Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
File: 1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer (raw, json)
Hash identifier: wKIeXyEY0JvLHXAKjQzg2amxv7fnDi2ItO0NOkjuceI=
Subject key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD1417E4FC496807C4E3A76CA27111E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 20699
IP: 193.107.21.0/24
IP: 193.108.56.0/22
IP: 193.108.102.0 -- 193.108.105.255
IP: 2a11:4380::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:41:7e:4f:c4:96:80:7c:4e:3a:76:ca:27:11:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:ff:73:f0:e3:a7:0b:a4:11:9c:23:0b:54:
77:32:d5:80:49:32:f5:ff:c5:61:b5:e8:23:44:04:
64:5d:a5:ca:dc:67:6a:50:7e:f7:91:f4:2c:84:e8:
60:71:c6:2c:83:ad:d7:a6:ce:6e:bd:ac:77:66:5d:
2e:35:32:f7:af:9f:c3:6a:bd:89:6c:a6:20:07:a0:
bf:7d:98:ae:c5:e4:e3:e9:e7:ee:87:b4:ce:b1:06:
f0:b0:79:c1:39:ad:c7:63:dc:66:60:34:13:f1:1f:
d5:24:fb:0e:6d:18:32:83:cf:28:4b:05:a5:3a:2b:
1e:85:7a:8a:f5:cd:34:32:77:c8:19:89:bb:3a:56:
cc:26:42:82:a3:ae:13:fc:03:0e:9c:38:dd:83:e9:
2f:9a:9b:cc:e2:2e:dd:c1:15:0d:cc:a4:94:af:a0:
08:0f:ad:dc:38:38:2a:a0:96:e6:87:54:fb:4c:19:
54:72:d0:d3:6b:7d:fa:f4:a2:2b:d6:a1:c9:b0:46:
e2:50:ce:48:5e:e7:35:ed:cc:3a:24:e8:34:e1:7f:
1e:5c:e7:cc:34:be:16:87:fe:35:20:e1:40:37:a0:
52:0a:f6:aa:bb:f2:3f:f5:73:54:50:75:cf:58:56:
7c:4d:5d:38:e8:26:d3:47:75:64:9e:24:62:af:18:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.21.0/24
193.108.56.0/22
193.108.102.0-193.108.105.255
IPv6:
2a11:4380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20699
Signature Algorithm: sha256WithRSAEncryption
45:89:24:fc:5c:c5:cd:85:e6:1e:01:80:05:9e:79:52:8b:2f:
53:f5:bd:e9:e3:9b:d1:8e:95:b6:52:b1:18:10:7e:b9:ef:e4:
be:33:29:19:d9:ca:a3:dd:4a:50:7a:c0:2c:1c:3d:24:23:92:
fb:cc:53:87:7d:6d:12:a7:5b:3c:6c:2b:06:76:27:c4:30:4c:
fd:0b:ad:b3:76:81:2e:64:a2:b6:fc:1e:42:63:ac:eb:63:da:
bd:d7:43:a9:28:80:18:df:08:a1:3b:f4:42:30:71:d2:09:a2:
63:16:3b:21:42:6f:e8:2c:4a:46:74:08:4c:7d:31:ad:99:6e:
85:33:da:f3:d0:a2:d2:49:be:c6:e6:84:03:dc:50:01:95:aa:
3e:a3:1c:ca:89:e4:1c:d3:c5:4e:b0:3a:88:f7:b2:21:83:20:
a8:0e:e2:b5:84:8d:84:b4:b5:8d:a4:7e:9d:eb:61:42:24:17:
0b:cd:7d:40:34:27:99:57:55:d0:bf:ef:c5:f8:29:fc:8c:2b:
d4:88:61:53:62:14:56:0f:1d:ce:fd:2b:ee:15:c6:71:95:fe:
be:2d:06:0c:a3:d7:90:a7:09:8a:fa:1b:5a:31:c1:cd:6c:83:
fc:2b:9e:a3:f5:5c:bc:71:5e:28:66:40:69:79:c7:f5:aa:68:
47:6c:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 12:44:35 2023 by rpki-client on console-ams.rpki-client.org