Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vG2Rqrh1sUq-r5NpbD4KyQ902Y0.cer
File: vG2Rqrh1sUq-r5NpbD4KyQ902Y0.cer (raw, json)
Hash identifier: xxvSvW8+Xe1E7wjgY/QUnTKzRZTHEUlrlQPAVEoVcd4=
Subject key identifier: BC:6D:91:AA:B8:75:B1:4A:BE:AF:93:69:6C:3E:0A:C9:0F:74:D9:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018BF587B84CAB0FE046DFE614FB24E84785
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/Pong/2/BC6D91AAB875B14ABEAF93696C3E0AC90F74D98D.mft
caRepository: rsync://rpki.co/repo/Pong/2/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Wed 22 Nov 2023 05:36:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 209025
Validation: Failed, certificate revoked on Fri 01 Dec 2023 11:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f5:87:b8:4c:ab:0f:e0:46:df:e6:14:fb:24:e8:47:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 22 05:36:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc6d91aab875b14abeaf93696c3e0ac90f74d98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:5c:17:1f:2b:6f:58:7d:3a:7b:47:f0:67:
98:85:8d:e4:8b:61:71:7b:fc:5e:03:85:21:17:95:
6e:9e:76:9e:ee:eb:c3:a6:3a:44:ce:b6:39:e4:cc:
ca:da:ca:c6:07:f9:d4:c3:c4:97:49:7c:73:b5:2e:
b9:33:be:fe:e3:fb:15:3a:8d:76:82:f6:2d:a3:8e:
c8:38:1c:45:02:1b:ab:84:2a:8e:61:a8:33:dc:36:
ca:3f:49:e1:0a:63:d9:ed:13:d1:e4:7b:1e:4b:dc:
5b:e1:48:fa:38:94:1a:2a:1e:93:0b:6d:74:5b:2f:
62:2d:ec:96:aa:f8:14:52:6a:3d:49:f9:85:3a:5c:
e9:48:c3:9c:bc:87:50:fd:9b:84:67:3d:da:81:75:
b2:87:2a:c2:2c:0e:48:7b:21:a0:fb:80:7e:f3:88:
65:96:96:19:a4:14:0b:cc:10:f9:93:df:32:0f:32:
a0:05:6b:e6:74:5c:22:ff:26:1d:fd:ec:8a:fc:65:
dd:32:8e:fd:56:b0:af:1f:7c:56:39:71:dc:ce:71:
ba:45:bc:31:1a:13:f6:66:1f:8f:73:b2:1b:0b:d1:
2a:22:fa:5f:18:67:5d:41:cf:31:26:54:96:ac:80:
1f:e1:5e:fd:94:2c:e6:f7:15:3a:4f:e3:0e:e8:fe:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6D:91:AA:B8:75:B1:4A:BE:AF:93:69:6C:3E:0A:C9:0F:74:D9:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Pong/2/
RPKI Manifest - URI:rsync://rpki.co/repo/Pong/2/BC6D91AAB875B14ABEAF93696C3E0AC90F74D98D.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209025
Signature Algorithm: sha256WithRSAEncryption
96:67:0d:26:ab:ae:12:d0:dc:52:b0:1f:96:8a:04:a5:93:f0:
4b:12:76:db:f9:d8:a6:ff:1b:ee:7f:93:18:7e:0c:96:6a:54:
0f:e4:93:df:e5:b5:42:62:ae:82:62:8c:70:ee:0b:07:e2:07:
8c:03:12:1c:72:25:5e:81:d2:ab:00:2f:f4:32:d0:ba:23:1b:
db:ea:ad:a0:23:af:1f:1f:ae:ca:80:b3:d5:6d:21:6a:fe:24:
e5:41:0b:97:73:d9:cf:cd:2b:26:78:b6:17:b6:6f:05:ec:1c:
cc:82:de:56:27:89:a4:55:a1:b1:b0:32:1f:5c:9c:50:db:cf:
7a:96:e4:12:a2:45:08:2b:9a:0c:d6:2f:0b:54:35:58:fa:81:
84:e3:49:ff:fb:2c:9d:91:a4:6f:05:6a:5c:4f:48:aa:34:1e:
6e:67:f5:ba:0e:42:61:9f:0b:ba:20:5b:f4:7a:bc:f9:ba:a9:
fb:2e:4c:d2:41:14:81:4f:0a:9b:01:d7:84:0e:0b:ca:22:3f:
a7:be:ad:7c:85:bd:2c:8e:af:55:03:a2:4c:f3:79:2a:80:15:
d3:33:c9:cb:c1:de:d4:07:c5:22:ce:86:70:56:3c:58:33:f9:
7f:5f:c5:0d:eb:4d:87:09:43:d4:98:c9:c4:14:6f:53:6d:9d:
9a:d9:2d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:39 2024 by rpki-client on console-fra.rpki-client.org