Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BxwJRjfyZ-A5_7drL7K6Ry7XZHg.cer
File: BxwJRjfyZ-A5_7drL7K6Ry7XZHg.cer (raw, json)
Hash identifier: YCzEkZiCxTvzCnQdcErneKHbY7fYEL+p1R/T7EZS0+0=
Subject key identifier: 07:1C:09:46:37:F2:67:E0:39:FF:B7:6B:2F:B2:BA:47:2E:D7:64:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D3535E963E0558BC9A7B8122EEE889149
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/6f99ca-1c97-496c-86d2-ea46aec92a29/1/BxwJRjfyZ-A5_7drL7K6Ry7XZHg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/6f99ca-1c97-496c-86d2-ea46aec92a29/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Jan 2024 07:25:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211062
Validation: Failed, certificate revoked on Mon 11 Mar 2024 10:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:35:e9:63:e0:55:8b:c9:a7:b8:12:2e:ee:88:91:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 23 07:25:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=071c094637f267e039ffb76b2fb2ba472ed76478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:59:9d:10:e2:a2:a7:41:a2:cc:8d:42:c1:
08:a3:8a:3e:a5:f3:b4:04:f5:d9:77:12:a6:fa:d0:
ed:c1:73:93:7a:b0:be:40:d4:9e:9b:96:62:cb:80:
85:63:fd:a5:a4:a3:09:7f:f0:a6:74:04:36:fb:05:
4c:e7:40:74:ca:6c:f4:f3:d9:fe:6a:50:7e:ca:72:
57:0f:6e:17:a1:48:1d:15:eb:42:54:eb:3b:af:a0:
ff:5b:f3:c8:ff:2a:ed:3f:14:bf:3b:dd:70:fc:d4:
16:74:2b:b6:74:ae:e5:5c:2c:f8:72:6d:44:3f:e2:
4d:42:75:d8:63:9b:d2:a3:8a:df:54:a1:0b:97:12:
e0:3d:5b:88:ce:3c:e7:2c:ea:66:e9:a0:3c:a0:f3:
1f:3a:a3:2a:9a:53:85:0f:b7:1e:ab:21:e5:73:41:
17:e9:98:4e:04:45:7c:15:f6:89:b8:81:66:a4:46:
7e:03:75:8f:73:65:c9:e7:5e:b5:0f:06:f3:d4:4c:
59:dd:03:96:b9:3a:d0:fc:5d:7c:c4:03:db:7b:16:
ba:36:f9:07:bd:b4:7f:05:3d:cd:91:87:c0:ba:47:
ef:16:5e:5b:66:bb:44:da:3b:f2:69:6d:07:4d:55:
33:69:06:6a:9a:ee:f0:b1:13:6c:04:77:4a:85:a3:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1C:09:46:37:F2:67:E0:39:FF:B7:6B:2F:B2:BA:47:2E:D7:64:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6f99ca-1c97-496c-86d2-ea46aec92a29/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6f99ca-1c97-496c-86d2-ea46aec92a29/1/BxwJRjfyZ-A5_7drL7K6Ry7XZHg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211062
Signature Algorithm: sha256WithRSAEncryption
71:0c:bc:74:37:27:c3:96:4d:5a:1a:48:67:5f:39:d3:6d:86:
3a:de:0f:21:b5:81:e8:08:ae:fd:9e:19:98:bf:56:a4:54:de:
bb:82:90:6b:55:9f:a0:37:bb:6a:2a:71:1a:e1:4e:d0:da:5a:
fa:dc:96:e8:df:6c:8e:61:47:68:95:c0:01:60:67:7a:d1:65:
95:9e:54:f7:52:5a:0d:af:cc:d8:d1:50:34:53:60:36:b9:e4:
bc:d8:d2:40:b3:7e:79:a4:b6:31:a5:fe:cd:a0:cf:80:2a:e8:
c2:11:f7:be:80:8a:40:fc:af:86:b8:13:98:30:2e:e1:8a:b7:
0d:9e:13:36:c0:11:e1:9a:a5:65:53:68:b5:4d:9d:37:f7:51:
5d:af:f7:d8:25:5b:3b:ed:b5:37:2b:f7:fa:87:17:30:8d:76:
f2:92:d8:3b:17:73:26:b5:68:06:93:c6:ec:08:8a:1d:50:54:
d7:0d:44:f6:b8:93:20:f9:94:e5:e7:07:b6:d9:ad:af:13:02:
de:fd:8f:aa:cd:d4:24:2e:d3:37:1e:f8:bd:56:58:8f:5c:9e:
76:ea:cc:d7:6e:5e:9c:64:62:23:d1:7c:29:10:9e:3c:c3:3a:
73:be:e7:da:2e:8b:eb:6d:a6:f3:1a:68:e7:16:c3:95:af:20:
74:3b:d5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 17:50:05 2024 by rpki-client on console.sobornost.net