Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer
File: 1LJyGTKQP5gxPNwab9S38u2qQ1U.cer (raw, json)
Hash identifier: vTudZL9O3pxHf6+QVdX7KwwkZcwEWE9vVpHJW/l/15c=
Subject key identifier: D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571677ACFB970D904EA55567A7CEAB98F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:34:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 49413
AS: 202038
AS: 205402
IP: 94.199.232.0/21
IP: 185.108.92.0/22
IP: 2a02:8d0::/29
Validation: Failed, certificate revoked on Thu 05 Oct 2023 07:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:67:7a:cf:b9:70:d9:04:ea:55:56:7a:7c:ea:b9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:67:bc:87:5c:75:58:94:68:99:a5:15:70:
c4:a6:60:90:8b:9a:2d:fb:fa:23:95:cf:c6:ca:da:
a0:2c:97:12:e7:0d:c4:5f:cd:52:09:f1:ae:33:cc:
04:20:39:69:01:67:db:66:27:c9:16:a2:a6:90:43:
6d:a7:14:3d:c4:33:52:4f:33:e6:ef:8c:74:e5:19:
0b:b2:a8:d8:4e:f7:a7:97:93:00:21:06:95:61:0b:
99:ed:ea:c8:7c:a4:69:8e:c4:a3:9c:e3:7e:da:f7:
cc:c9:ce:da:d2:03:3c:9d:11:7f:ec:16:85:e9:84:
08:5b:ee:0e:9c:8d:53:f3:90:9b:fa:89:b3:86:b8:
73:cb:55:56:00:e4:8a:f0:cd:e2:c0:b0:d8:c4:d2:
71:b0:2b:f4:51:09:08:03:58:f6:eb:36:a9:d1:d3:
8b:94:41:6b:1f:93:4e:6d:5d:f4:a4:c1:33:a9:14:
98:9d:7a:16:e8:fc:51:8a:0d:87:50:e8:1d:c7:a8:
ab:78:af:39:bc:2f:fa:ac:d9:24:f1:e9:a5:d5:4e:
02:4f:44:43:4d:e2:19:d3:ab:24:81:5d:7e:69:15:
29:b6:e2:b5:14:e9:00:b7:29:f0:83:10:d2:19:0d:
ef:5e:84:93:a1:d1:fb:21:3f:e6:79:18:a1:66:ec:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.232.0/21
185.108.92.0/22
IPv6:
2a02:8d0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49413
202038
205402
Signature Algorithm: sha256WithRSAEncryption
9b:52:10:b4:a6:8a:06:80:cb:d1:20:37:56:60:5f:95:74:9f:
d3:bc:84:8d:82:92:71:3a:b5:24:a0:dd:80:e8:f5:75:94:5b:
72:82:60:76:cc:84:e5:8a:b0:72:e0:22:4b:20:75:2f:f9:24:
eb:e9:b3:48:84:bb:a2:81:74:a1:ad:c3:8d:77:4d:eb:77:ac:
4d:f0:77:21:04:67:fd:a0:f4:5b:b3:0b:0d:d5:1e:ad:71:97:
6d:02:63:b0:31:92:5a:06:2b:13:ce:fd:21:71:25:89:a2:f9:
09:cd:7b:1c:70:c4:49:58:ee:a0:d4:3e:0a:5b:e8:ed:26:4a:
1b:a2:71:85:4e:33:76:cd:bc:fd:e9:bf:50:c1:04:f9:f2:15:
0c:75:1d:52:5b:b1:f5:5e:b6:72:d4:2d:83:24:4b:b7:15:e9:
1e:f5:b8:3a:bd:25:1e:0e:95:ff:52:d5:cc:1a:93:00:0c:0d:
b0:49:ed:de:37:50:90:6a:dd:f2:fa:4a:4e:dd:e5:4f:86:5b:
31:0c:25:ee:df:bc:5e:dc:df:d6:3b:d7:59:b8:85:f9:d0:f9:
14:ce:68:46:1c:e8:3a:4d:c3:57:8e:b4:2a:70:6b:bf:f4:8a:
0c:dd:db:c8:74:0e:8f:a3:9a:e8:b3:73:68:c5:30:8c:dd:7e:
7e:a1:24:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:10 2024 by rpki-client on console-fra.rpki-client.org