Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sR56ixF8osPBYPcq87aJJYQ5gSs.cer
File: sR56ixF8osPBYPcq87aJJYQ5gSs.cer (raw, json)
Hash identifier: Zb0lbL2orggdlwe0Zbck4LmDFILM0OH9xE8m0TobQwU=
Subject key identifier: B1:1E:7A:8B:11:7C:A2:C3:C1:60:F7:2A:F3:B6:89:25:84:39:81:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42548A5B1E25D7E432343CE81BC9C8F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/85c7b233-df39-4fba-b4fd-ee1fd4ce808e/0/B11E7A8B117CA2C3C160F72AF3B689258439812B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/85c7b233-df39-4fba-b4fd-ee1fd4ce808e/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202685
Validation: Failed, certificate revoked on Sat 13 Jan 2024 14:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:48:a5:b1:e2:5d:7e:43:23:43:ce:81:bc:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b11e7a8b117ca2c3c160f72af3b689258439812b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:54:23:2a:27:43:6e:d6:90:b4:bb:07:de:
2b:c5:a8:6e:f6:e7:ec:57:2b:62:08:f1:b3:c5:ba:
29:01:f6:fe:e0:af:00:29:6c:83:d3:77:61:8e:46:
47:f8:be:01:27:56:cf:37:e2:a7:9b:79:68:a4:8c:
b8:9b:18:30:ed:56:c9:98:2d:d4:bc:d0:06:df:99:
82:1c:2a:27:b8:8c:ce:e4:77:43:a5:0e:f2:21:24:
65:f7:c0:e7:ac:2b:d0:e6:37:25:b7:bb:fe:63:6d:
68:64:4c:cb:7b:bf:d9:aa:18:7b:bb:dd:5c:64:8e:
de:96:3e:7d:a4:35:1f:47:03:bb:12:32:00:2d:ee:
c9:31:f7:97:28:35:66:ce:b6:89:c0:a1:45:78:9d:
77:55:1c:1e:b5:93:5a:c9:f7:48:bc:a4:83:8a:09:
96:72:31:54:5b:78:d4:be:d3:b5:28:3f:88:87:77:
ac:4e:af:c9:ad:d6:77:90:51:30:6d:01:85:67:da:
1e:b4:ee:9e:b9:36:ca:2b:55:65:e4:5a:2b:7f:e4:
45:b2:32:3e:65:bb:f3:46:46:e0:4c:19:e3:4c:ba:
60:81:51:6c:58:d3:66:9f:23:ea:05:12:d4:63:a0:
bb:c7:0a:02:56:08:b5:b0:a8:09:c0:2c:f4:a8:aa:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1E:7A:8B:11:7C:A2:C3:C1:60:F7:2A:F3:B6:89:25:84:39:81:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/85c7b233-df39-4fba-b4fd-ee1fd4ce808e/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/85c7b233-df39-4fba-b4fd-ee1fd4ce808e/0/B11E7A8B117CA2C3C160F72AF3B689258439812B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202685
Signature Algorithm: sha256WithRSAEncryption
6f:ca:7c:85:8d:62:ee:fe:b2:82:0c:cf:df:0e:43:f7:4c:65:
b5:1d:f3:b1:73:ce:f4:2c:21:87:f3:30:38:a3:b6:50:67:db:
00:53:5c:c9:bf:a4:d4:64:a6:af:86:00:4f:98:49:ab:44:fb:
75:1c:5c:cb:85:39:56:72:20:9d:a5:d4:e4:74:ab:a3:c3:54:
3a:6d:de:39:fb:ec:86:74:47:7d:8b:7e:dd:d3:07:3e:6f:f0:
a8:2e:89:bb:ca:49:3f:7a:18:24:0e:ab:2c:4f:94:1d:54:08:
29:d1:55:01:70:67:f8:55:18:a0:d2:26:7d:59:e6:6d:a5:74:
df:2b:df:c2:3e:f5:9f:49:95:92:4d:7a:ef:3a:21:3d:e4:eb:
5b:c1:b1:29:96:d7:08:56:dc:af:6c:09:82:1d:06:74:5f:9d:
8a:6e:e1:a8:88:9b:19:06:1a:74:91:2d:45:15:75:a9:3f:96:
df:e9:20:b2:43:65:82:ae:29:84:6a:02:15:10:eb:15:9b:3e:
19:80:09:57:4c:f3:1a:5f:13:9e:e5:c1:17:67:80:a0:3c:95:
ad:29:0d:d3:43:90:b3:04:34:e5:38:9a:b1:ad:60:00:1b:20:
21:7e:c0:48:32:ff:a7:58:53:13:72:6c:e6:99:d8:e1:e7:45:
c6:5f:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:51 2024 by rpki-client on console-ams.rpki-client.org