Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
File: 49qlehhT2z-5Q7n7CyiBnbNwsnE.cer (raw, json)
Hash identifier: Usm56hJrRhMXD4SN0mELk43X6kH796TSuSa1SlSDh3k=
Subject key identifier: E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D5FE24CE07F5509219BD77624CBAD7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 201922
AS: 207167
AS: 208143
AS: 211085
IP: 85.209.28.0/22
IP: 185.59.144.0/22
IP: 185.179.32.0/22
IP: 185.234.132.0/22
IP: 2a02:6c20::/32
IP: 2a0a:7780::/29
Validation: Failed, certificate revoked on Tue 19 Dec 2023 14:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d5:fe:24:ce:07:f5:50:92:19:bd:77:62:4c:ba:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:81:db:5e:d6:62:1f:8d:f1:fa:4f:38:f1:
f1:f5:b6:34:a4:6a:89:55:62:71:27:1e:56:5e:b4:
51:53:0e:3e:e7:88:22:21:86:17:e6:d5:4e:cd:e9:
3a:04:2c:06:e0:11:cf:ea:a3:6c:99:29:6b:0e:3f:
ae:3c:ab:ed:e6:7e:d1:04:4e:59:f4:e3:0b:56:e7:
f2:72:dc:1b:8f:2d:c6:53:28:bd:01:0e:aa:7b:62:
44:b1:96:3e:9a:d5:fb:22:9a:6e:59:fa:28:4f:6f:
9a:b3:f4:37:80:96:54:43:d7:89:e5:91:8f:b6:a5:
c7:39:b8:57:1b:92:5d:34:68:57:92:45:62:96:55:
a1:6d:d2:f4:b2:11:82:fa:73:dd:75:37:4e:92:ec:
03:a8:90:d5:60:96:c5:08:7d:8a:32:aa:27:37:7e:
01:4a:6b:b4:a2:f9:f5:26:33:14:3d:7f:2d:d7:28:
4b:15:57:8c:e3:16:77:d8:b3:53:15:a2:7b:8f:15:
b0:0e:49:0c:1b:9f:ff:2d:1d:9e:f9:f1:61:df:a0:
d9:11:66:cb:84:8a:6b:10:af:8e:cd:8a:94:77:66:
a3:67:17:22:f0:5a:ba:4a:ac:23:82:a0:d5:a0:d2:
62:cf:b8:85:5b:b3:df:0c:ff:6d:00:88:9d:73:a1:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.28.0/22
185.59.144.0/22
185.179.32.0/22
185.234.132.0/22
IPv6:
2a02:6c20::/32
2a0a:7780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201922
207167
208143
211085
Signature Algorithm: sha256WithRSAEncryption
9e:93:9c:aa:ea:3f:87:88:76:43:65:c3:1c:5a:35:1f:52:7b:
8a:ad:b3:c8:7b:93:51:e8:02:49:1e:04:e6:09:eb:7e:d0:bc:
2a:b1:23:64:e2:35:18:03:d4:52:9c:20:41:8f:e4:12:7f:df:
b4:09:44:06:cb:69:d0:85:5a:1c:90:ef:8b:32:6c:be:7c:12:
63:5d:8a:a1:95:df:5c:3d:60:2e:99:f1:8d:81:86:54:55:0d:
ab:88:c7:07:e7:f8:79:e1:98:8a:d8:e5:3e:28:61:f6:c5:b4:
75:85:15:ee:d9:fe:23:f8:6f:fb:17:58:2c:c8:fe:cd:d5:df:
36:7b:35:5d:a6:6f:65:fc:03:69:4e:f0:07:01:8c:0c:c4:a5:
52:ba:13:36:7f:21:ab:1e:a1:9e:6a:9d:10:1a:14:33:22:e5:
01:2d:61:34:f4:c7:de:b2:c1:01:de:69:22:f9:35:f4:df:2c:
20:c9:f7:69:46:e3:51:9c:a8:84:48:d2:70:70:14:19:a9:f6:
9b:b9:b8:b5:98:e6:4e:90:33:81:35:a5:92:58:39:b0:d3:7a:
05:0e:92:c0:7f:26:b7:b1:8b:6d:30:92:81:64:c9:26:62:e9:
98:4d:c2:71:e3:35:10:03:68:f6:98:b5:c7:57:41:83:79:e4:
58:75:81:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:50 2024 by rpki-client on console-ams.rpki-client.org