Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4jMJrHu6qQkxmRPoX2IcvwQu1f4.cer
File: 4jMJrHu6qQkxmRPoX2IcvwQu1f4.cer (raw, json)
Hash identifier: 0vw9GvWsx5jqBQLEr8g2P7PjDtJiK+mhXz3YZwemiiA=
Subject key identifier: E2:33:09:AC:7B:BA:A9:09:31:99:13:E8:5F:62:1C:BF:04:2E:D5:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC48D67E78BC6536E8D7C3F36C206E8B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/12/E23309AC7BBAA909319913E85F621CBF042ED5FE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/12
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:24:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202384
AS: 208351
IP: 45.137.32.0/22
Validation: Failed, certificate revoked on Fri 19 Apr 2024 09:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:8d:67:e7:8b:c6:53:6e:8d:7c:3f:36:c2:06:e8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:24:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e23309ac7bbaa909319913e85f621cbf042ed5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:6a:87:81:46:ad:0e:4b:c6:75:f0:47:71:
5a:17:5f:e3:47:c4:6d:9f:33:de:e2:1a:6f:92:d1:
ce:89:4d:e4:0f:eb:30:a9:dc:60:3d:c4:4d:8d:a3:
48:5a:6d:83:9d:a9:ad:22:ab:e0:6e:5f:69:43:aa:
d8:c9:a6:1f:28:4b:62:18:e8:76:28:30:e5:2b:0b:
33:ff:62:17:96:27:1b:99:66:90:ab:c2:91:f6:90:
11:18:59:b6:18:a2:4e:37:63:74:2a:1c:3c:e1:17:
6e:d8:d9:e9:c1:fb:ed:72:88:17:ab:37:c3:98:25:
79:78:f8:d3:e2:89:dd:c5:c0:6b:c3:ea:ea:c3:d7:
f8:3a:bf:b4:b1:c1:8b:70:71:4d:8c:60:10:af:34:
87:bd:ed:d5:e5:51:a9:6a:d9:b6:8e:46:94:ad:11:
29:2f:c8:49:84:a8:bf:82:9e:e3:49:bf:b6:29:0e:
ae:1f:85:a4:04:24:49:1c:04:63:df:fc:83:83:82:
ee:78:f8:b3:ce:5a:8e:44:e1:45:b7:8b:a6:b0:da:
70:fa:4f:0e:66:02:c7:30:ff:98:1c:e3:cd:fe:73:
fc:d6:36:86:c5:a0:a5:33:96:14:46:61:a9:e3:ac:
ff:dd:af:c0:35:82:19:31:ee:e0:4d:88:27:b2:6e:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:33:09:AC:7B:BA:A9:09:31:99:13:E8:5F:62:1C:BF:04:2E:D5:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/12
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/12/E23309AC7BBAA909319913E85F621CBF042ED5FE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.32.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202384
208351
Signature Algorithm: sha256WithRSAEncryption
24:be:1b:f8:26:07:83:00:d8:37:7a:bf:6b:92:14:5e:9c:ec:
b6:29:16:d2:3e:98:8f:32:c9:d8:84:f7:50:30:38:9a:64:1c:
d6:7d:b0:60:ef:23:9d:47:88:92:7f:be:74:99:89:fc:2a:7a:
cb:0a:0b:54:a9:80:83:71:c6:05:78:89:93:40:d6:58:72:70:
50:9b:d8:ae:25:94:2c:f6:56:cf:33:43:8b:17:dd:83:3e:37:
49:03:d1:9a:2d:9c:96:27:61:ed:7d:fd:0e:c5:f2:ac:1f:a0:
29:f4:d4:b6:2f:ed:1f:75:48:45:51:54:87:3a:a6:49:f4:60:
78:aa:d3:93:6f:17:64:ad:d3:28:9f:9b:bc:fe:74:c3:a0:d8:
95:f1:45:8b:5d:d1:92:ea:ac:fd:21:27:d4:31:a8:d1:1a:e3:
29:07:ee:4c:61:4b:59:83:93:cb:18:8d:47:9f:28:ba:99:66:
05:e4:49:d9:d6:86:6b:b6:84:d9:48:25:dd:bc:6f:73:e5:da:
bf:1d:f0:8f:f7:79:c5:80:c6:61:03:bf:e6:8a:9e:3e:22:40:
ed:02:b6:9f:f1:d0:54:77:ac:27:f9:45:4d:9d:69:af:58:11:
f6:91:6c:59:a3:64:82:8b:87:fe:09:2c:93:48:bd:d8:fc:64:
af:82:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:32 2024 by rpki-client on console-ams.rpki-client.org