Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gYo2pBZm5ATuSNX_SAc2CFkHtPM.cer
File: gYo2pBZm5ATuSNX_SAc2CFkHtPM.cer (raw, json)
Hash identifier: ALWFUlBb+fgKR8ZjpQOSvdNbjDSYCx1LGmscyisOVTI=
Subject key identifier: 81:8A:36:A4:16:66:E4:04:EE:48:D5:FF:48:07:36:08:59:07:B4:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191C3706A6EBB5D81738DC5F00701848423
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/0/818A36A41666E404EE48D5FF480736085907B4F3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 05 Sep 2024 18:26:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214757
Validation: Failed, certificate revoked on Sun 29 Sep 2024 18:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:70:6a:6e:bb:5d:81:73:8d:c5:f0:07:01:84:84:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 5 18:26:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=818a36a41666e404ee48d5ff480736085907b4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:8f:65:08:43:83:66:2d:6b:65:b9:7e:e9:
66:97:22:04:b2:4c:b2:52:d1:cc:08:47:55:3b:46:
93:05:e7:76:61:55:fe:3e:7b:d8:7a:a1:e7:e3:7a:
5c:90:a1:54:b6:2d:28:a3:de:c9:d1:26:4b:6e:9d:
76:e7:cc:05:99:1a:59:c6:99:ed:40:03:5d:4e:d3:
25:69:c4:82:9c:2b:7b:9d:a1:9c:59:ce:c9:2c:3e:
9e:e9:4c:fc:0c:f8:dc:36:07:57:ef:42:d6:fd:7f:
80:c9:2c:e2:d4:21:2c:9b:43:ca:c0:2c:57:8d:03:
cb:10:fd:19:42:8a:4b:b1:6c:00:63:da:ee:8b:fb:
84:5d:59:2e:fd:e8:a5:02:5a:18:c5:4f:1f:ee:81:
94:a1:5c:3b:6a:51:8a:3b:5b:fc:d2:85:04:5f:90:
f4:9a:b9:73:54:f8:6c:0c:e9:e3:25:2f:4b:e5:bf:
0d:a9:ca:8a:d0:50:d5:10:5a:9f:22:b8:8d:77:21:
f0:8d:2b:b4:44:65:a2:0c:a5:de:a2:f7:af:8d:aa:
8e:4c:2d:40:29:0b:82:d3:e3:36:3f:16:84:d0:be:
8f:b6:e7:ce:45:ee:cc:23:e1:cf:9d:56:54:d9:9a:
e0:f5:08:f2:a7:0d:64:80:5e:f9:3f:45:b4:d6:ee:
ce:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8A:36:A4:16:66:E4:04:EE:48:D5:FF:48:07:36:08:59:07:B4:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/0/818A36A41666E404EE48D5FF480736085907B4F3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214757
Signature Algorithm: sha256WithRSAEncryption
45:0f:24:47:ad:d1:cb:fd:fe:c3:f0:29:68:09:0e:ac:86:6e:
27:37:cb:3f:90:0e:48:b4:a7:8e:14:ac:c3:f6:f6:3b:23:87:
20:6e:7d:2f:87:0e:1f:2d:97:8a:19:ea:6b:7f:2a:0a:d3:15:
5a:f3:c3:89:12:1e:0e:a3:e4:1f:ce:b2:84:23:70:83:e7:65:
df:a6:6e:65:88:b8:4c:aa:db:2b:e9:e1:f6:ef:71:4c:fa:00:
5e:ab:fb:8c:db:a0:5c:1a:da:5a:dd:d4:2a:e6:30:0b:59:47:
c5:33:99:aa:e4:6b:af:3f:d9:a5:8a:1d:5f:0c:f8:60:21:51:
e6:44:1f:1d:56:25:29:3e:5f:1f:48:9f:a6:d7:e0:d3:8b:24:
b1:f2:0a:8a:c5:39:42:32:50:15:01:a1:a7:aa:a5:ee:f6:01:
b5:f4:98:9b:7b:66:23:97:e2:90:36:db:b9:da:be:34:65:8a:
47:ca:55:4b:e6:7a:8d:22:6b:2a:d6:cc:4a:f8:d3:15:7b:fd:
db:31:2b:13:24:13:76:0b:a0:a1:27:08:33:53:cc:af:dc:ae:
74:2e:e4:ee:ee:0c:fc:95:97:24:27:c3:c4:8c:a5:64:7e:65:
01:77:f4:ef:7e:14:e7:27:7b:ba:17:4e:f3:e8:4b:2b:3f:f8:
a1:48:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 19:45:41 2024 by rpki-client on console-fra.rpki-client.org