Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4JMvqepn25EAvy6pNij6RVfUx5Q.cer
File: 4JMvqepn25EAvy6pNij6RVfUx5Q.cer (raw, json)
Hash identifier: FbC1QBjLz6BMR2hD0EnSfuuFpymkG2MSEE6GojXVkTg=
Subject key identifier: E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F41C8F252EEAF0FE64FD9FA929BF730
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/4JMvqepn25EAvy6pNij6RVfUx5Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 34412
IP: 31.25.90.0/23
IP: 185.49.231.0/24
IP: 185.226.140.0/22
IP: 2a10:5740::/29
Validation: Failed, certificate revoked on Tue 28 Nov 2023 13:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:c8:f2:52:ee:af:0f:e6:4f:d9:fa:92:9b:f7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0932fa9ea67db9100bf2ea93628fa4557d4c794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:b6:4d:d9:fd:44:e3:52:40:c6:b1:fd:54:
bb:1f:ad:7f:87:e7:38:ea:05:37:77:5d:4b:d0:03:
c2:42:69:7e:9b:f9:1f:bc:09:d6:bd:22:22:fc:c3:
58:b9:91:c2:14:8c:06:e4:ca:37:77:29:45:e2:a1:
93:a4:40:ec:80:0c:6a:e0:ca:82:67:04:77:c6:b6:
44:13:4c:34:6d:7e:6c:77:1d:58:f4:18:80:f7:3b:
46:83:1f:b1:4c:54:d0:48:ff:31:32:1a:fd:34:9e:
7a:f2:75:7a:94:6b:ce:72:e6:e0:f3:b4:79:c7:b7:
19:71:4c:07:79:9a:fc:4a:e9:61:e6:44:d0:eb:0a:
4d:83:8d:fc:c8:fc:a9:6e:68:57:cf:e7:2e:74:7c:
b1:4e:4c:eb:43:ac:c7:74:ae:d0:5c:fb:e2:47:bc:
42:96:d8:2a:93:9e:4a:fc:68:a0:a2:04:f8:8f:80:
96:79:6f:2e:41:29:7e:b9:4d:44:41:f6:a3:ef:d3:
25:04:ff:8e:f7:09:c1:ff:23:1e:34:fd:f6:b5:ce:
81:dd:39:71:40:61:19:c2:64:67:1e:1e:7e:33:ff:
8b:a0:e5:52:85:89:56:27:76:d3:e5:95:5a:f1:3b:
14:73:94:3b:94:1f:08:4e:17:86:bf:fb:7b:8b:f7:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/4JMvqepn25EAvy6pNij6RVfUx5Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.90.0/23
185.49.231.0/24
185.226.140.0/22
IPv6:
2a10:5740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34412
Signature Algorithm: sha256WithRSAEncryption
74:92:bd:11:f1:3f:15:34:09:dd:9d:33:54:a0:0d:61:2b:76:
06:82:a6:b3:5b:33:b3:53:fb:ad:b3:8f:f2:13:67:7a:67:53:
29:b6:08:7e:a7:c3:d8:a3:43:2c:da:2a:54:76:55:e0:01:31:
98:62:e8:82:20:87:4d:e4:4d:c2:e3:d9:27:74:76:80:0b:d6:
c7:7a:71:69:1f:cb:43:56:fd:ca:55:07:bb:11:6a:e3:7a:5e:
07:13:45:91:0c:b4:16:b2:c0:93:60:df:e8:21:00:72:81:34:
81:62:cd:a8:d7:f3:fd:0a:53:1e:76:35:c5:6b:81:68:8f:38:
9d:8b:5e:84:69:05:f1:b2:fe:e4:72:14:96:90:82:11:9f:2c:
12:12:af:e5:7e:f0:91:a3:71:3a:8e:c0:c0:3c:c0:94:38:7d:
f4:ac:72:c4:8f:2b:0b:8d:cf:ee:35:7d:77:d1:8b:37:43:8d:
61:19:7b:4d:d7:6f:42:d2:17:19:41:d0:fa:3f:05:52:5f:53:
cc:e4:07:3e:3b:91:8f:c9:8c:80:c5:c0:3d:ff:e2:3f:fe:7c:
18:9e:87:e9:54:fb:bc:72:01:e5:be:9e:b8:53:64:14:75:38:
a5:a7:cb:94:fc:96:8d:a0:a8:04:5f:6f:2c:f4:e7:73:d4:34:
ec:b4:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:53 2024 by rpki-client on console-ams.rpki-client.org