Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.cer
File: 4Cq-JhLWekPWgo1bNEGPXzS2qCQ.cer (raw, json)
Hash identifier: CvbBoe5PUuIaM1dPJwICls/p9HN0gRyd2uB3qNFGd1I=
Subject key identifier: E0:2A:BE:26:12:D6:7A:43:D6:82:8D:5B:34:41:8F:5F:34:B6:A8:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E6513559307F5472FC71171E7CEA7D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 207192
IP: 185.161.48.0/22
IP: 2a0f:5240::/32
Validation: Failed, certificate revoked on Mon 11 Sep 2023 09:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:13:55:93:07:f5:47:2f:c7:11:71:e7:ce:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e02abe2612d67a43d6828d5b34418f5f34b6a824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:cd:7a:9b:ea:96:29:55:15:a4:85:72:a8:
af:ab:68:27:7d:dc:c6:17:15:d9:5a:5b:b0:7c:35:
c2:78:15:c4:99:74:ff:c4:04:7f:27:c5:01:de:23:
f5:a0:20:7d:16:b0:37:02:dd:3a:f5:67:eb:67:f3:
5e:e7:3c:9b:b7:f3:02:53:08:3e:ab:62:2e:de:15:
6c:ff:aa:c2:ed:be:d2:b7:33:5a:21:30:65:54:94:
46:db:81:f7:61:6f:6d:3f:89:92:d8:28:38:c8:57:
da:5e:08:36:b7:3a:be:aa:39:24:2a:b8:3a:ef:29:
ad:e8:f0:e3:14:07:64:d4:65:73:59:a8:a6:c9:3f:
9b:1e:ac:10:88:55:b0:72:f1:e4:b8:f6:f1:0c:ec:
bf:55:b6:22:11:4f:88:77:08:07:e9:aa:3a:27:8c:
40:d1:51:85:8a:dd:98:c7:de:48:b3:29:d8:6e:0b:
e5:23:c2:b1:5c:d4:48:16:3e:0d:70:ed:a4:e8:21:
58:1e:b3:fd:46:92:fa:3c:f8:35:03:06:75:12:2e:
d2:e6:64:ea:94:b3:3f:df:23:7c:8d:4e:63:08:29:
21:07:41:2a:21:1d:16:cf:99:a6:ad:75:a1:15:2c:
41:02:9d:69:67:8e:09:bc:1c:91:7f:c8:61:b9:9e:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2A:BE:26:12:D6:7A:43:D6:82:8D:5B:34:41:8F:5F:34:B6:A8:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.48.0/22
IPv6:
2a0f:5240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207192
Signature Algorithm: sha256WithRSAEncryption
2c:21:81:9a:54:6b:38:24:50:dd:8f:6e:bf:31:0b:1f:a1:c9:
de:39:35:d7:c9:cd:4d:07:d9:2b:1d:9e:b6:2e:47:0f:5b:8f:
d6:e0:9c:98:4a:d2:dc:91:a7:cb:54:27:21:79:79:a5:e8:da:
3f:cb:da:5a:7e:af:29:fc:c6:45:9d:62:4f:86:10:fa:66:16:
e0:c4:eb:09:38:26:44:bf:63:08:b0:63:85:f0:16:b5:57:6d:
79:54:88:26:77:67:7c:09:9d:3e:b1:8f:e2:8f:65:69:1f:ea:
7f:57:1d:6a:fb:d7:0d:33:df:05:6b:05:4e:b2:e3:52:dd:02:
5b:b6:3e:72:7b:d7:c5:2f:14:db:70:ba:a9:3e:ea:ce:7b:27:
91:4e:07:9e:7a:d3:d5:58:0f:79:7a:1d:ea:9e:de:1b:49:97:
df:59:72:6a:28:37:15:55:4f:c4:17:f2:53:1e:a5:15:24:84:
13:11:4e:53:f2:f6:00:37:b6:55:27:f1:e6:8e:37:a2:bb:fc:
b3:ff:36:4e:cc:a9:22:f1:58:3e:a7:b5:9e:93:39:ad:3f:c9:
64:52:03:55:05:bc:53:63:5e:a3:18:9e:03:0e:1d:37:18:6f:
42:36:55:a0:bf:7e:57:8d:6c:2e:fb:15:71:dd:90:6a:b9:ca:
25:51:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:04 2024 by rpki-client on console-fra.rpki-client.org