Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OhQCJJvTsvUKs8z3ZrMfTlV63vw.cer
File: OhQCJJvTsvUKs8z3ZrMfTlV63vw.cer (raw, json)
Hash identifier: RXSs3UOI9RHWshJb/Y8FIBZJ8t3LOsuiF0W+pb6WwGE=
Subject key identifier: 3A:14:02:24:9B:D3:B2:F5:0A:B3:CC:F7:66:B3:1F:4E:55:7A:DE:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190147BC9B2DF0BBDDBBE0FA530AD5C4E2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/3/3A1402249BD3B2F50AB3CCF766B31F4E557ADEFC.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 14 Jun 2024 02:02:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216411
Validation: Failed, certificate revoked on Fri 14 Jun 2024 02:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:14:7b:c9:b2:df:0b:bd:db:be:0f:a5:30:ad:5c:4e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 14 02:02:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a1402249bd3b2f50ab3ccf766b31f4e557adefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:ed:82:8c:97:04:84:ea:7d:ea:fe:e9:fc:
40:c2:27:d8:38:8d:37:7b:9c:2f:6d:0d:bc:05:83:
59:fd:0d:38:75:9a:91:c7:d6:52:41:9b:1b:d9:98:
b7:c4:1a:15:60:8d:92:d8:9e:cc:30:2b:9f:37:50:
e8:8c:04:ea:b0:66:ac:97:2f:ea:37:6c:c7:85:f7:
d1:cd:50:25:da:f4:75:e0:38:56:1b:e4:0e:a8:a5:
5e:9b:a8:b0:35:09:57:3d:77:91:43:b1:a5:69:80:
1a:69:d6:67:3a:7e:0f:ff:7e:bf:45:fe:37:0e:8e:
e8:2a:a7:4d:88:17:05:20:79:84:c5:d2:68:46:85:
e7:56:34:66:a7:1d:9a:2a:9f:f4:62:5b:fd:c9:0c:
47:36:de:a4:a0:7b:64:a6:a2:32:a2:63:b9:8f:21:
fb:9a:7f:de:03:f8:0b:7c:08:f3:4d:b6:c5:f0:e1:
92:4c:db:d0:e7:8a:16:f2:dd:28:22:b3:cf:60:35:
c2:3e:34:3e:cb:82:1d:cd:be:91:73:a5:66:63:55:
82:36:02:62:85:45:e3:3c:42:97:69:ee:c4:e3:52:
c8:bb:08:45:e2:55:b4:2c:55:bc:39:2e:c2:89:df:
ed:bc:02:90:c7:b3:ba:2b:49:13:5d:ff:04:6e:3b:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:14:02:24:9B:D3:B2:F5:0A:B3:CC:F7:66:B3:1F:4E:55:7A:DE:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/3/3A1402249BD3B2F50AB3CCF766B31F4E557ADEFC.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216411
Signature Algorithm: sha256WithRSAEncryption
29:dc:86:e2:52:95:b4:a4:a1:8f:0b:78:10:28:78:f0:46:79:
d3:90:a5:6b:16:33:45:80:35:8f:42:d3:dd:88:d1:cc:90:a4:
a6:61:af:f6:88:85:8f:fe:ff:b7:e1:69:4b:8b:7c:88:a6:e2:
2b:6b:7a:96:25:40:f7:47:42:04:8b:ec:a3:08:59:3c:4f:a7:
8d:75:da:30:0f:13:a0:b1:cf:45:f3:46:45:5b:37:9d:27:b3:
a1:3e:95:04:36:c2:7e:e6:0a:2e:f0:7b:9b:99:d1:5d:df:97:
d2:4f:98:dc:87:84:1d:d7:f3:92:f3:56:9b:bd:d6:39:11:0a:
ce:42:f3:ac:26:d8:56:c1:98:34:bc:d3:94:d6:65:ee:20:ec:
b3:b2:f1:52:2f:5b:56:5a:86:8d:22:f6:c7:e2:08:56:40:2b:
e3:f2:a8:2f:bd:f8:a7:73:5b:e4:44:a2:20:19:23:2d:81:a1:
0b:7a:67:ed:65:cb:14:49:e8:f3:6b:d7:c6:32:be:94:ff:b1:
65:91:5d:b8:c7:eb:72:1d:03:a8:31:15:f6:6b:f7:8e:3b:b8:
e6:7a:69:93:f1:12:0a:b1:96:f1:c7:02:91:be:6b:82:b1:bb:
64:54:4f:a5:d2:59:ed:05:4f:43:7c:44:34:09:e8:37:51:f5:
da:09:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:25:37 2025 by rpki-client