Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gFkZ3heyi1RJ3jRxAmH2XjfUHPo.cer
File: gFkZ3heyi1RJ3jRxAmH2XjfUHPo.cer (raw, json)
Hash identifier: WsHo74ixU3xmjr1aNDnvUwXlr62A8c+miVndlG2668M=
Subject key identifier: 80:59:19:DE:17:B2:8B:54:49:DE:34:71:02:61:F6:5E:37:D4:1C:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFB23DAD09DA3A65E79A2AD57600AC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/bc6adf-fc99-4070-9407-1dbe0309045f/1/gFkZ3heyi1RJ3jRxAmH2XjfUHPo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/bc6adf-fc99-4070-9407-1dbe0309045f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 49849
Validation: Failed, certificate revoked on Thu 14 Sep 2023 15:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:23:da:d0:9d:a3:a6:5e:79:a2:ad:57:60:0a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=805919de17b28b5449de34710261f65e37d41cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:f3:4a:02:f7:3c:40:5c:70:ac:3c:c4:d4:
6b:c3:36:0b:5e:40:08:db:49:06:51:79:2f:c4:c1:
bf:f8:a4:63:14:22:24:cd:3e:d9:c5:bb:cf:90:5b:
88:f2:58:08:78:b9:98:e6:48:18:47:b3:45:c5:e9:
54:dd:20:58:89:44:5e:e9:90:51:1e:67:02:bd:54:
77:c5:3c:75:e4:60:d8:1c:95:ef:ae:5c:a8:4e:4d:
bb:38:6b:fd:7a:e4:5e:e3:2a:43:54:05:7a:d1:8a:
3d:4f:00:db:a9:6a:ce:fa:52:b3:ca:74:45:64:43:
12:57:63:21:a5:ed:fe:71:e7:20:42:1a:e6:6f:08:
fc:7c:db:b4:a7:3b:09:e8:77:e7:b8:26:61:5f:fb:
c2:2f:81:dd:e6:93:0e:5a:83:05:52:3b:f0:28:b4:
60:c8:0a:bb:a9:7d:75:cd:ba:25:2f:a9:8f:8f:6c:
1b:b4:9c:0e:5c:6f:f7:f7:d5:54:67:be:80:81:91:
d7:86:49:27:1b:71:44:12:48:d6:c8:38:76:34:c1:
87:86:9b:fe:43:fb:ff:e3:54:28:74:7c:66:35:81:
45:fc:d5:b2:f7:72:15:17:01:83:43:0a:83:ef:da:
5d:d6:f4:2b:0a:ed:3b:85:d7:f8:ef:c8:a5:e0:d5:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:59:19:DE:17:B2:8B:54:49:DE:34:71:02:61:F6:5E:37:D4:1C:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bc6adf-fc99-4070-9407-1dbe0309045f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bc6adf-fc99-4070-9407-1dbe0309045f/1/gFkZ3heyi1RJ3jRxAmH2XjfUHPo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49849
Signature Algorithm: sha256WithRSAEncryption
24:02:cd:a9:9a:94:95:79:21:95:29:9d:63:a5:2d:bd:39:ab:
b1:d9:f9:fd:c5:62:86:69:c9:91:74:d8:4f:cf:df:65:c2:9f:
f7:38:90:d3:0c:fb:73:15:a4:4f:ec:04:d2:9b:23:cb:41:77:
0d:a4:fb:52:a0:0c:d5:9f:4d:ba:5e:78:da:08:6a:97:36:f7:
62:7f:b6:d3:95:20:c6:59:48:d6:9c:21:4b:66:f6:57:f8:41:
63:d1:75:74:a3:bf:3b:f7:41:63:32:13:5c:ae:17:e0:8f:f1:
f6:e8:a4:91:59:9e:92:59:06:5c:40:ea:d4:ca:7c:2c:2b:7e:
8b:2a:0f:e8:7e:30:cb:98:67:09:ed:7d:59:09:ee:33:fc:b1:
a4:d5:14:39:69:16:80:5c:ca:47:8f:ce:bf:16:3e:7f:c9:de:
04:de:c8:ce:f9:8d:7d:aa:16:43:f4:95:f6:8f:11:6f:c2:ee:
d5:58:1b:d1:89:d4:b0:d6:44:ff:1a:3b:1d:f2:9a:a4:13:28:
81:43:9b:0f:8d:0b:bb:0b:1b:56:dc:bb:d2:ce:2c:05:a8:76:
ca:f6:e6:5b:3f:1b:45:8a:c4:0f:1f:63:d4:e7:71:0f:9c:58:
a7:44:68:66:61:9f:4b:64:90:8e:84:96:17:a0:75:d3:0b:d6:
a1:17:94:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:23 2024 by rpki-client on console-fra.rpki-client.org