Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer
File: 4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer (raw, json)
Hash identifier: HkKgt2poYLn/ETA/pvx7Pg5PlbTW05ZD9tpzUCGckyQ=
Subject key identifier: E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAE99FFF1D303A7F0B42ADA5F7F3D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 51067
IP: 91.216.121.0/24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 11:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:e9:9f:ff:1d:30:3a:7f:0b:42:ad:a5:f7:f3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e14a9ac72ce8b28ab6349dad075f4eec3dcb847d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:34:11:cf:41:67:86:42:93:bf:13:50:24:
d3:d2:7c:bd:bc:42:87:8c:39:34:7a:cf:28:7e:83:
9b:57:2f:61:ee:79:b4:f1:41:24:90:3d:b8:b4:87:
26:a2:38:e8:76:ae:80:4b:0e:17:31:3e:15:3b:7a:
41:33:20:ec:9a:37:2e:06:f6:8a:d0:61:5a:eb:a5:
1f:1b:0c:8e:aa:8d:45:62:84:00:0e:fa:2d:d5:4c:
64:6a:63:5b:b1:3a:20:f8:30:c0:b7:4e:bc:0c:68:
ee:6e:c9:a8:44:8f:58:aa:45:62:13:d3:59:a4:14:
1f:09:d6:bb:ae:5f:f9:6e:e9:3a:8d:c3:75:72:68:
74:13:10:c5:e3:bf:4d:f7:88:ac:18:96:1f:7c:9d:
16:c1:92:10:e4:58:ce:eb:f0:97:63:91:20:52:bf:
ee:27:76:76:86:75:8d:8e:aa:40:72:cf:1b:1b:81:
26:0d:72:99:2f:ab:8d:fc:d7:73:03:7c:47:d4:ed:
72:39:e9:f4:b6:27:ea:88:f4:fc:b7:f4:fa:3b:54:
e4:80:80:6d:dd:d5:46:71:6d:7d:26:0f:4a:ee:bc:
c6:3c:6e:59:00:a1:41:c4:94:9c:57:b7:88:e4:fc:
5e:29:99:f0:55:0d:b4:5e:ec:b1:8c:ce:cf:61:af:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.121.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51067
Signature Algorithm: sha256WithRSAEncryption
0e:81:dd:6f:8a:f7:f6:1f:da:d7:a0:c9:b4:e2:c8:b4:d9:da:
12:7b:91:98:3a:b8:97:f3:21:7f:cb:47:f4:8e:e2:6e:5b:d0:
49:2c:e6:ab:f8:18:4f:2e:b6:1a:f5:74:8f:70:af:ca:60:a5:
9a:26:9a:1e:9a:db:b5:00:83:8d:fd:5a:68:0f:a6:01:6f:38:
46:37:91:7d:c3:f3:77:90:fb:a2:d6:f5:ce:ff:ec:3c:4b:74:
58:6c:3f:be:80:c3:1b:4b:c6:3b:a9:72:76:f1:f7:2a:b2:36:
2b:0b:4a:61:d3:be:45:05:98:86:04:35:dd:7b:1f:19:23:c3:
24:47:73:28:48:37:18:8f:2d:17:60:1f:2e:87:bd:20:5c:96:
5c:44:04:f6:ab:34:9e:39:4b:48:e5:3e:47:b0:88:84:f0:75:
c8:a8:f9:91:36:af:0d:b1:20:91:81:b4:8e:4d:ed:c9:31:6b:
84:06:d1:c3:db:8d:4d:28:0c:15:ad:7c:9e:35:bc:a3:bc:e3:
5e:8a:3c:9f:13:03:3f:aa:88:2f:d0:c3:0f:f3:b5:75:e9:7b:
32:90:c5:d9:11:28:1a:54:00:87:8d:57:cb:e9:9a:e3:9f:e3:
03:24:1b:58:0c:04:26:e4:c4:2d:d2:84:63:21:40:90:0e:13:
bc:04:3b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:08 2024 by rpki-client on console-fra.rpki-client.org