Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x88cIQv_cE9G-uNHuQMQe9xjabs.cer
File: x88cIQv_cE9G-uNHuQMQe9xjabs.cer (raw, json)
Hash identifier: DiXe5PlxGL0jzIwgleYbJJENFRpw+VSioLg1EB+l0Qk=
Subject key identifier: C7:CF:1C:21:0B:FF:70:4F:46:FA:E3:47:B9:03:10:7B:DC:63:69:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018BC2A0CCAE454F81BF7954CB4C3ED27729
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/4/C7CF1C210BFF704F46FAE347B903107BDC6369BB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 12 Nov 2023 08:23:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 60025
Validation: Failed, certificate revoked on Sun 12 Nov 2023 14:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c2:a0:cc:ae:45:4f:81:bf:79:54:cb:4c:3e:d2:77:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 12 08:23:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7cf1c210bff704f46fae347b903107bdc6369bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:ab:c0:54:c5:1b:de:a6:fa:90:56:5a:79:
5d:b9:b1:aa:13:f8:f3:44:08:b2:02:42:be:63:7d:
75:1f:1e:3b:0f:37:c4:fd:b1:07:6b:e8:a2:d8:62:
ab:d8:41:32:43:3f:28:09:7f:88:88:a7:12:89:26:
74:61:a0:63:bc:1b:3f:ff:6e:d9:e7:6a:fe:7d:c9:
39:e1:02:05:69:59:7d:f5:36:6b:b2:d2:e5:33:e2:
16:20:41:01:7c:db:c3:e6:a9:d6:db:3a:86:8a:7e:
8f:80:19:df:79:83:28:c9:d2:0a:ba:bf:09:75:6a:
f7:91:95:16:6f:2d:80:85:76:2f:08:ed:1c:21:05:
db:0b:58:c4:d5:d2:41:89:f4:7b:26:b8:01:87:7c:
a3:ca:32:ad:aa:8d:e6:84:5a:6e:f2:43:f4:8a:90:
c9:bd:e5:e2:9b:04:b4:94:45:74:92:18:9e:e6:b2:
73:08:79:9a:bf:c1:8c:b9:ec:7a:b1:a4:9a:35:0d:
1e:d8:20:ea:a4:f8:19:85:21:9b:28:6c:16:a7:6e:
a1:e2:c2:d5:79:1b:ca:22:6a:cc:af:88:01:14:c9:
7a:48:18:36:2a:59:6f:fb:14:cc:2c:17:33:2f:97:
4d:f9:91:fa:cb:16:6d:9b:5f:c3:f1:b6:c7:1c:17:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CF:1C:21:0B:FF:70:4F:46:FA:E3:47:B9:03:10:7B:DC:63:69:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/4/C7CF1C210BFF704F46FAE347B903107BDC6369BB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60025
Signature Algorithm: sha256WithRSAEncryption
44:01:9c:00:46:68:69:de:08:4d:dc:54:a7:c2:57:68:44:41:
2e:b1:7c:fb:5d:8e:ba:43:ae:bc:a9:36:1b:94:54:88:e0:a0:
69:be:58:28:e5:b0:5a:ec:90:31:a7:5a:00:df:ce:69:45:09:
54:ca:2d:d1:d8:3c:a0:95:9c:a8:92:a9:8c:cd:e9:e7:66:24:
17:1f:1e:1e:b5:d0:a3:6e:65:65:a5:0d:93:5f:52:07:b0:04:
54:94:70:80:2d:e3:7d:7d:32:7f:b4:2e:78:bc:60:4e:8a:ed:
05:40:90:6c:40:b4:a6:54:65:b1:ee:9e:37:b3:ab:93:5d:40:
3a:14:83:43:88:c4:0b:ab:22:5f:fe:e0:9d:23:d5:43:d0:94:
ec:b3:49:cf:5e:38:e1:e4:63:d2:a2:9c:1d:44:5e:ad:00:86:
66:c8:d3:e2:c7:31:b2:f3:59:b2:90:69:ce:47:46:b4:11:c0:
53:2f:5b:9c:37:ab:8f:9f:40:3b:9f:60:83:95:e1:65:65:99:
f2:67:66:f4:f9:39:ec:50:ef:df:1b:1f:20:c7:32:4e:00:30:
22:e8:9e:6e:1d:1b:5d:4f:f8:3d:5a:31:4f:5d:36:dd:93:a1:
f3:7e:19:9e:70:14:a1:6c:22:9f:05:e7:45:c8:5f:ff:06:2c:
6a:5b:94:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:59 2024 by rpki-client on console-ams.rpki-client.org