Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5jeEwCFAK3J7jDUza1XtXMNHkEo.cer
File: 5jeEwCFAK3J7jDUza1XtXMNHkEo.cer (raw, json)
Hash identifier: rfry83QNILxUgUbKfe9wPgNHLKRjbZG6pQnjl8j7K/g=
Subject key identifier: E6:37:84:C0:21:40:2B:72:7B:8C:35:33:6B:55:ED:5C:C3:47:90:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F20346820C7A941FF95C031D8E537
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/5jeEwCFAK3J7jDUza1XtXMNHkEo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48876
IP: 194.79.250.0/23
Validation: Failed, certificate revoked on Wed 27 Mar 2024 11:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:20:34:68:20:c7:a9:41:ff:95:c0:31:d8:e5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e63784c021402b727b8c35336b55ed5cc347904a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:f1:cf:5d:18:0e:75:6c:56:a4:69:24:de:
93:21:fc:7c:83:48:7c:af:ba:b9:cb:e0:56:b8:28:
f5:aa:ae:90:51:40:50:20:5f:f8:c2:f3:f6:2d:c9:
ae:f9:bb:ff:b1:53:f9:0b:3c:d0:3a:9c:a7:7a:6c:
99:88:cf:62:46:2c:99:cb:f8:ee:5c:bd:6a:37:63:
69:db:3b:b3:d2:11:96:7f:8c:0f:27:5c:3d:20:4a:
b3:91:33:31:3b:32:96:96:0a:9a:87:b2:50:c5:61:
db:74:96:8d:45:89:bb:b1:44:7f:9f:3f:0f:35:da:
aa:5d:5e:1b:1f:6b:cf:0c:3e:54:e9:be:55:5c:6b:
fb:44:f0:2c:c6:1b:a1:96:6e:43:3a:ea:45:2a:59:
e8:a3:6c:1b:68:8f:d3:46:ad:7e:65:da:bb:cc:29:
6b:d1:b2:ea:64:8f:d4:83:bc:f7:0e:f9:85:65:c2:
59:94:55:de:b4:f8:87:9e:f2:d1:10:27:85:cb:fd:
0f:12:74:86:b7:10:b9:c9:8d:5c:f0:e8:93:4f:1b:
9d:35:48:55:9d:70:1c:da:0a:36:4f:db:94:b9:e0:
22:e8:20:16:0f:7d:32:04:7a:cf:50:ef:08:62:d3:
89:cf:16:1f:9f:c2:80:4c:96:3c:9c:bb:4f:63:a5:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:37:84:C0:21:40:2B:72:7B:8C:35:33:6B:55:ED:5C:C3:47:90:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/5jeEwCFAK3J7jDUza1XtXMNHkEo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.250.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48876
Signature Algorithm: sha256WithRSAEncryption
32:f3:2d:77:a3:23:60:d9:71:1e:e8:6a:c5:53:53:84:c5:bf:
69:5d:19:84:c5:02:63:bf:00:53:bb:09:b2:5e:bd:62:82:53:
19:1a:97:33:d6:bf:2c:8c:93:35:17:f4:a0:f8:eb:c6:57:52:
c4:20:0f:e2:a5:bc:8b:ec:c4:c6:6d:07:d5:63:68:5a:95:1e:
c3:fa:eb:c8:ab:b6:5f:e4:80:cd:b3:95:af:50:00:ef:f5:20:
55:61:2a:9f:f0:f3:1d:8d:7c:33:0e:28:28:0e:81:c6:af:9a:
54:11:d0:f1:3d:ed:05:26:73:76:ab:c5:a6:85:7e:8a:7f:c1:
44:2f:67:4a:7d:51:1a:46:b3:dd:02:6e:6e:03:fd:12:34:9c:
cc:40:eb:9f:78:3b:d1:48:78:8d:8c:db:93:d7:2b:7c:b1:22:
6d:70:d8:0f:81:f2:eb:49:38:fc:83:eb:b3:d7:bc:00:f5:78:
78:c0:59:aa:f7:eb:4d:d3:43:cc:bc:e1:a1:78:3f:13:d3:47:
08:dc:d6:39:46:ab:a7:0b:4e:a2:b4:64:56:8e:15:33:ff:21:
eb:ac:39:68:79:b8:de:13:02:b7:2e:95:89:93:2e:b1:34:cf:
d1:c1:cc:77:7f:84:64:12:c5:13:1d:7f:ac:61:43:15:d8:41:
34:f3:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:10 2024 by rpki-client on console-fra.rpki-client.org