Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gV-PsVBBfi0cxFsEE2dztLC9zws.cer
File: gV-PsVBBfi0cxFsEE2dztLC9zws.cer (raw, json)
Hash identifier: Lp+cXaVp9Qe51ndRt7DoK04SK36uTxoUXsUgRRQcjTE=
Subject key identifier: 81:5F:8F:B1:50:41:7E:2D:1C:C4:5B:04:13:67:73:B4:B0:BD:CF:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D0337EE725DCA505F7B4CAF290C3C5506
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.netiface.net/repo/Pfcloud/0/815F8FB150417E2D1CC45B04136773B4B0BDCF0B.mft
caRepository: rsync://rpki.netiface.net/repo/Pfcloud/0/
Notify URL: https://rpki.netiface.net/rrdp/notification.xml
Certificate not before: Sat 13 Jan 2024 14:26:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202685
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:03:37:ee:72:5d:ca:50:5f:7b:4c:af:29:0c:3c:55:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 13 14:26:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=815f8fb150417e2d1cc45b04136773b4b0bdcf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:8f:92:be:6b:a4:80:ec:bb:c7:7e:d3:15:
72:83:40:a0:cf:cb:80:bf:fb:83:9c:19:de:49:9e:
50:9d:5c:a0:2c:4d:5e:80:08:1a:33:0e:d2:3e:38:
1c:89:67:e2:9f:f9:68:ab:0b:c7:19:a3:15:cb:e1:
e5:0b:8d:9a:56:f5:e4:81:5e:83:23:e6:d1:e4:49:
47:45:00:e5:0a:73:57:ec:c4:1e:8b:c9:e1:41:f2:
a1:9a:2f:65:ff:e3:34:4e:1c:14:8e:c2:df:f1:db:
4a:7d:11:16:84:9b:3c:a2:5f:dd:82:bd:94:09:ec:
28:f5:0f:16:73:bd:ae:ac:9a:15:72:55:61:2e:d2:
eb:c0:26:0d:c6:41:c9:f7:7f:51:78:45:8b:59:c3:
fb:c4:3d:92:9e:b0:9e:55:82:5e:7d:c3:db:52:c1:
60:0c:b6:ed:40:30:f1:80:d9:59:e0:86:a4:b7:11:
62:a7:73:7d:64:80:e8:5a:cc:63:3f:31:52:54:0d:
95:30:7a:28:71:15:67:85:7c:6c:79:b1:ad:ad:1f:
6e:08:c6:62:8b:7f:67:c8:55:92:4d:33:b2:6e:9d:
9d:1e:57:4c:1f:b7:ec:a3:e7:67:ef:80:54:d7:03:
e5:a4:c1:04:5e:95:e5:2c:42:34:fb:b2:90:6f:18:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5F:8F:B1:50:41:7E:2D:1C:C4:5B:04:13:67:73:B4:B0:BD:CF:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.netiface.net/repo/Pfcloud/0/
RPKI Manifest - URI:rsync://rpki.netiface.net/repo/Pfcloud/0/815F8FB150417E2D1CC45B04136773B4B0BDCF0B.mft
RPKI Notify - URI:https://rpki.netiface.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202685
Signature Algorithm: sha256WithRSAEncryption
42:88:d5:7c:aa:f6:67:6c:73:c9:8d:8d:57:a8:76:dc:a7:57:
29:4a:8e:48:da:85:20:21:c6:3d:b5:fa:04:6a:fc:fb:a9:33:
05:ae:0a:e4:2c:c5:f1:75:32:68:8c:5c:a1:98:06:2c:61:74:
51:a7:cf:3e:cc:a1:9e:f9:26:18:5d:d5:0d:44:b7:f8:c7:84:
d1:ab:ee:f1:f1:b0:e0:60:ef:03:ae:0b:d1:d4:5d:04:df:e6:
f3:e8:ce:e6:1a:b3:21:05:a5:13:97:76:99:7e:2f:b4:2a:e0:
ac:b8:01:16:1e:a1:2c:61:26:38:27:68:42:a8:97:49:01:8a:
a1:d6:62:66:9e:20:a5:0e:de:ab:33:93:15:4d:de:ec:e4:85:
4e:ff:df:5f:4e:a9:5b:09:ab:eb:89:62:d8:01:77:54:b6:8f:
ce:c5:d1:8c:98:24:a6:41:2a:df:d1:b4:c7:4b:f2:99:66:21:
57:bf:64:8f:61:8a:fa:bf:45:c0:4b:b1:06:78:ec:8c:4a:88:
d2:a0:5e:f3:80:f2:8b:af:70:08:bf:ec:09:34:d9:e9:11:6d:
7f:a7:cc:97:63:34:5b:3d:c8:75:24:98:ee:39:7a:8a:fd:99:
40:de:b2:bc:8c:ec:f1:fb:73:e7:a8:44:ed:91:c1:29:20:57:
df:8d:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 16:47:41 2025 by rpki-client