Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
File: 3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer (raw, json)
Hash identifier: /kubhWQ30Xwgw1izXcCsN7wn2R0DeN2zCSIjAJqypuc=
Subject key identifier: DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D6CBE0BC9B1C36D1A125624EB3A94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212376
IP: 185.212.33.0/24
IP: 2a13:ef40::/29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 17:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6c:be:0b:c9:b1:c3:6d:1a:12:56:24:eb:3a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de87352238d030dc2ab690bc1b25fe640745db3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:22:3c:30:d6:26:d5:53:25:c1:c7:7a:83:
1c:19:2b:55:13:26:70:39:d6:e6:7a:9b:63:93:62:
30:17:19:0b:ee:90:15:25:0d:e9:f2:5e:f5:f8:8b:
29:67:66:1e:98:80:c1:b3:ed:87:ec:ae:35:0f:52:
d9:52:ed:b6:0f:24:3b:35:be:4e:5a:cf:0a:de:20:
7f:23:fe:07:c2:ae:fd:21:50:c6:2e:97:cf:fe:03:
d7:e6:60:e5:f9:9b:62:13:3e:4a:e1:6e:9b:eb:b3:
dc:66:c1:1d:9f:c6:c5:ae:d2:c9:22:01:4d:ca:ce:
49:ba:5c:bf:33:ce:28:60:1a:3b:98:9b:34:b2:59:
de:22:74:98:1c:be:a4:74:7a:fd:f9:13:ea:91:51:
fb:6d:68:e6:33:bf:f6:7b:78:1e:e7:c0:11:ed:3b:
f0:32:e2:3a:ce:79:69:68:39:bc:f8:84:9f:49:84:
d8:bd:a4:f7:35:31:d1:45:75:22:0a:f8:13:5c:27:
13:32:d6:20:32:21:49:a3:6b:97:79:51:40:84:6d:
5e:d3:05:17:f2:46:39:9b:47:29:eb:25:06:f0:4a:
e2:b9:77:5c:d0:f6:0b:d6:1e:30:98:43:9c:9d:f7:
b8:8b:e3:7d:e5:4b:47:9e:96:78:8f:2b:46:09:14:
aa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.33.0/24
IPv6:
2a13:ef40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212376
Signature Algorithm: sha256WithRSAEncryption
1d:76:aa:84:2b:84:42:c0:63:bc:8e:1c:60:a9:60:70:c9:9a:
01:04:fd:a7:29:d0:4c:b2:ab:59:38:6f:d7:f4:59:28:13:04:
7c:b0:16:e4:35:93:2d:28:e0:0a:3a:f1:8c:58:43:53:a9:18:
c3:b7:dc:38:5f:e8:7e:95:07:d5:b3:0f:a0:92:50:6d:e7:00:
08:74:ed:90:8e:28:bf:15:b9:d9:2f:62:e8:7b:c0:74:ce:48:
46:41:2a:9b:a3:38:75:2a:5e:f0:a7:a7:77:b6:30:54:67:8e:
99:dc:7a:47:6b:82:fc:52:ee:27:12:bb:c6:90:67:bd:76:dd:
3d:fb:d3:ed:1a:17:df:9f:50:46:04:a0:0b:6b:f5:b9:9a:df:
7c:b4:96:f5:d3:b1:f1:05:bc:db:37:bb:95:b9:41:19:6f:4c:
89:d2:64:6c:64:1f:ac:e4:d5:75:06:70:fa:b8:08:78:b0:db:
ff:f2:f7:40:8a:86:a9:49:2b:0c:dd:a8:4c:fc:7e:aa:bb:d9:
39:6e:20:d3:cb:a3:67:93:14:62:3e:b5:ad:81:4e:47:c7:ae:
5e:7e:09:b9:ed:c4:6a:f7:18:0c:de:71:c7:d2:82:88:a8:4b:
5e:b5:fb:05:01:cf:04:8a:35:54:68:d2:da:3b:dc:6f:1a:34:
7b:6c:07:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:47 2024 by rpki-client on console-ams.rpki-client.org