Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/paNuv2SKZe0CBE6VNTaMIiX7arU.cer
File: paNuv2SKZe0CBE6VNTaMIiX7arU.cer (raw, json)
Hash identifier: caG3Lx1yZ+5Og1jkbmiryRlT036nXwSC+k9RdFy9RKA=
Subject key identifier: A5:A3:6E:BF:64:8A:65:ED:02:04:4E:95:35:36:8C:22:25:FB:6A:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B5B5CAE3DC8DBA9FCD38690920A7CEE35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/0/A5A36EBF648A65ED02044E9535368C2225FB6AB5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 23 Oct 2023 07:08:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 47272
Validation: Failed, certificate revoked on Sat 25 Nov 2023 08:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:5c:ae:3d:c8:db:a9:fc:d3:86:90:92:0a:7c:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 23 07:08:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5a36ebf648a65ed02044e9535368c2225fb6ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:5d:69:3e:5c:45:44:07:6e:13:5b:9a:4c:
d2:c5:67:98:93:95:a3:a1:75:37:42:39:40:51:45:
23:82:0f:cd:64:58:d8:cd:59:a1:14:24:8b:14:06:
2c:25:ec:23:cf:79:9d:e4:ed:f4:9f:2e:94:49:97:
38:e8:3a:82:e8:e4:19:55:61:d6:a9:a5:8a:8b:19:
85:61:d3:01:b2:9a:4e:f8:ec:04:fd:49:f5:af:57:
a3:d1:93:e1:bd:3d:93:db:aa:a1:bd:a1:dc:aa:a3:
ec:61:d3:1a:55:60:b7:dd:0c:25:79:e5:2d:8a:77:
3f:a4:ce:49:bc:eb:5a:b7:cc:4a:90:80:a4:a3:23:
e1:39:e7:0d:74:7e:49:4f:e9:5e:12:2c:85:fe:ac:
80:1e:77:7f:17:74:7e:c5:c4:0d:85:42:fe:9d:bb:
89:8f:f2:70:95:87:2e:ff:8d:da:ea:c2:31:09:04:
b9:ce:f4:dc:33:f9:94:c3:59:bb:d4:18:83:8f:e8:
ad:70:ba:08:82:dc:54:66:a5:5c:d9:cc:7c:36:b3:
0d:11:b9:06:78:4e:94:aa:1d:df:ab:12:8c:7f:41:
d2:ab:81:db:26:ee:36:1a:04:f1:3d:bf:ad:7c:91:
81:fe:51:f1:2a:c5:78:57:c3:4b:29:90:73:a9:d8:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:6E:BF:64:8A:65:ED:02:04:4E:95:35:36:8C:22:25:FB:6A:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/0/A5A36EBF648A65ED02044E9535368C2225FB6AB5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47272
Signature Algorithm: sha256WithRSAEncryption
22:0e:b1:90:8c:e1:b6:09:b3:2a:d6:8d:cf:a9:39:bb:73:e1:
9b:4b:95:d3:f3:38:c5:27:af:6e:e5:72:e5:ea:dc:18:9f:84:
3a:44:9f:e5:e2:a9:27:85:54:bb:ac:30:41:98:1b:44:7a:66:
6b:e8:52:56:bd:e7:20:ac:fb:07:c3:d8:af:f7:0a:05:7e:85:
18:b1:5c:6c:f1:31:6b:8b:04:d9:34:c6:50:8c:b0:6c:d1:a2:
ef:70:39:4e:ed:2e:6c:79:88:29:30:5d:da:ec:a2:cd:c9:92:
10:75:c3:5f:f1:ad:c8:79:5a:2b:e5:d8:3f:bd:6b:66:a5:2d:
f6:1f:af:86:55:9c:dd:76:52:ed:43:72:27:8a:53:9e:ee:9b:
d2:6d:2f:e7:8c:17:6e:32:6c:84:7e:36:9b:42:29:37:d4:dc:
57:d6:23:ba:d3:79:46:d8:83:2d:aa:6d:17:f9:07:38:6a:28:
4f:25:8c:b2:81:ab:0d:2e:e8:23:d3:60:bb:dc:da:0c:6d:bb:
d7:c7:e2:5a:2f:a2:17:43:12:83:78:6a:52:0e:6a:da:6d:27:
52:a3:11:ee:62:8f:0d:7e:72:3e:f9:20:4a:70:67:1e:ac:50:
e7:4e:2e:ae:38:8a:2a:8c:09:e6:f1:7f:c8:47:af:30:3d:bd:
f3:b0:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:02 2024 by rpki-client on console-ams.rpki-client.org