Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m0xGa8z2v5fD7g_H8DIhJCQnh44.cer
File: m0xGa8z2v5fD7g_H8DIhJCQnh44.cer (raw, json)
Hash identifier: VUvS8iatyALsaR9e2aKbQsIbog598aWBLfEs4r6LvGc=
Subject key identifier: 9B:4C:46:6B:CC:F6:BF:97:C3:EE:0F:C7:F0:32:21:24:24:27:87:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C05B7E72551D55186247324AE3308E781
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/9B4C466BCCF6BF97C3EE0FC7F03221242427878E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 25 Nov 2023 09:03:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 47272
Validation: Failed, certificate revoked on Sun 26 Nov 2023 11:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:b7:e7:25:51:d5:51:86:24:73:24:ae:33:08:e7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 25 09:03:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b4c466bccf6bf97c3ee0fc7f03221242427878e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:01:d7:90:e5:67:0a:66:7b:3a:6d:c9:b8:
8d:c7:ad:4f:b7:05:fd:36:da:f8:e2:88:95:29:80:
8c:ec:14:34:f6:43:fb:b9:82:cd:57:34:0e:cc:fe:
34:a4:40:77:54:f4:37:40:d4:60:f0:e3:c6:b1:37:
fe:59:e0:07:5f:72:df:82:e1:5e:10:99:43:34:7d:
7a:6e:70:f4:47:9e:b9:1b:88:1d:9f:16:7d:c8:ee:
8b:0e:51:81:33:6f:37:fb:8c:47:9e:c1:46:41:5e:
7a:a6:4b:5b:e8:b5:52:4a:5a:3a:5e:ac:53:51:f6:
b9:c8:7c:1c:77:7d:1d:06:81:c7:b7:ba:d5:cb:7b:
c9:4f:13:8c:0b:9b:77:2c:10:d6:aa:20:71:ab:aa:
aa:dd:1c:4d:11:38:9f:16:b2:34:0b:08:1b:1e:62:
68:f9:af:c7:19:83:48:91:33:bd:14:7b:18:99:22:
fe:17:b9:1e:3e:be:47:0f:1b:75:53:7a:cd:5d:4b:
7e:2a:cc:cc:57:b2:70:c2:86:43:02:f7:0d:2c:30:
fc:f1:5b:08:9d:ee:e8:35:21:ad:83:55:93:32:77:
01:ea:93:b1:35:47:92:6c:85:0e:57:fb:0a:4e:24:
06:e2:8f:d4:3a:dc:49:75:04:50:ca:9d:96:b5:cc:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:46:6B:CC:F6:BF:97:C3:EE:0F:C7:F0:32:21:24:24:27:87:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/9B4C466BCCF6BF97C3EE0FC7F03221242427878E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47272
Signature Algorithm: sha256WithRSAEncryption
51:a0:71:32:34:3b:f2:ab:0e:8c:82:ca:76:5e:cc:83:16:eb:
26:d6:a4:72:f2:7b:36:d7:a5:f0:e9:dd:c7:72:36:e7:63:0b:
9a:c8:2a:9a:46:fb:20:86:4d:1e:a8:a7:6d:5b:19:c1:5e:e1:
ce:87:a0:d4:65:7d:7d:a9:80:ec:c5:92:02:8b:ea:a9:e0:fe:
0b:5e:d7:a6:cb:51:79:1c:b9:f7:d5:28:4e:68:45:9f:15:4a:
b6:56:8b:54:d5:f9:43:eb:56:11:7c:17:cf:6c:ce:40:c8:bb:
a4:83:2c:c3:14:c8:ef:93:c4:fd:67:d6:74:3f:91:e7:ad:2b:
0a:e8:70:0c:b7:9f:6c:32:3d:fa:e5:8d:b1:a9:21:3b:89:48:
2b:25:74:b9:a7:0d:1f:bf:c5:c7:48:04:b9:39:d1:4c:0d:0a:
41:ca:e7:76:63:d8:9f:6f:8c:3b:67:46:09:12:a2:08:bd:84:
18:6e:f5:4c:10:69:6b:e9:8b:31:b5:e3:c4:ef:5a:bf:4c:32:
f3:f4:f2:d5:e5:32:52:df:c0:e5:6d:78:5a:3f:e7:89:5b:0c:
8a:88:32:ac:c5:cf:90:2e:34:3d:1e:9c:16:8d:3d:91:07:86:
1b:97:d0:89:ed:95:5c:44:66:71:33:5e:3f:f4:36:e6:59:3e:
73:ad:01:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:12 2024 by rpki-client on console-fra.rpki-client.org