Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xSQXFZjPp_eeRswBdmkr30xp6A.cer
File: 4xSQXFZjPp_eeRswBdmkr30xp6A.cer (raw, json)
Hash identifier: rCqEU5z5St4CP64z+CFlPYkCi8dXQtG+tg0dmqgteTM=
Subject key identifier: E3:14:90:5C:56:63:3E:9F:DE:79:1B:30:05:D9:A4:AF:7D:31:A7:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01883421C72FD4F91BE5F044CC3AF1E8C0FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/4xSQXFZjPp_eeRswBdmkr30xp6A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 19 May 2023 13:10:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 34672
AS: 44167
AS: 56453
AS: 56708
AS: 204300
IP: 146.19.55.0/24
IP: 185.235.184.0/22
IP: 2a0b:af00::/29
IP: 2a0c:2e00::/29
IP: 2a0c:4540::/29
IP: 2a0d:7100::/29
IP: 2a0d:9080::/29
IP: 2a0d:b980::/29
IP: 2a0e:9a80::/29
IP: 2a12:4900::/29
Validation: Failed, certificate revoked on Tue 21 Nov 2023 11:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:21:c7:2f:d4:f9:1b:e5:f0:44:cc:3a:f1:e8:c0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 19 13:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e314905c56633e9fde791b3005d9a4af7d31a7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:02:51:58:10:6d:5a:21:1e:eb:18:1e:ec:
a1:ad:c5:b4:4f:0b:60:ab:63:18:44:87:7d:8a:8e:
81:b9:4f:0a:63:7e:d0:1c:b2:88:8d:44:50:3a:1c:
b3:c9:9a:8d:50:99:99:60:97:bd:ec:7c:ab:51:75:
ba:53:f0:eb:1b:88:d2:ad:c4:36:de:68:28:2f:2f:
9d:80:18:15:cb:14:09:a1:67:1b:4d:7e:a9:86:c3:
fe:16:59:d9:be:6c:c5:86:17:03:b8:fd:f1:e1:b5:
7b:69:4d:97:b4:bb:1d:b7:fb:4d:39:65:c1:5e:bb:
37:27:89:b3:67:5d:3c:37:56:02:c3:38:f8:af:be:
4b:93:43:c2:b3:93:52:12:3d:41:93:4a:0d:e8:32:
98:79:45:0c:ba:2f:81:b0:7d:cd:e0:6a:eb:a3:2e:
ec:cd:79:f6:1f:8f:a3:45:c6:56:eb:ce:ee:11:ef:
0b:7b:49:f8:9d:ea:02:e0:eb:ab:23:7b:ab:a3:3e:
3e:1d:d7:65:3c:82:6a:cd:94:c3:95:5f:c5:2a:63:
5d:cd:3b:dd:39:ed:cc:71:a7:47:5e:3a:54:10:4c:
5c:82:b9:a5:c5:5f:1d:6d:3a:23:fc:a9:f9:29:a8:
32:d7:38:da:a7:83:df:a3:f9:c9:39:f8:54:c0:0c:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:14:90:5C:56:63:3E:9F:DE:79:1B:30:05:D9:A4:AF:7D:31:A7:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/4xSQXFZjPp_eeRswBdmkr30xp6A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.55.0/24
185.235.184.0/22
IPv6:
2a0b:af00::/29
2a0c:2e00::/29
2a0c:4540::/29
2a0d:7100::/29
2a0d:9080::/29
2a0d:b980::/29
2a0e:9a80::/29
2a12:4900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34672
44167
56453
56708
204300
Signature Algorithm: sha256WithRSAEncryption
12:57:31:32:d1:cb:4f:b6:da:ec:e2:d8:37:ee:a7:73:73:45:
59:fe:7a:53:57:14:c9:fb:88:37:22:6a:36:1b:00:2f:2b:a8:
83:e6:75:52:30:30:50:d5:6a:54:e8:6d:ea:ab:9d:45:d3:2f:
23:b0:4b:34:52:80:0f:63:c4:74:10:00:54:a9:59:11:16:a9:
2e:d8:08:ee:a4:40:bf:32:de:a5:53:e0:4d:43:84:15:8a:8b:
eb:fb:94:bb:44:12:11:9e:d1:8d:95:36:2f:60:da:1f:53:8f:
12:20:75:79:0d:49:3a:60:e7:a9:78:07:52:79:76:55:59:74:
9b:a5:59:65:36:5e:e4:76:3a:bc:e6:0d:b4:24:93:28:16:42:
59:f9:32:5c:5c:25:e4:7b:9e:a3:2b:3b:e3:12:3a:87:6a:5c:
34:81:dd:0e:ba:20:15:23:7b:ab:07:28:e4:11:c5:d6:b9:af:
22:a4:ce:fc:3c:93:0e:48:88:ac:db:e0:90:e9:87:e3:1e:9b:
7f:e7:67:6d:5d:ca:83:54:3e:3e:83:d5:bc:af:48:57:0d:9a:
b1:c7:5e:1d:31:85:f2:13:6f:18:d2:45:d5:dd:f4:23:a3:18:
17:ef:23:d4:4e:3e:54:7e:00:04:b1:b7:38:bd:24:2d:a8:ac:
55:da:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:36 2024 by rpki-client on console-ams.rpki-client.org