Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
File: 6FuDyHxKPYMVAlN59ymHUgu10EY.cer (raw, json)
Hash identifier: lpAQFN5Ew6yk+07SlxSl/L6lGVgkg2h4YZU03azrAWA=
Subject key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB03EA4FA5963301DC9B6ECF31FB1C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20910
AS: 28843
AS: 39365
AS: 57516
AS: 210155
IP: 37.148.168.0/21
IP: 62.84.0.0/19
IP: 62.205.192.0/18
IP: 77.38.128.0/17
IP: 79.132.64.0/19
IP: 79.135.128.0/19
IP: 80.254.208.0/20
IP: 80.255.224.0/20
IP: 85.115.96.0/19
IP: 85.234.160.0/19
IP: 87.226.0.0/17
IP: 89.18.192.0/19
IP: 89.191.96.0/19
IP: 89.201.0.0/17
IP: 91.123.64.0/20
IP: 91.142.0.0/20
IP: 91.188.32.0/19
IP: 93.177.192.0/18
IP: 94.30.128.0/17
IP: 109.110.0.0/19
IP: 136.169.0.0/17
IP: 185.7.236.0/22
IP: 185.47.92.0/22
IP: 185.144.184.0/22
IP: 185.211.96.0/22
IP: 188.64.176.0/21
IP: 188.112.128.0/18
IP: 195.62.128.0/19
IP: 195.244.128.0/20
IP: 213.180.96.0/19
IP: 217.24.64.0/20
IP: 217.198.224.0/20
IP: 217.199.96.0/19
IP: 2a00:9000::/29
IP: 2a00:f4a0::/29
IP: 2a03:6740::/29
Validation: Failed, certificate revoked on Wed 07 Aug 2024 07:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:03:ea:4f:a5:96:33:01:dc:9b:6e:cf:31:fb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:0f:c9:05:ab:47:a3:1a:51:79:c5:a3:9a:
72:47:03:4e:1c:a0:d9:c4:7e:15:bb:89:68:e8:f6:
9b:59:ce:49:ea:c9:7e:52:6b:ee:e5:3b:de:1e:fc:
62:49:3d:3a:02:bf:a4:d7:b2:5a:0c:cf:c9:0b:c6:
6a:44:09:37:6f:01:5c:1d:e5:2a:d4:37:31:44:a7:
8f:47:e7:bd:de:f2:ca:dd:3e:18:22:f2:d9:6e:c8:
0b:7c:cd:04:db:fb:87:67:35:88:6b:22:04:cc:7f:
91:b1:26:1b:66:43:9d:94:4c:0f:87:39:47:ac:f0:
ed:31:89:e6:95:dc:12:5a:c6:d5:e2:75:85:dc:88:
8a:0d:68:66:44:7a:cf:00:10:dc:09:03:97:4e:4c:
8c:65:15:f2:56:35:fc:49:c5:4c:4b:3f:8e:41:a4:
b9:36:e1:54:02:e2:13:43:8f:b4:b3:f9:dd:1d:86:
13:ab:1b:99:47:94:7d:08:3d:94:d3:16:64:61:78:
9d:7c:d9:cb:61:f7:cd:f1:d4:a2:a4:7a:11:58:f4:
20:1b:7a:45:24:ad:3b:8d:94:92:96:11:30:c4:30:
67:0b:80:9c:ee:99:fc:e8:7e:e5:0a:5c:1c:89:a9:
a1:24:16:74:24:2d:cb:d5:a5:07:18:0e:44:b4:e7:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.168.0/21
62.84.0.0/19
62.205.192.0/18
77.38.128.0/17
79.132.64.0/19
79.135.128.0/19
80.254.208.0/20
80.255.224.0/20
85.115.96.0/19
85.234.160.0/19
87.226.0.0/17
89.18.192.0/19
89.191.96.0/19
89.201.0.0/17
91.123.64.0/20
91.142.0.0/20
91.188.32.0/19
93.177.192.0/18
94.30.128.0/17
109.110.0.0/19
136.169.0.0/17
185.7.236.0/22
185.47.92.0/22
185.144.184.0/22
185.211.96.0/22
188.64.176.0/21
188.112.128.0/18
195.62.128.0/19
195.244.128.0/20
213.180.96.0/19
217.24.64.0/20
217.198.224.0/20
217.199.96.0/19
IPv6:
2a00:9000::/29
2a00:f4a0::/29
2a03:6740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20910
28843
39365
57516
210155
Signature Algorithm: sha256WithRSAEncryption
2a:87:53:98:b7:e4:13:3d:9e:75:df:34:7a:9c:a1:ca:52:a0:
8c:9f:ae:01:94:3e:21:4f:e0:29:9d:83:9a:0c:5e:ef:54:ce:
8d:42:0d:5f:28:42:07:07:db:ff:34:ad:a2:c8:b3:31:d5:d6:
7b:0d:61:c5:a1:ba:60:9b:af:81:89:c7:1b:f8:0a:2b:05:2b:
44:6e:1b:6e:2b:6c:1a:e2:25:ad:55:fd:69:e4:d1:09:a9:25:
b4:24:bc:95:57:f6:c5:26:0f:b6:02:a1:7a:ef:dd:3d:34:c8:
97:0c:c7:79:9f:69:e2:99:2a:99:17:d6:f0:5e:f8:04:f4:a3:
ee:a0:3b:73:f1:23:5c:c5:ea:fa:6d:19:22:4f:8c:f4:af:dc:
39:47:fa:56:a6:32:e7:31:64:30:78:74:30:ea:11:fa:85:31:
11:15:83:59:82:5c:69:ce:d1:54:5e:c1:cf:e5:a9:30:4a:06:
80:04:9e:20:00:87:f4:ff:1d:e1:0a:a1:44:fb:08:dd:54:c7:
51:f0:ef:69:17:ad:2c:e1:df:5f:87:45:31:39:6f:6e:59:35:
34:4b:d1:15:30:14:31:33:8d:bd:a5:6e:36:64:18:de:ed:38:
56:9d:eb:df:53:8d:8f:a6:e7:58:c7:6e:ef:47:d4:70:6a:f7:
f2:a5:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 10:40:55 2024 by rpki-client on console-ams.rpki-client.org