Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uJtnfN3uzsFAjTRbCQAFeX0IxXc.cer
File: uJtnfN3uzsFAjTRbCQAFeX0IxXc.cer (raw, json)
Hash identifier: /B0/l1wnzzC0/m3B5gply3AL4rPeu7AM5Ja4v8ZGADc=
Subject key identifier: B8:9B:67:7C:DD:EE:CE:C1:40:8D:34:5B:09:00:05:79:7D:08:C5:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DAB958E463E078886A7F28095FA3D7CFB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/49beca-21a2-45cd-b64f-13aa7e49ad07/1/uJtnfN3uzsFAjTRbCQAFeX0IxXc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/49beca-21a2-45cd-b64f-13aa7e49ad07/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 Feb 2024 07:05:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215500
Validation: Failed, certificate revoked on Sat 17 Feb 2024 15:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ab:95:8e:46:3e:07:88:86:a7:f2:80:95:fa:3d:7c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 15 07:05:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b89b677cddeecec1408d345b090005797d08c577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:8e:3e:f0:25:9b:ef:56:fc:aa:df:10:d0:
1b:9a:00:d4:d9:e1:ae:1c:61:27:d2:83:6d:f1:9d:
ba:13:e3:0e:f9:ea:7b:d6:54:d6:ae:d5:f0:2d:dc:
bf:ad:fa:19:0e:37:58:0a:5e:fc:7f:1e:09:c2:1a:
fb:36:af:cb:a8:90:88:cc:74:6b:3c:3a:72:e3:a3:
dc:a0:00:a0:93:46:6b:f7:e2:2b:cb:91:0d:94:9a:
c2:2e:b3:ed:c8:96:e6:85:50:8a:d4:8d:de:9a:ba:
69:6d:95:bb:d4:4c:79:76:98:c4:e7:2d:16:e7:92:
c0:48:e3:89:b4:fb:2b:d7:79:51:e0:82:13:94:f5:
16:9c:70:8f:40:d3:fc:02:25:b8:29:34:21:01:fa:
0a:03:54:1c:39:64:3e:61:32:45:2e:56:d1:26:7f:
a7:ab:04:8c:da:64:36:3f:a5:b2:e1:73:94:56:93:
5a:46:17:fa:e7:68:49:4a:dd:0e:59:08:82:25:0f:
27:d7:bb:a7:36:fb:29:4c:95:68:6a:00:5e:2e:1d:
8a:63:a8:ab:17:75:84:93:ec:10:89:f3:e0:3b:b9:
87:b1:5e:d5:4e:e3:de:cf:91:ae:ba:0f:d3:1c:e8:
ac:3b:f6:84:22:95:f8:a3:64:24:1e:2f:67:35:84:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:67:7C:DD:EE:CE:C1:40:8D:34:5B:09:00:05:79:7D:08:C5:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/49beca-21a2-45cd-b64f-13aa7e49ad07/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/49beca-21a2-45cd-b64f-13aa7e49ad07/1/uJtnfN3uzsFAjTRbCQAFeX0IxXc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215500
Signature Algorithm: sha256WithRSAEncryption
08:ec:77:81:6f:f4:a9:19:57:d6:0a:74:de:36:0d:c2:b8:88:
0a:3d:38:ff:cb:d0:b8:a0:49:59:b1:0a:57:00:0e:1e:16:16:
92:4e:cb:3c:24:90:44:48:0d:2c:49:2f:f6:14:77:cc:1d:a9:
02:ad:f9:60:69:06:ac:f0:63:64:1c:6d:44:66:86:b1:af:fb:
a0:de:df:b3:e4:06:2d:c5:a0:4c:43:2a:90:f1:46:54:7e:02:
c4:76:d5:c8:dc:e1:6a:d7:fe:a3:e1:a3:c1:8a:d4:cf:23:2d:
9c:5c:fc:b9:71:7d:e8:1c:39:4b:1e:36:d5:92:d8:db:9f:73:
0d:0a:05:3a:b6:e6:a6:65:e9:9f:85:08:1b:b8:79:f8:88:74:
ed:aa:3a:fb:79:bf:e2:4e:50:b3:e9:5a:3d:24:1f:8d:45:b0:
f3:5e:24:43:97:fd:c2:c2:ca:53:63:d3:58:0a:22:d5:27:5a:
f9:8e:c2:e3:9f:92:31:ad:4d:d0:c7:d2:23:af:19:6f:18:dc:
43:3e:8b:79:76:7c:cf:c9:20:44:dc:93:4a:cd:ed:92:33:6d:
c2:6b:3f:be:33:21:a8:66:c6:a6:fe:d8:60:84:06:7a:96:19:
f6:53:6f:f1:9a:a9:99:67:b2:e8:fb:5a:57:84:4b:a0:0b:12:
5d:3b:93:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:37 2025 by rpki-client