Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pErhJVhekKZn5UQirIVaeVzeGWs.cer
File: pErhJVhekKZn5UQirIVaeVzeGWs.cer (raw, json)
Hash identifier: yGtPO5wv3Hly2G5PtEDSXmJHi45lEruGYei5sD9LJIY=
Subject key identifier: A4:4A:E1:25:58:5E:90:A6:67:E5:44:22:AC:85:5A:79:5C:DE:19:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DC1AAA053B232FB9B4498F6CF9AD583E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/db88cd-1f2d-45b7-8a2a-4e5ec0f4d2cf/1/pErhJVhekKZn5UQirIVaeVzeGWs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/db88cd-1f2d-45b7-8a2a-4e5ec0f4d2cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 19 Feb 2024 14:00:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209147
Validation: Failed, certificate revoked on Wed 21 Feb 2024 13:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:aa:a0:53:b2:32:fb:9b:44:98:f6:cf:9a:d5:83:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 19 14:00:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a44ae125585e90a667e54422ac855a795cde196b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:82:8d:a2:f2:e4:62:55:89:d4:ad:a0:8e:
6f:11:a4:c3:03:59:9a:5f:11:13:63:64:0a:05:c7:
b7:dd:49:79:20:cb:0d:1e:d3:cc:bd:ee:31:aa:2a:
af:9f:08:be:d1:4c:b3:be:b2:93:62:c6:51:bb:e6:
00:33:a0:50:21:99:84:b6:7b:1c:b8:af:b8:76:5f:
14:77:da:3c:02:ee:1b:d4:19:17:6a:0d:18:b1:66:
d4:b7:c8:f3:70:95:3c:f6:bb:55:c9:55:12:ef:20:
9f:a0:ec:f4:e3:c7:90:a4:34:e7:a7:4a:ae:4b:5a:
e5:d1:7b:bf:18:56:34:c9:28:b2:ce:a5:a0:44:99:
69:bc:3e:b0:68:4b:94:35:20:c0:18:fe:d3:cc:71:
ad:ad:2b:e1:41:66:c8:90:cd:28:29:ed:1d:d2:14:
d9:0a:7b:a9:c6:3c:a0:55:88:c4:06:d5:05:1c:86:
98:e3:1e:85:dd:da:da:36:d5:b7:5e:3a:25:1a:b5:
8d:e5:20:d6:23:54:e6:77:b1:ab:a7:20:dc:87:6e:
db:6b:54:34:56:94:2d:2a:a3:3c:b2:b7:55:60:c6:
06:c9:43:94:51:02:a2:44:e7:53:a2:44:a3:a8:ca:
91:2c:58:b9:55:89:12:a9:8c:0c:ee:a4:cf:af:33:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4A:E1:25:58:5E:90:A6:67:E5:44:22:AC:85:5A:79:5C:DE:19:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db88cd-1f2d-45b7-8a2a-4e5ec0f4d2cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db88cd-1f2d-45b7-8a2a-4e5ec0f4d2cf/1/pErhJVhekKZn5UQirIVaeVzeGWs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209147
Signature Algorithm: sha256WithRSAEncryption
6e:6e:1b:08:21:31:cc:be:90:1d:b7:87:c6:de:c5:c7:fd:9e:
48:93:48:1a:30:85:5e:3d:ad:52:a4:0d:63:96:df:ca:6f:97:
49:bb:bf:57:1c:ef:c3:d1:9f:47:a3:7c:a3:8d:74:d7:a1:bd:
0d:10:4c:a1:da:08:f3:f6:81:bc:e1:17:5a:37:0b:37:f4:65:
87:cb:0f:04:18:1d:ee:c1:55:f5:01:1f:cb:6d:86:e3:5f:fe:
d0:10:eb:21:2f:4f:3d:49:52:08:1b:87:10:13:de:de:13:96:
4c:bc:0b:28:0b:3e:f8:2b:8e:33:83:8b:fb:f4:18:be:fe:23:
57:64:71:b5:23:98:dc:06:b0:5e:15:3f:f7:43:ef:e3:d4:d3:
60:c3:1d:b4:79:a7:a2:d9:bf:f8:e4:72:52:cd:53:98:7f:f2:
c1:00:14:12:84:05:55:8f:0c:ba:1e:77:29:3c:fd:d9:84:d6:
10:1b:02:db:98:b6:1d:9a:f7:61:00:78:bf:dd:22:1a:4f:84:
52:20:7f:c1:5c:5e:83:14:39:54:c9:16:f1:bb:0d:78:16:8b:
f8:d8:27:6e:b0:e0:ae:e0:c6:a5:13:b0:fa:04:63:4b:ca:5c:
af:ef:d4:fd:32:8f:63:78:54:b3:01:65:61:9f:a8:ad:5f:38:
ba:a9:c1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:56 2024 by rpki-client on console-ams.rpki-client.org