Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kjwc_wvQ0Ca90QlsgNHu0-6Qyy4.cer
File: kjwc_wvQ0Ca90QlsgNHu0-6Qyy4.cer (raw, json)
Hash identifier: Fs2V8TFK75SLELPE/bmkOwXrvf95CQxyptAz+IyhzsM=
Subject key identifier: 92:3C:1C:FF:0B:D0:D0:26:BD:D1:09:6C:80:D1:EE:D3:EE:90:CB:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CE038B27B656EB7BD8F816A4D5701
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/kjwc_wvQ0Ca90QlsgNHu0-6Qyy4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51489
Validation: Failed, certificate revoked on Wed 13 Mar 2024 11:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:e0:38:b2:7b:65:6e:b7:bd:8f:81:6a:4d:57:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=923c1cff0bd0d026bdd1096c80d1eed3ee90cb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:e3:ef:f8:d7:ce:6f:7a:db:3f:1b:63:a7:
54:e2:2e:d1:97:81:df:55:0a:a7:85:5c:77:41:3d:
da:58:c1:ef:07:f5:83:42:a5:29:68:9e:32:19:22:
cd:91:1f:99:7b:85:28:5b:b2:9a:08:df:f5:4b:9c:
85:41:36:f5:0d:84:0d:1f:94:7d:a7:5e:75:ff:7e:
2d:cd:d4:a8:30:24:1d:48:8b:5f:6d:54:17:73:c3:
1f:8c:5a:33:42:01:6e:21:48:eb:24:8f:b0:e4:2f:
15:c0:33:d3:ff:c8:f1:bb:5c:6b:27:2f:51:14:f1:
d4:a8:59:b7:8b:33:ae:0c:3a:66:b1:79:b3:19:b2:
37:ac:38:2c:04:8e:41:7f:6a:33:2b:6f:0f:0a:42:
00:f9:1a:72:a2:a6:22:dd:2f:53:62:3a:b6:91:6a:
83:89:bd:2c:db:3f:92:23:f8:18:bc:f7:26:55:d8:
9e:aa:b7:b3:a6:f6:e8:f4:83:f0:5a:a6:f4:54:2c:
32:e2:04:e0:fb:7e:ff:8d:fa:b0:95:e9:05:3e:82:
39:fc:0f:5c:e5:20:16:63:6c:db:cc:1b:df:d7:ee:
e3:41:11:26:94:95:c5:d1:e7:82:bd:93:d9:c5:71:
ac:32:83:d6:a3:e6:ac:de:ae:a0:df:81:b7:5f:d8:
1c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3C:1C:FF:0B:D0:D0:26:BD:D1:09:6C:80:D1:EE:D3:EE:90:CB:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/kjwc_wvQ0Ca90QlsgNHu0-6Qyy4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51489
Signature Algorithm: sha256WithRSAEncryption
73:69:39:9a:39:fa:05:86:45:e9:1f:f1:8b:83:46:ab:69:e4:
57:18:93:ff:a5:bd:25:5e:5e:66:d5:6a:6c:be:1e:ff:dd:da:
ac:a8:e9:e5:90:04:46:81:07:ec:af:5b:43:85:8b:08:8a:3c:
5b:42:a5:60:53:c0:17:9b:43:c3:f0:65:c3:5a:0a:33:30:80:
87:a2:d1:4c:61:66:a0:be:2b:ad:8e:0e:cf:a4:d2:82:46:18:
1b:17:66:1b:d1:2a:d9:49:d6:ec:a8:10:e6:20:d8:ce:fa:6d:
04:44:c4:71:ad:14:27:1f:3c:b3:8d:1e:6b:49:20:96:44:1e:
c4:33:e4:41:c1:54:0e:4a:22:da:b6:7c:93:00:35:48:20:64:
3c:44:e9:fd:6f:21:55:f7:cb:fb:7e:0c:a4:b8:ca:4e:57:99:
04:eb:a3:6d:db:1a:cd:98:dc:b8:6c:7e:41:11:ed:57:54:7c:
95:b5:0d:17:37:d7:23:33:68:1e:16:54:66:fb:41:6b:d2:fb:
b7:85:72:85:72:fd:54:eb:de:9d:65:6c:ab:e3:67:4f:15:0a:
57:1b:6b:ac:c7:61:dd:60:b1:22:63:65:c5:52:a8:79:cc:1b:
ae:02:00:0d:9a:79:59:e5:bd:f0:00:da:33:34:1f:f8:bb:5b:
7d:70:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:55 2024 by rpki-client on console-ams.rpki-client.org