Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1GT8vn4ZPSchMHVmNPZHQwdIAVE.cer
File: 1GT8vn4ZPSchMHVmNPZHQwdIAVE.cer (raw, json)
Hash identifier: 5PAHdkJsJDNRoyqTrHgU/uiLPgg72gvLK3QI0QfIKEg=
Subject key identifier: D4:64:FC:BE:7E:19:3D:27:21:30:75:66:34:F6:47:43:07:48:01:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B637EF14EF63636F7642BF808CC673C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/1GT8vn4ZPSchMHVmNPZHQwdIAVE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 211677
IP: 178.216.246.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:7e:f1:4e:f6:36:36:f7:64:2b:f8:08:cc:67:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d464fcbe7e193d272130756634f6474307480151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:8f:52:7c:72:ec:f6:1c:b2:90:d8:7d:14:
f5:a0:87:df:7f:71:bf:16:45:20:23:be:32:86:c6:
11:9e:5b:2b:fe:4f:3d:77:21:80:2c:4a:1b:6a:75:
de:89:af:62:73:c7:90:90:44:88:80:a1:75:83:ab:
ad:0e:7b:6c:a8:80:ba:27:5b:2a:13:14:0e:ea:f4:
f6:91:2a:b6:d7:73:32:f6:fc:ab:10:97:66:b2:3b:
fe:4a:c5:cf:a6:18:a6:c9:0e:e5:5a:38:24:45:2c:
0d:f3:9a:9d:c0:fc:81:4c:bc:38:a0:c0:86:e4:ac:
48:55:49:c9:fa:a6:4a:79:2c:62:00:e4:6f:74:ac:
8e:fe:86:fe:81:ae:aa:23:4b:b9:9e:ad:be:d7:0e:
ec:49:6f:df:6b:c2:15:2f:5e:83:f8:5b:b2:e3:97:
e8:44:d3:1f:d6:8b:81:ed:81:6c:38:f4:9f:bd:5d:
93:f2:a3:34:e0:4d:02:e8:19:6d:c9:dc:81:d9:d0:
f7:17:cc:37:73:b1:1e:13:3e:e3:66:9b:55:27:6a:
66:80:69:54:01:4f:c6:6c:18:6c:39:12:62:55:9f:
88:58:6e:aa:11:2f:8e:47:60:2d:e5:2a:20:5c:bc:
0d:94:e4:7b:a0:e5:ac:12:9b:31:21:69:ad:e4:6b:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:64:FC:BE:7E:19:3D:27:21:30:75:66:34:F6:47:43:07:48:01:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/1GT8vn4ZPSchMHVmNPZHQwdIAVE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.246.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211677
Signature Algorithm: sha256WithRSAEncryption
9b:1f:c6:f2:cb:eb:37:e9:42:6f:37:80:02:1d:28:95:58:a0:
89:ab:e4:f3:4a:b3:36:d6:6d:53:0a:01:7b:e9:e2:ab:82:df:
52:41:b2:f7:8c:f4:c1:85:df:c1:2d:4a:02:30:40:da:28:4f:
93:a9:e1:89:94:fb:70:c2:b5:cc:60:51:c0:a7:ba:d2:8b:30:
90:de:65:fe:46:87:ad:53:4a:e1:2d:95:02:93:02:e0:42:b2:
1f:6f:1e:45:5a:08:f1:09:79:09:e3:64:a7:d1:b5:cc:cc:61:
d4:aa:09:d3:b5:8a:3b:0a:52:61:27:5c:b5:ba:b7:5d:f7:e0:
e0:dd:c8:b9:aa:b0:93:33:53:3b:ae:e5:bb:2a:06:c0:17:28:
77:8b:9b:0a:4f:9b:5a:2f:4f:89:09:87:ab:d5:5a:8f:b9:7a:
e6:f3:11:65:98:66:17:7f:a2:18:46:66:7c:96:62:b3:77:a4:
d5:82:b9:6c:29:50:3a:5f:fd:dc:f6:20:56:29:ec:f8:ba:92:
26:7b:5e:a2:b2:55:cd:38:55:9e:42:48:61:98:e4:a7:d1:49:
81:bf:f6:78:29:41:21:8f:ff:f7:9f:ef:6c:fd:df:11:4f:50:
64:66:13:1f:18:f1:35:c1:45:73:d6:84:b6:a3:2b:ec:0b:d8:
05:ef:42:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 15:48:25 2023 by rpki-client on console-ams.rpki-client.org