Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t9_fDlHm-D1uEKvhM0eClFFGZGI.cer
File: t9_fDlHm-D1uEKvhM0eClFFGZGI.cer (raw, json)
Hash identifier: UTX2vdgjmdxDLgD8+6V93Cm/KMwql97hahjNvJ5Mebs=
Subject key identifier: B7:DF:DF:0E:51:E6:F8:3D:6E:10:AB:E1:33:47:82:94:51:46:64:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D05572E66A80C1D54BDD5BDEAA91AF10E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/89eed0-aa26-4fc8-99b1-cd905b45770c/1/t9_fDlHm-D1uEKvhM0eClFFGZGI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/89eed0-aa26-4fc8-99b1-cd905b45770c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 14 Jan 2024 00:20:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215899
Validation: Failed, certificate revoked on Tue 20 Feb 2024 06:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:05:57:2e:66:a8:0c:1d:54:bd:d5:bd:ea:a9:1a:f1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 14 00:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7dfdf0e51e6f83d6e10abe13347829451466462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:2e:be:cb:f6:20:53:7b:2b:13:d7:03:36:
8a:b2:a1:00:f7:bf:d1:7d:0f:dd:b8:c6:60:85:a0:
c1:a9:0a:06:36:79:b9:9a:26:96:80:42:73:62:fe:
9a:ef:84:34:e5:10:f9:49:be:f8:25:07:f9:6b:49:
a2:7f:c6:c7:a5:6d:8f:4b:0c:e6:32:42:37:f3:15:
35:6c:4d:5b:4b:32:4d:8c:e0:ad:f6:53:08:d6:6a:
e0:c5:ab:d0:d9:2a:00:4f:7d:16:4a:cf:c1:e4:4b:
e5:a0:03:4f:7f:41:6e:be:ba:98:6c:31:98:22:7e:
29:7c:91:b3:2c:61:3b:28:45:49:5c:15:4a:ee:9a:
32:0d:6b:49:26:51:29:10:ad:33:e7:86:23:58:c3:
68:b3:c6:36:83:47:34:98:a1:b0:3c:15:ee:48:c6:
5a:7e:53:91:d2:8f:12:87:e0:99:81:3a:e6:a5:be:
c4:96:6f:d9:12:09:cc:36:d7:1d:30:42:79:3a:ef:
55:01:61:20:1c:ad:b5:65:86:69:0d:a3:54:63:b0:
14:a7:0f:43:70:e2:3f:80:ee:6d:e7:3e:ed:e0:63:
a9:fa:22:2a:0a:41:66:bf:9f:ce:c4:71:e2:6d:f4:
41:33:97:0d:05:4b:7f:7c:7c:a3:74:c3:ab:b1:e8:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DF:DF:0E:51:E6:F8:3D:6E:10:AB:E1:33:47:82:94:51:46:64:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/89eed0-aa26-4fc8-99b1-cd905b45770c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/89eed0-aa26-4fc8-99b1-cd905b45770c/1/t9_fDlHm-D1uEKvhM0eClFFGZGI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215899
Signature Algorithm: sha256WithRSAEncryption
6d:e9:52:67:1e:c5:4a:5b:e5:cd:8b:6a:a2:29:cc:2e:1d:7f:
7b:a7:87:31:1e:3f:5d:8a:a2:8a:f4:c1:c5:10:92:35:49:b8:
89:68:37:74:5e:07:c4:3b:2e:e8:9a:92:30:ec:7f:71:e1:37:
f9:01:77:03:31:f6:b1:e4:a6:d1:5a:c9:5f:20:82:25:4f:14:
2b:09:ed:82:02:86:10:ab:52:dc:bb:26:4f:d3:47:5d:88:a4:
5c:b6:75:af:76:78:0a:04:b4:93:e0:0c:5c:bc:47:ac:f3:16:
40:eb:9b:79:bc:ec:7b:b0:b4:dc:0c:89:a6:ea:4e:aa:08:d1:
48:36:fa:db:08:5d:fe:53:f9:99:61:d7:e3:9a:10:2c:83:fc:
06:d8:50:1e:45:db:04:40:58:dd:5a:b4:4e:98:ca:e9:4f:85:
c7:23:f9:5b:9d:99:43:91:fe:af:9c:74:ee:8f:88:72:ea:94:
c1:3a:7a:7a:55:7d:fd:e5:04:3d:b0:7f:ed:c3:9d:88:7d:f9:
19:f9:1a:68:21:85:d1:0e:0b:c2:e0:ae:b9:b2:d6:a9:9f:8f:
20:19:96:86:6a:8c:85:63:bf:0b:7d:a5:cf:79:9b:4e:50:ab:
96:e9:69:9c:fb:53:3f:b0:e1:dc:c0:d2:36:dd:18:a5:f9:e2:
cf:2a:8c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:00 2024 by rpki-client on console-ams.rpki-client.org