Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o-ejK-FcedSF13XihF2FscdEAoE.cer
File: o-ejK-FcedSF13XihF2FscdEAoE.cer (raw, json)
Hash identifier: kU3Ftuz0QnlaVS/G4uXV/Qe1gUAK2CsZ980uSKM59D4=
Subject key identifier: A3:E7:A3:2B:E1:5C:79:D4:85:D7:75:E2:84:5D:85:B1:C7:44:02:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B367ECAEE847888E6CF3D5836E9DDE7B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/21cb3348-665e-40cf-aa19-756be95ea30a/0/A3E7A32BE15C79D485D775E2845D85B1C7440281.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/21cb3348-665e-40cf-aa19-756be95ea30a/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 16 Oct 2023 03:19:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 47311
Validation: Failed, certificate revoked on Tue 28 Nov 2023 10:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:36:7e:ca:ee:84:78:88:e6:cf:3d:58:36:e9:dd:e7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 16 03:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3e7a32be15c79d485d775e2845d85b1c7440281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:79:40:17:6c:86:9c:e5:a5:78:d3:e7:76:
47:31:dd:b5:29:c8:a7:5d:96:35:9f:5e:51:ba:12:
86:88:40:2a:cb:20:ce:1f:73:d6:a5:b8:5a:c1:42:
8f:11:81:af:85:b9:d3:92:8a:88:ce:37:e9:c6:af:
00:cc:b0:f5:0b:b6:4d:43:f9:05:6a:b3:31:26:30:
29:41:1c:d4:a9:5e:41:e9:f9:83:2f:36:6a:52:c4:
1a:e5:60:2b:0d:9d:4e:17:57:6c:e6:bc:f8:fa:dc:
a4:af:b6:2a:20:84:fe:89:f3:db:92:3b:cc:b2:d6:
45:28:35:da:9c:b6:d1:cb:66:9f:07:e0:50:66:9f:
15:36:db:db:29:d0:3c:16:c0:c2:34:08:16:8f:49:
f1:cf:75:cc:f2:4c:24:fe:43:47:c6:34:1a:0e:42:
72:00:40:f2:f0:7a:cb:11:ee:84:de:e4:24:da:c8:
74:de:13:97:10:fb:f0:f1:97:54:85:2f:21:8b:0c:
86:2a:6d:eb:e0:11:95:98:d2:4b:06:fb:67:ee:8f:
f9:ee:78:26:ea:fa:a3:aa:12:e4:47:5f:46:68:58:
15:54:7f:b7:c3:9b:3a:1c:dc:03:ec:2f:5d:2e:59:
af:cf:34:3c:ff:05:34:98:46:71:81:64:36:b8:92:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E7:A3:2B:E1:5C:79:D4:85:D7:75:E2:84:5D:85:B1:C7:44:02:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/21cb3348-665e-40cf-aa19-756be95ea30a/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/21cb3348-665e-40cf-aa19-756be95ea30a/0/A3E7A32BE15C79D485D775E2845D85B1C7440281.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47311
Signature Algorithm: sha256WithRSAEncryption
46:69:75:fb:ff:00:21:9c:5d:6c:0b:f5:9d:9a:07:63:da:d0:
d0:04:69:6d:aa:06:d6:ee:9b:8f:5b:62:d9:ab:91:c9:0a:77:
d8:07:1d:cf:14:d6:01:a2:30:a7:e5:ad:b2:16:84:52:b3:af:
0b:bd:45:b6:19:c8:d7:b9:02:3a:88:1c:e4:82:b9:56:ca:fa:
8a:f5:b5:05:b1:e0:3d:64:5b:bc:0e:e8:0a:3f:23:4b:c5:f4:
af:d9:67:46:14:9f:0f:d0:84:a3:a5:21:65:ce:4b:25:9d:58:
f9:9c:de:2d:c4:bb:45:eb:14:01:d3:02:07:86:84:93:c2:26:
8d:ce:2f:d4:cd:57:8f:ca:08:83:bc:f5:8b:9b:e5:84:2e:3e:
8c:8a:aa:c1:2a:8a:15:73:d8:2a:1f:bf:31:27:88:c3:66:bf:
19:3d:36:06:cf:57:7e:a7:85:c7:10:6a:cc:b4:b4:c1:5b:0a:
ab:c0:a1:49:ed:be:86:1d:6c:74:3f:bd:f1:97:65:be:95:bb:
c7:ba:5a:51:b2:3c:b5:b1:6f:56:f9:22:e2:d1:ca:61:5e:52:
95:c0:c5:7d:84:96:57:60:06:c5:d9:b4:1f:fe:84:f2:58:35:
14:0f:06:58:f0:19:5c:b0:5d:7f:14:3b:8d:ff:2c:d4:51:18:
e8:03:80:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:31 2024 by rpki-client on console-fra.rpki-client.org