Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ni5fPvZVhWcz03KXhVc3K3R7C04.cer
File: ni5fPvZVhWcz03KXhVc3K3R7C04.cer (raw, json)
Hash identifier: 5klDIRERoiG5OEYVuy7sEMyvjmskMUima3R10zFkcYo=
Subject key identifier: 9E:2E:5F:3E:F6:55:85:67:33:D3:72:97:85:57:37:2B:74:7B:0B:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01906911065BED566A8E2DC63CE505C15E58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/2/9E2E5F3EF655856733D372978557372B747B0B4E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 30 Jun 2024 12:14:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211244
IP: 2001:678:714::/48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 18:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:11:06:5b:ed:56:6a:8e:2d:c6:3c:e5:05:c1:5e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 12:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e2e5f3ef655856733d372978557372b747b0b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:dc:e9:28:88:9c:08:4a:48:e8:74:74:1c:
14:4a:71:a0:a4:83:92:36:29:8f:e1:59:e8:89:19:
7d:0e:e2:f8:d2:00:f5:81:83:7e:26:6b:60:f8:8f:
4d:62:cd:e4:08:eb:42:cb:fb:9b:24:4b:a6:08:d2:
a3:a8:6a:11:43:51:6a:1a:8b:f9:b7:f4:9a:4c:38:
1e:70:80:f1:aa:b2:bd:7f:7e:02:01:6c:93:6e:1b:
d9:18:b9:ba:1c:83:cf:35:13:d4:87:8f:ce:11:b7:
9d:62:97:3c:5d:ed:af:27:69:b2:e8:fc:34:18:00:
25:29:a6:cf:56:5e:8b:9f:cf:98:6a:c8:85:64:17:
5d:28:cf:fd:7b:8e:00:9f:ed:94:83:f4:40:9e:6a:
19:53:ae:24:3d:c9:87:75:9b:d2:7c:57:f5:47:86:
3b:36:c8:b4:52:2e:8e:77:16:d7:7c:0f:f2:67:c2:
63:7c:1a:5b:5c:d0:b4:09:ec:b4:d4:6f:da:2d:1d:
c4:5c:40:66:b5:d8:8b:02:ea:ad:c9:87:1a:ff:19:
5e:c0:4f:c5:48:87:4e:eb:52:40:06:63:0c:94:2a:
a9:27:a3:44:04:d7:a7:f9:b9:03:cc:a5:ca:89:83:
46:35:e0:fc:d8:d8:79:46:b1:06:9a:ac:06:f2:47:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2E:5F:3E:F6:55:85:67:33:D3:72:97:85:57:37:2B:74:7B:0B:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/2/9E2E5F3EF655856733D372978557372B747B0B4E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:714::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211244
Signature Algorithm: sha256WithRSAEncryption
96:90:a3:2e:73:43:1b:0a:39:b1:e2:9a:57:ef:7f:e5:fb:8d:
bc:8c:5a:24:a6:69:90:38:f3:01:46:62:69:cf:c3:a0:37:3d:
7a:c1:c1:23:f6:32:f3:ec:12:dc:d0:43:9f:4b:32:fd:b9:17:
32:eb:23:20:f0:14:7a:20:5f:23:72:83:2b:d7:fd:65:a5:55:
5c:49:81:25:2c:f2:df:4d:83:ca:d2:0e:f7:c9:7f:ec:2d:4f:
3b:1a:63:7b:93:7d:e2:84:f0:31:d7:c9:61:3c:e2:90:b4:28:
4d:85:52:8f:21:d5:44:77:ab:9c:bc:8e:11:f9:c6:73:e3:db:
cf:8e:21:0d:83:73:7a:9e:da:37:27:cf:11:78:35:e4:eb:83:
08:10:9e:e1:86:30:5b:0a:85:9e:a4:be:c5:7c:d9:30:a8:1e:
68:4d:0a:14:fe:bf:82:41:01:f5:e5:87:3b:f9:69:6f:11:01:
ef:f7:8d:28:72:1c:e3:e4:df:47:8c:39:5b:f7:2f:d6:48:52:
14:a9:e6:0e:9e:c2:1c:db:44:7a:55:88:ec:b0:db:f4:0f:74:
53:f4:0a:ec:ff:ed:7a:4e:14:5b:c5:01:ee:c1:5a:ec:91:c6:
87:c2:ad:49:0d:ca:9d:4f:52:30:7e:b3:77:c9:26:c0:c0:24:
b2:f4:15:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:10:42 2024 by rpki-client on console-ams.rpki-client.org