Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y2AABxrnXJz5_BS5LoMtYvNyzm8.cer
File: Y2AABxrnXJz5_BS5LoMtYvNyzm8.cer (raw, json)
Hash identifier: iyO17x/CFuzlkJCHzubvInmV7+MdH8N4dv7qe/gneF8=
Subject key identifier: 63:60:00:07:1A:E7:5C:9C:F9:FC:14:B9:2E:83:2D:62:F3:72:CE:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94C28EAF642737B686D550E0D735B45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/99e6a2-14e2-4f92-881c-01f74f8000a7/1/Y2AABxrnXJz5_BS5LoMtYvNyzm8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/99e6a2-14e2-4f92-881c-01f74f8000a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200040
Validation: Failed, certificate revoked on Mon 04 Mar 2024 12:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:28:ea:f6:42:73:7b:68:6d:55:0e:0d:73:5b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=636000071ae75c9cf9fc14b92e832d62f372ce6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:8b:34:36:dd:9f:a0:da:58:c8:cc:3b:32:
0a:cc:35:77:64:95:f8:ef:ea:27:72:a1:1f:23:07:
41:fe:b4:b6:59:f4:3b:91:e5:95:97:8f:cf:8d:91:
f8:04:74:48:bf:77:dc:e0:d9:16:6a:12:a2:7b:1c:
e4:79:23:2c:7c:10:13:c3:1a:d2:66:3f:fd:d5:3c:
eb:b7:f5:6a:95:3a:87:ec:23:90:49:f9:ee:0b:8c:
a7:5e:17:92:04:f3:08:c3:91:92:21:df:13:fc:3e:
5c:9b:b3:2a:b7:64:cb:4d:dc:81:ab:4e:1b:da:aa:
7f:40:49:65:2d:c4:88:40:96:32:a8:78:2e:d5:ac:
82:cb:0d:8a:44:d8:9b:dc:3e:e3:45:46:42:44:0b:
ba:49:63:48:4d:37:bd:a8:67:93:75:a1:ae:77:ab:
3a:96:84:60:11:5f:e2:6f:38:08:d1:f7:9b:d1:ac:
12:30:06:f4:c9:53:66:8a:dc:f1:d0:c6:80:1e:18:
3a:e7:c9:5f:42:e5:7c:f5:b2:5c:47:58:cd:3e:f2:
d4:96:4f:1e:a8:09:f6:70:30:fb:76:23:34:b8:b9:
b0:cd:eb:85:1e:5d:7d:27:03:d6:1a:32:a7:cd:a8:
37:20:90:ec:47:05:88:4d:64:9f:38:6b:1a:9e:b4:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:60:00:07:1A:E7:5C:9C:F9:FC:14:B9:2E:83:2D:62:F3:72:CE:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/99e6a2-14e2-4f92-881c-01f74f8000a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/99e6a2-14e2-4f92-881c-01f74f8000a7/1/Y2AABxrnXJz5_BS5LoMtYvNyzm8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200040
Signature Algorithm: sha256WithRSAEncryption
98:5b:9f:72:23:b0:ea:93:c0:ed:19:d1:8b:0b:02:46:cd:77:
59:5c:14:d6:1d:85:3d:bb:ca:fb:dd:75:b2:f8:f7:23:71:56:
0b:8c:bd:38:b7:55:46:02:cf:2b:3c:a6:c3:b5:70:74:aa:36:
ca:90:71:8f:28:cd:6a:56:b1:84:13:72:bb:cb:d8:85:fc:87:
0d:b8:c4:76:52:ba:e2:36:33:90:b7:09:d0:c2:e9:18:f6:41:
cc:dc:0d:d4:4e:2c:64:40:6d:43:33:24:1b:ed:1e:4c:90:fc:
c7:be:50:a5:dd:37:c3:32:7c:8e:ed:5e:57:32:95:ac:e0:63:
50:7f:06:8e:28:c8:ae:1d:69:f0:f3:c1:27:b8:ef:d9:cc:3d:
44:b0:33:31:28:c8:ed:b7:9b:5a:4e:6c:f5:3b:79:d3:f9:22:
f6:f4:cf:9f:7d:92:8e:9e:72:43:51:2d:39:41:7c:67:41:f1:
d5:90:44:0f:ef:f7:13:e3:f8:b2:76:3e:f3:d8:a2:d8:1a:5f:
2e:2c:41:50:f3:58:b7:8c:f9:b3:3c:0f:80:63:4c:6e:e0:6f:
b4:cc:75:81:ae:89:bd:3c:78:a0:42:cb:7b:58:6c:90:4e:ad:
4d:d8:0c:2a:16:02:32:53:0c:f7:70:bb:af:5a:f8:1c:04:7c:
ad:cf:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 18:40:34 2024 by rpki-client on console.sobornost.net