Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
File: 4LnGXclQU-Q34yyZrPO9xelcse4.cer (raw, json)
Hash identifier: KDwxl1LU+vhdWFNC44yIse2JvGih5dGNB7bg1Q/KomM=
Subject key identifier: E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B637A07453705ED1580A171B5E65438
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 49931
IP: 109.164.0.0/17
IP: 185.131.60.0/22
IP: 2a03:3a00::/29
Validation: Failed, certificate revoked on Thu 28 Dec 2023 13:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:7a:07:45:37:05:ed:15:80:a1:71:b5:e6:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:04:3b:3b:e3:d3:4b:94:9f:f2:43:3a:91:
61:b0:5a:7a:48:1f:7d:7a:9f:be:ed:21:65:8c:6c:
60:94:38:f3:84:e6:44:7b:a4:d9:b8:0e:ec:8d:2c:
b2:c2:a5:81:f2:79:c8:23:d3:ce:84:fe:66:98:8b:
82:ce:68:90:5c:96:67:ff:b8:2a:59:79:22:d2:9c:
e8:c9:de:af:73:6a:50:3d:9b:c8:d0:d3:f8:bd:8c:
f8:cd:3f:2b:5f:a8:cb:7d:b9:78:69:01:a9:6f:e7:
f3:08:02:ff:46:11:a7:94:d0:13:f1:64:97:0f:a9:
cf:31:cd:75:86:e3:08:53:e3:c9:01:13:4f:37:e8:
b9:97:e7:b6:44:7f:19:65:1c:7f:50:40:31:e5:47:
13:e6:d4:36:3a:36:33:d3:ad:a5:2e:d9:19:cf:c6:
c9:6e:eb:20:b2:90:2c:ec:01:27:90:07:bf:7a:40:
89:ef:d8:02:a3:f0:30:30:c2:75:82:f1:39:dd:2c:
7e:7f:3c:f8:5b:ea:66:99:00:a3:91:a8:31:8b:88:
35:0f:fa:ba:94:58:57:3b:3a:38:cc:ca:26:17:da:
a2:35:44:68:d7:8d:45:9b:c5:c3:6a:3c:0b:2f:9f:
87:ed:fe:5e:c5:e7:e4:bc:c3:b1:09:e7:1a:90:8b:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.164.0.0/17
185.131.60.0/22
IPv6:
2a03:3a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49931
Signature Algorithm: sha256WithRSAEncryption
29:8c:75:85:6d:8e:80:c6:b9:dd:f9:0b:c9:0e:8d:77:e1:a4:
c7:9c:d6:5b:90:24:72:9d:f2:a2:d2:e0:a4:38:17:f1:f3:64:
dd:86:63:d2:25:e1:c7:77:9c:0b:52:8b:a1:9f:97:04:bd:33:
95:33:74:26:4c:80:7e:e9:64:44:66:6d:c4:2a:83:f2:2c:d2:
94:16:e2:b1:2e:3b:75:80:b5:06:8e:4c:9c:3d:f3:27:08:d5:
e3:28:b9:6a:02:8a:5b:ec:0d:41:4c:1a:e1:d8:90:08:02:47:
1d:7f:26:25:64:8a:69:26:cc:69:26:25:ab:fc:72:b2:4a:8a:
08:17:76:dc:25:c6:84:c8:76:0b:2a:72:28:25:47:6c:ac:ad:
17:c6:11:32:5a:b9:08:03:39:5c:c3:45:fc:d3:d3:f9:28:a2:
de:1d:1d:ba:21:cc:ad:3f:6c:f1:bb:d6:82:9a:9c:6f:9a:1e:
5e:1c:12:4c:6e:91:97:62:e4:6c:e1:2e:b3:7b:2e:4e:91:99:
66:dc:45:fe:f5:10:dc:b7:41:52:1d:58:02:61:73:0b:6b:87:
57:1e:de:77:43:04:86:ce:dc:78:17:68:99:cd:3e:03:72:c6:
dd:9e:77:60:77:aa:1d:72:73:e2:57:08:37:61:c1:87:ec:56:
95:ad:09:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:06 2024 by rpki-client on console-fra.rpki-client.org