Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vgU7Kap7OLqZh9JYgecWGa9-0kM.cer
File: vgU7Kap7OLqZh9JYgecWGa9-0kM.cer (raw, json)
Hash identifier: KCvGqsR9Ba0Z9IztHmHxvDYSunVYqsJkrV11x2DZCqU=
Subject key identifier: BE:05:3B:29:AA:7B:38:BA:99:87:D2:58:81:E7:16:19:AF:7E:D2:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C113C72F89DAD008F434619414A21DDE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/efdaa2-acf4-4afd-8b65-762c87b17032/1/vgU7Kap7OLqZh9JYgecWGa9-0kM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/efdaa2-acf4-4afd-8b65-762c87b17032/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Nov 2023 14:43:43 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 43721
Validation: Failed, certificate revoked on Thu 30 Nov 2023 15:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:3c:72:f8:9d:ad:00:8f:43:46:19:41:4a:21:dd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 27 14:43:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be053b29aa7b38ba9987d25881e71619af7ed243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:ed:86:87:7b:b2:d3:71:f8:87:12:39:bc:
c7:62:03:6a:01:86:1a:ab:21:e7:28:9e:bd:5d:ed:
ae:65:94:c8:2e:01:83:58:93:ad:c6:67:8e:1d:d7:
be:ef:fe:4a:3a:2c:86:04:3b:34:74:13:50:5c:11:
32:8f:26:ae:08:82:64:3a:0c:02:a8:27:b7:ff:73:
99:7e:68:b6:69:57:3e:dd:ae:a1:12:3e:b1:1f:05:
0c:0e:f0:ed:30:a6:3c:ff:54:b0:23:24:4c:51:7f:
44:08:2d:bb:41:16:13:1a:0d:ed:c3:77:fa:a8:cb:
66:3d:02:91:c3:d4:16:d9:69:9d:8c:48:2f:c1:18:
67:3e:fc:5c:b6:e6:8c:c8:0e:f5:19:7a:ea:17:0d:
3b:e8:a0:1d:19:4e:fe:5f:1a:1e:e5:c9:b5:c5:26:
1a:47:85:4a:f1:a9:ab:6f:8a:eb:dd:65:7c:79:4c:
0b:f3:87:d8:c8:a2:ae:5d:1f:44:b1:b2:31:88:30:
79:b1:4a:17:d4:2c:50:e0:23:38:0f:c6:bd:15:03:
5a:d1:21:a9:ea:70:e4:23:0e:cf:57:1e:9f:c7:e6:
7a:82:c3:96:25:08:38:92:25:f6:8b:5b:de:24:5b:
9f:af:7f:48:8f:a1:45:db:a5:9a:d5:e3:f1:97:6d:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:05:3B:29:AA:7B:38:BA:99:87:D2:58:81:E7:16:19:AF:7E:D2:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/efdaa2-acf4-4afd-8b65-762c87b17032/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/efdaa2-acf4-4afd-8b65-762c87b17032/1/vgU7Kap7OLqZh9JYgecWGa9-0kM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43721
Signature Algorithm: sha256WithRSAEncryption
af:8d:10:a9:db:9e:ea:69:23:c2:e2:d5:85:0d:cf:19:6b:fe:
31:e2:a2:34:fa:13:64:13:f8:1a:12:4d:08:c2:99:ed:da:de:
dd:a5:e7:1e:26:57:db:8e:98:ca:2f:c3:d3:25:ac:49:55:ea:
b9:f5:f9:48:8a:b6:30:de:eb:31:24:cc:15:cb:e3:d7:76:8e:
01:e6:cc:ad:af:16:d3:e3:f3:d4:6e:8c:8b:0c:37:9d:18:89:
8f:c4:8f:15:94:c5:06:4d:14:9c:a7:ba:ee:78:69:6e:da:17:
41:97:98:73:cc:a4:83:8e:79:d9:6d:59:ff:57:b0:b2:ef:b0:
f5:ee:4b:8a:ca:1c:9e:9e:af:26:a6:ce:4c:47:f9:4a:cf:92:
29:2d:66:74:81:1f:71:37:10:9e:65:16:90:0e:55:d1:66:03:
7e:a8:a8:94:2c:db:16:ef:a6:6e:8e:fe:40:f1:ff:e9:31:69:
38:0d:b0:f2:a5:bf:72:fe:24:b4:fa:12:63:67:b6:c6:04:3b:
ef:18:9a:0a:fa:2e:54:81:c4:cf:a7:82:b7:8a:e5:d4:61:a9:
c8:79:d2:d9:ac:26:83:cc:3e:cd:c6:27:f6:5e:a5:0a:1a:63:
06:e0:0e:73:8e:a4:ce:aa:4e:99:16:c2:61:07:2f:57:fa:d4:
71:79:d9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:43 2024 by rpki-client on console-fra.rpki-client.org