Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0t4F08p1DdXCfuv6VTnCC30oKc8.cer
File: 0t4F08p1DdXCfuv6VTnCC30oKc8.cer (raw, json)
Hash identifier: Ocpt+vTvhSt6MdiZQ7sqxcncM3lLxwGE7CjYovaRrS8=
Subject key identifier: D2:DE:05:D3:CA:75:0D:D5:C2:7E:EB:FA:55:39:C2:0B:7D:28:29:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC870441C9F09F8B8C3EE771673625A59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/0t4F08p1DdXCfuv6VTnCC30oKc8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202658
IP: 185.157.184.0/22
IP: 2a13:5fc0::/29
Validation: Failed, certificate revoked on Tue 24 Dec 2024 12:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:44:1c:9f:09:f8:b8:c3:ee:77:16:73:62:5a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2de05d3ca750dd5c27eebfa5539c20b7d2829cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:81:20:83:22:6e:a7:04:16:bc:01:af:cb:
5c:5b:32:57:73:30:ec:f1:56:82:52:0b:0f:f4:dc:
50:59:67:15:d5:d2:d0:7f:c8:9a:87:fc:20:25:54:
34:64:42:d2:28:f4:93:05:d1:3d:9f:27:c2:16:8b:
62:a7:27:3f:60:fb:3d:34:68:48:d8:3a:4b:b8:4a:
e8:01:b6:00:0b:dd:c1:12:36:0e:de:b3:b0:0e:b8:
fa:f3:c8:33:36:a6:7c:e4:52:ae:34:93:ad:61:d2:
e1:e7:68:52:ca:0f:a2:0b:38:0c:39:13:6b:4d:a9:
68:49:ca:1e:87:71:b4:4a:10:18:14:b1:ed:b4:48:
fb:99:a6:ef:68:83:ad:9b:78:39:c3:2c:72:39:5e:
29:50:88:36:fb:78:dd:ca:ea:3f:7b:62:9b:c1:c8:
3b:fe:91:90:4b:de:8e:1d:3f:ab:13:f6:8c:4f:56:
73:a7:6c:9f:ff:fc:79:05:60:5c:f2:8c:71:b5:83:
6e:59:bc:be:67:8e:07:4e:59:8e:57:22:96:2d:fd:
fe:f6:ec:b3:30:52:5c:a9:04:a3:e4:d2:fc:3b:b2:
76:71:4b:ff:e0:64:e0:99:91:d1:20:4a:f8:a6:82:
27:a7:8d:5c:d2:7a:b1:56:db:da:c7:f3:59:c4:cd:
cf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DE:05:D3:CA:75:0D:D5:C2:7E:EB:FA:55:39:C2:0B:7D:28:29:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/0t4F08p1DdXCfuv6VTnCC30oKc8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.184.0/22
IPv6:
2a13:5fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202658
Signature Algorithm: sha256WithRSAEncryption
3a:1e:56:01:88:75:60:0b:89:5a:12:84:aa:3d:cc:1b:21:5d:
00:66:ba:07:ef:b4:38:7d:1f:b2:c5:12:ec:77:c8:85:ea:62:
92:5d:68:c8:77:73:a9:02:fa:5d:a9:b8:7b:16:65:39:05:ee:
41:8c:b1:59:e2:6d:87:7b:24:3d:60:8f:43:36:8b:96:9f:ad:
c3:fd:e8:0b:f7:dd:a0:f3:fb:c2:17:0e:29:70:80:10:25:ed:
bd:3f:ab:08:b7:6c:bd:2d:7d:b1:6f:b5:42:70:2b:2c:1b:7b:
6c:c2:e4:f0:bb:13:da:30:25:8b:7c:3e:25:03:41:e4:96:cc:
f8:e5:5b:de:c6:10:31:78:a6:41:54:02:60:7a:6b:64:10:c1:
5a:eb:97:77:74:ba:3a:58:b6:ea:37:b0:a4:d1:a1:a7:79:b9:
c0:28:5e:dc:91:ff:78:07:5e:6e:86:4f:30:a2:95:25:99:a0:
a6:c7:f7:c3:bf:eb:26:41:65:52:7c:33:dd:cc:c2:0e:84:40:
07:11:13:0c:0d:2a:66:22:2e:3a:b1:f2:65:3a:74:76:55:b6:
84:3e:bf:f0:ee:29:05:16:a9:db:10:68:30:10:34:f7:4d:a0:
15:fd:b1:fb:5f:b5:73:81:42:64:77:6e:af:d7:fd:6e:28:e5:
69:0c:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:20:25 2025 by rpki-client