a:
18:d7:74:6b:1e:5e:4d:80:c1:b9:04:da:05:b2:9b:
76:1d:b7:9d:5a:23:39:6b:3e:05:50:95:f0:55:3a:
6f:de:37:9d:c5:fb:ba:ae:1a:09:c9:59:ff:0d:cf:
e1:ed:27:ca:f9:0b:7e:5f:bc:6d:fe:42:a9:2e:73:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4E:9C:BC:DA:81:5F:CD:26:0C:70:2E:2B:66:D4:DA:60:C2:44:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8b99407c-0c4d-4a69-a482-fc8a9d8dd905/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8b99407c-0c4d-4a69-a482-fc8a9d8dd905/0/804E9CBCDA815FCD260C702E2B66D4DA60C24444.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197464
Signature Algorithm: sha256WithRSAEncryption
8a:b6:7d:b2:b8:aa:d9:ee:48:47:78:a7:c9:71:b2:d9:26:25:
b1:c1:29:6a:2d:78:fa:ab:63:e7:d4:0a:87:9a:50:e1:15:3a:
06:a7:ff:e7:86:7f:1d:07:49:4e:d5:12:53:cf:66:c6:8c:58:
25:71:8a:f4:82:2c:32:7f:4a:08:e7:c5:f7:de:58:75:83:e9:
60:50:42:2a:9d:d3:f7:4e:86:58:1a:63:43:5d:25:56:71:33:
58:a1:92:e0:6d:06:aa:40:d5:65:7c:12:d0:e7:7c:ad:60:95:
d4:1b:eb:b5:b3:af:1d:66:63:85:e7:c6:43:f6:d0:90:57:52:
34:6f:47:16:ef:00:af:fb:fa:37:7f:9f:54:cd:8d:c7:5e:f2:
9c:57:8e:71:f2:d8:2f:ab:48:8c:45:d6:27:1b:78:1a:1c:5c:
3c:0a:92:35:05:92:04:42:3a:99:aa:66:5d:ea:8f:0e:90:27:
a9:2a:5e:aa:9c:1e:40:21:a1:52:07:5b:8c:ec:7c:ed:07:8a:
65:a1:f1:59:e1:f0:9a:32:ea:70:b4:0b:eb:04:bc:f1:91:ae:
d4:ca:00:4c:12:4c:1a:51:56:b9:40:e9:38:f1:7d:7c:71:fa:
16:5e:77:1e:d9:bd:63:ca:f5:97:b7:36:fb:8c:13:f1:9a:29:
03:72:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:01 2024 by rpki-client on console-ams.rpki-client.org