Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EN-N8-3RT6USOQwRZYznNX6wy1A.cer
File: EN-N8-3RT6USOQwRZYznNX6wy1A.cer (raw, json)
Hash identifier: Ps9SIV8kPUmrzVwNKtuxKzCrYWz7kFZ2iZwsmF24axA=
Subject key identifier: 10:DF:8D:F3:ED:D1:4F:A5:12:39:0C:11:65:8C:E7:35:7E:B0:CB:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190FED2FC788D74935E5D07BA4BF83D18FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/3ff441-6f20-46d9-be3e-fa8960191261/1/EN-N8-3RT6USOQwRZYznNX6wy1A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/3ff441-6f20-46d9-be3e-fa8960191261/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Jul 2024 14:09:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214456
Validation: Failed, certificate revoked on Tue 30 Jul 2024 02:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:d2:fc:78:8d:74:93:5e:5d:07:ba:4b:f8:3d:18:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 14:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10df8df3edd14fa512390c11658ce7357eb0cb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:8d:64:72:5c:27:2f:c2:50:1d:93:f8:ec:
fb:70:18:80:e0:45:73:44:f6:e1:88:ca:ed:d7:6b:
1a:f9:26:3c:5d:3f:91:35:be:3e:7e:b6:d2:95:e3:
e4:4e:1c:d9:95:f1:43:57:f2:bf:3c:1a:3c:16:be:
59:d1:80:8a:1d:56:53:0c:ad:b2:48:39:51:11:b1:
4d:44:c8:5c:bd:d1:ad:ac:24:7f:0e:9a:3e:d2:fa:
43:92:d6:97:65:80:dd:4c:9d:4d:4d:b8:61:c4:1f:
67:5f:04:88:ba:28:7b:8e:43:80:5d:02:3e:34:c4:
fd:03:e8:30:f9:f4:60:d9:d1:54:25:4f:2d:67:f3:
3c:31:29:a6:16:b0:a6:be:0f:f5:06:f2:33:82:24:
85:ce:31:c2:a4:5f:20:75:77:00:19:cd:e6:40:f8:
40:1d:ff:f5:94:ab:4e:fc:dd:f0:98:f5:85:b4:91:
e5:c1:3d:46:2f:68:53:2d:02:01:74:1d:f4:5d:1e:
f1:b9:92:ef:f4:39:e8:b2:c4:53:e5:85:d8:91:c4:
fd:1f:36:29:e0:18:0b:05:8e:fd:0d:41:82:69:d5:
75:e5:63:2b:11:28:10:a0:e8:ea:49:54:c8:d4:2a:
ca:d2:ab:14:3a:7e:22:d7:41:79:7f:1f:f4:24:71:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DF:8D:F3:ED:D1:4F:A5:12:39:0C:11:65:8C:E7:35:7E:B0:CB:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3ff441-6f20-46d9-be3e-fa8960191261/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3ff441-6f20-46d9-be3e-fa8960191261/1/EN-N8-3RT6USOQwRZYznNX6wy1A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214456
Signature Algorithm: sha256WithRSAEncryption
48:b6:c5:1f:f2:0e:c1:74:d3:09:71:83:3b:f9:25:e1:da:55:
bb:ac:d7:41:e1:dc:cc:b0:7d:6a:65:d3:f1:5b:da:93:4d:8d:
0b:72:e4:94:ea:c1:d3:ad:7f:ff:00:c0:c8:99:25:2e:97:a4:
59:e1:04:74:9b:19:d3:32:40:e6:7f:9c:56:ac:85:82:e0:9d:
9f:10:ed:ba:b1:92:2b:1d:c3:45:3d:8e:33:33:fd:59:37:2e:
5a:d7:f5:74:ee:ef:3f:1c:59:29:4a:90:61:4c:23:fe:05:1f:
4b:5d:5d:1f:24:a6:d1:50:d7:5f:7d:de:b7:b3:45:36:8d:10:
0f:df:9c:8d:cf:46:cd:07:52:f0:3d:5d:86:52:db:21:8e:6d:
5b:bf:5b:a1:8c:0f:99:16:76:03:e1:65:d0:a6:4c:a5:28:1e:
48:98:da:1a:7a:fe:cb:8b:9f:77:65:3c:bd:c9:33:10:51:04:
ce:5d:8b:aa:9f:50:91:75:89:6f:8c:92:49:69:70:38:25:d6:
3d:70:47:45:c5:18:6f:34:dc:c2:a2:f7:77:01:d4:6f:91:d8:
83:80:a6:af:ff:6a:ff:10:42:a8:18:6c:cf:d3:ab:8b:87:5b:
de:08:53:0c:86:73:ca:cc:0d:5c:7f:67:65:b5:06:b0:0c:64:
ec:3d:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:28:23 2025 by rpki-client