Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-fjknTXEckGr79hOlMQX0heVseE.cer
File: 1-fjknTXEckGr79hOlMQX0heVseE.cer (raw, json)
Hash identifier: rLSs17e3wzK8Qn7VD4q90oNm4Kwn+A4kupcGzNrpoVI=
Subject key identifier: F9:F8:E4:9D:35:C4:72:41:AB:EF:D8:4E:94:C4:17:D2:17:95:B1:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245CB71059ED8FC0C561070856E6BD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/1-fjknTXEckGr79hOlMQX0heVseE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 212036
IP: 185.226.97.0/24
IP: 2a10:a780::/29
Validation: Failed, certificate revoked on Mon 16 Jan 2023 11:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:cb:71:05:9e:d8:fc:0c:56:10:70:85:6e:6b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9f8e49d35c47241abefd84e94c417d21795b1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:62:29:58:6d:1f:07:05:e9:6b:e1:f5:24:
99:cb:92:3a:96:a8:94:04:4e:37:bf:1f:88:96:f1:
64:b6:b3:fd:e3:69:73:b5:77:46:6b:17:f0:35:9a:
f3:10:00:d8:b2:21:c9:64:c9:d0:bc:08:6d:8f:f6:
f3:84:9e:cb:88:d1:21:4a:df:05:73:2b:91:1f:c7:
42:31:d3:07:18:63:35:cc:13:cf:91:29:27:24:b9:
f3:5a:34:9c:35:40:10:d3:a4:6c:62:29:d3:70:d8:
08:9b:36:9e:9f:c6:b3:cd:e3:63:9a:e3:3a:c8:5f:
59:27:4c:ac:19:e5:7b:9e:e0:d9:d0:23:58:40:b4:
13:a3:f9:da:35:7a:38:9e:b7:7a:b7:2a:bd:4c:cd:
fd:6d:8e:95:d1:07:0c:d5:67:f3:85:28:76:cc:eb:
67:b0:e9:77:3a:52:7e:a7:cf:4b:fc:3d:90:3e:2c:
06:7d:50:28:49:d7:1e:6d:35:95:dc:3c:57:83:01:
16:ca:0d:91:d7:5a:4d:3b:d6:ae:e4:e3:f1:29:a0:
12:89:f5:bb:34:9e:24:48:21:59:7d:2f:92:34:29:
e1:3f:c6:d1:d4:6b:24:9e:71:cf:d7:5f:c5:94:25:
93:0f:56:96:45:d1:c0:19:b0:ca:56:0f:a9:d7:aa:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F8:E4:9D:35:C4:72:41:AB:EF:D8:4E:94:C4:17:D2:17:95:B1:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/1-fjknTXEckGr79hOlMQX0heVseE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.97.0/24
IPv6:
2a10:a780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212036
Signature Algorithm: sha256WithRSAEncryption
35:17:1f:42:f6:57:b3:aa:dd:e1:f7:5c:17:86:b8:6a:d6:bd:
19:f4:57:f2:85:03:2a:c9:cc:62:d8:0a:eb:5d:b5:9a:76:7e:
fc:77:74:c8:20:e2:66:6a:93:8a:0c:80:35:3b:e6:f0:77:16:
ad:f7:80:67:2a:a4:9f:c4:0d:db:fa:29:7e:d3:96:0e:bf:11:
33:0f:e8:9c:ec:1f:31:f2:0a:89:68:b1:43:83:54:a8:d1:62:
6d:54:c9:3a:1b:82:d2:1d:54:8e:46:96:c9:b7:72:f6:1c:4b:
58:03:34:86:fd:25:66:b3:92:02:6c:d0:dc:2c:43:08:f8:d8:
fc:2b:01:3a:95:1a:7d:53:fd:c5:35:fc:bf:51:1e:2a:6f:57:
b9:73:53:07:2f:2b:6d:19:a3:26:ee:b7:6b:6a:1c:47:86:e9:
69:57:03:0e:8d:98:90:6f:02:94:3c:03:24:61:7c:e4:78:cd:
ee:50:c3:92:e4:58:89:40:4b:a1:d3:14:c3:fd:88:6d:4c:fd:
54:dd:d3:94:79:37:f3:c3:3f:68:a0:3c:d7:70:c7:14:b3:f8:
07:38:56:53:ee:c6:be:6b:bc:d9:47:23:32:bb:7d:89:d2:bd:
9f:24:01:41:cb:04:7d:5f:4e:61:ee:63:68:64:ac:09:b1:2d:
c4:45:52:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:22 2024 by rpki-client on console-fra.rpki-client.org