Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
File: gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer (raw, json)
Hash identifier: Sji86CstYZbEnhwBR0W2PCMiubiURNHU7k+32FKUOzY=
Subject key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FA196E5936525C9A7F795A4B9D66193BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 22 May 2024 18:36:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12839
IP: 193.194.16.0 -- 193.194.20.255
Validation: Failed, certificate revoked on Thu 05 Sep 2024 21:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:96:e5:93:65:25:c9:a7:f7:95:a4:b9:d6:61:93:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 22 18:36:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:39:8f:a5:5d:79:c3:a8:0a:23:06:79:e1:
25:9e:b2:0d:ad:be:a4:5f:fd:e4:2a:7b:30:b4:bd:
17:b9:c5:1f:c1:31:d1:d9:a7:36:27:9d:a9:3e:a4:
18:56:09:27:31:e3:09:fd:96:87:88:a0:98:40:f2:
45:46:c4:78:a3:6a:19:3c:83:74:f1:b1:95:9d:22:
9a:e1:83:13:15:75:7a:d0:7a:db:4d:91:a6:9b:05:
7e:53:ea:1a:a4:bb:26:15:b6:b6:84:e5:e5:3a:10:
90:87:45:c8:07:44:f6:ae:30:2d:bd:af:ff:7c:a1:
06:f2:e1:88:ff:a3:a3:f0:e3:b4:1b:8a:60:f2:d1:
00:fa:1a:23:6a:31:42:47:1e:f6:8d:8d:92:a6:33:
ad:7c:e8:4a:39:4b:7d:46:c3:2d:ac:5c:d3:af:e4:
0c:d9:4e:98:bf:00:1a:27:09:42:56:1d:1d:f3:a4:
17:5a:70:0f:0b:4d:a6:8c:9b:c6:a1:4d:36:95:ba:
07:21:e6:cd:4a:60:f1:35:35:20:c5:d8:a0:14:29:
65:f2:b0:26:4f:5d:71:e5:f9:37:4b:76:25:c4:cc:
06:ef:96:8d:8f:d5:11:11:e7:43:00:f3:b0:25:d7:
28:11:fb:13:e0:b7:ff:77:04:83:02:1e:12:1d:cc:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0-193.194.20.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12839
Signature Algorithm: sha256WithRSAEncryption
57:b9:49:4c:82:38:9d:bf:90:23:16:4a:d6:a8:22:b5:5a:57:
a9:d5:3f:d8:4b:d8:05:b4:37:e2:68:96:29:13:64:13:0d:1e:
88:8f:e3:5e:74:c0:8f:1f:e1:69:b5:38:01:8c:81:fa:25:b4:
da:41:4d:ad:4b:33:f8:87:9f:41:ed:74:aa:6b:60:d6:36:e3:
b1:05:80:82:da:51:40:db:db:e0:d9:9a:02:3a:1f:47:53:2c:
10:a2:d8:cb:e0:e3:fc:2f:4c:41:1b:23:1c:1f:2b:b0:66:49:
fa:b3:ac:d8:b3:73:a2:1e:e9:53:26:df:b0:08:3e:a6:b3:6c:
48:cf:74:fd:72:9b:dd:54:3d:80:b7:a7:73:b0:f6:f2:e2:51:
2d:3f:8d:72:72:57:12:20:0c:0f:96:a1:f9:ff:11:55:8d:19:
ef:b2:67:2a:53:75:13:51:64:21:b9:54:46:e9:d6:69:fc:3f:
c6:bc:7b:52:a5:ec:30:0f:a2:4c:d7:fe:a1:52:25:74:88:fa:
9e:65:74:27:49:d2:2b:1b:b7:12:b4:78:84:78:83:f6:92:64:
84:61:a1:5b:a5:eb:8c:f1:49:c1:a0:03:cc:a7:ca:3a:b6:be:
53:4d:ea:d2:11:e2:12:20:c7:9b:89:15:bb:a3:fa:8b:52:63:
fe:12:da:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 23:32:26 2024 by rpki-client on console-fra.rpki-client.org