Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sBgDpt-xgS_lYlHQX59aRmvQbQ8.cer
File: sBgDpt-xgS_lYlHQX59aRmvQbQ8.cer (raw, json)
Hash identifier: YtvfC6vC2GlOAp5+I4s7+NIbEz16ORe6zGaDCRjyqHY=
Subject key identifier: B0:18:03:A6:DF:B1:81:2F:E5:62:51:D0:5F:9F:5A:46:6B:D0:6D:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019069CB472F769647AFCEFC2F086A87F286
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/2/B01803A6DFB1812FE56251D05F9F5A466BD06D0F.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/2/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 30 Jun 2024 15:37:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214835
Validation: Failed, certificate revoked on Sun 07 Jul 2024 17:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:cb:47:2f:76:96:47:af:ce:fc:2f:08:6a:87:f2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 15:37:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b01803a6dfb1812fe56251d05f9f5a466bd06d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:d5:41:eb:ca:0e:7b:7f:4b:b5:66:10:f6:
b9:ca:98:23:4e:ca:10:bb:6f:bc:d0:11:9e:4e:ef:
e3:28:83:5d:37:ba:d7:4b:7f:48:e7:39:3a:e4:4f:
ba:4b:8d:07:f0:03:f0:e8:33:b7:91:0b:7c:28:2d:
67:e7:e3:d6:6c:3c:d9:6f:7c:37:6a:1a:bf:41:f6:
d6:85:04:ca:ce:fe:16:36:6c:26:ce:80:ff:59:31:
8b:3f:e4:7e:21:c3:71:8f:7e:8e:ed:a8:ca:d5:16:
f0:28:53:38:6c:f8:c9:b7:f8:9e:ed:ea:c2:37:a8:
8b:73:44:09:4f:88:f8:80:4f:30:bf:c7:33:d2:1d:
48:fd:72:d9:17:71:48:6a:e8:9b:0b:ce:e5:29:98:
06:cb:c8:83:1c:59:b0:f4:64:d5:6c:d6:2e:80:e2:
ea:dd:94:23:60:60:c5:de:c4:8d:d6:c5:f9:83:87:
0c:a5:66:d1:86:4f:6b:c6:02:55:64:30:8d:e6:2a:
6b:7f:66:2f:2b:f9:63:e4:05:09:81:73:08:69:58:
05:b6:28:d6:64:a6:d2:4c:f5:12:07:fc:13:26:5f:
14:b2:cc:0e:8f:95:52:4a:8e:a7:83:98:33:7e:f4:
69:d1:8e:dd:97:6b:b1:35:82:a3:fb:76:47:d5:3f:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:18:03:A6:DF:B1:81:2F:E5:62:51:D0:5F:9F:5A:46:6B:D0:6D:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/2/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/2/B01803A6DFB1812FE56251D05F9F5A466BD06D0F.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214835
Signature Algorithm: sha256WithRSAEncryption
8f:78:23:d7:c5:5d:3d:8b:af:d2:3e:27:66:a2:56:82:6a:ab:
0f:85:44:23:e5:f1:39:02:5c:ab:cf:45:f8:df:41:36:e0:3e:
87:7c:dc:2a:62:94:34:0d:6a:89:ec:de:63:56:e4:6e:5b:93:
ed:84:16:2d:12:9e:c4:51:07:a8:4a:ee:fc:d0:a3:e6:6b:a6:
c4:00:ae:74:c1:55:fa:b2:2d:02:4a:a9:5a:f2:e3:11:28:d9:
af:fa:38:10:93:e7:87:f8:4a:ba:68:86:43:73:d8:de:30:d4:
b9:3f:a5:27:aa:d3:9c:ce:c7:ca:b1:1d:2a:d1:fd:6f:2b:1f:
a1:63:9d:a9:a2:ce:18:ef:a2:94:b9:c0:ef:32:2a:ec:bd:33:
69:bf:c7:ad:48:fd:b6:11:ae:b3:45:8d:5c:d5:0a:e5:96:15:
ce:a4:0f:09:ba:35:34:30:65:02:e0:56:39:8c:52:55:48:49:
f4:f1:a3:82:d8:48:00:5a:45:2a:e3:56:b6:89:2b:65:02:31:
ad:60:73:33:6a:46:95:e4:c7:c1:6d:c7:1f:2d:91:77:2d:5a:
9c:51:16:a6:2e:26:0d:a7:87:34:a7:7b:01:49:a6:6a:96:10:
d7:3d:64:20:83:70:47:0d:03:0f:34:4d:2f:1c:d6:0a:7c:92:
93:8f:4f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:10:42 2024 by rpki-client on console-ams.rpki-client.org