Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b-QT0GL_HtJuF86vaxBfMpeN1k.cer
File: 6b-QT0GL_HtJuF86vaxBfMpeN1k.cer (raw, json)
Hash identifier: Cwh3E0VhhQFtWUgQwts9OFqnZoaZf1Bg7RQbwJIyAr4=
Subject key identifier: E9:BF:90:4F:41:8B:FC:7B:49:B8:5F:3A:BD:AC:41:7C:CA:5E:37:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEA45CAFC6617881E9FBB1E97A50F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/6b-QT0GL_HtJuF86vaxBfMpeN1k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8896
AS: 212642
IP: 77.241.96.0/20
IP: 89.221.96.0/20
IP: 185.15.216.0/22
IP: 185.92.52.0/22
IP: 185.126.184.0/22
IP: 212.33.128.0/19
IP: 2a00:1e18::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a4:5c:af:c6:61:78:81:e9:fb:b1:e9:7a:50:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9bf904f418bfc7b49b85f3abdac417cca5e3759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:ed:de:42:21:f1:a5:c1:02:ba:09:7f:7b:
81:22:21:73:a3:7e:ef:1f:24:94:20:2a:1a:bb:c6:
bf:06:7d:c2:95:7c:51:4d:f6:f2:12:c0:8b:9b:c4:
a7:1b:0d:f0:f7:79:ec:e6:a3:42:ad:cd:7c:1f:6c:
11:cd:ab:99:21:19:0e:1b:f2:24:43:a1:75:ee:88:
7c:80:f6:2c:c0:11:98:1b:92:08:a3:3e:ad:e8:6d:
28:b1:b0:8f:1a:b1:82:64:8a:f5:33:aa:1e:49:8c:
40:58:58:e4:7d:a7:4f:1d:35:69:ad:a3:41:50:f2:
d2:f0:6f:36:44:7a:c8:19:42:6a:d7:cb:88:4e:49:
35:7a:12:ab:d3:d0:ed:c0:bd:e8:9f:0b:a4:8b:1a:
c9:ab:42:90:30:a1:46:37:16:48:3e:14:ea:b1:db:
e0:57:ff:8a:0a:49:d6:47:bb:27:7a:43:70:c3:9f:
e5:14:fe:b6:5c:d3:32:14:79:09:14:d2:f2:d1:9f:
3b:a0:64:cd:9a:c5:a9:60:bd:a5:24:2e:bf:8c:7e:
5a:58:24:37:7a:2d:22:a3:df:64:ad:e4:1c:9c:c9:
ea:32:28:53:f2:30:65:09:d3:6e:d6:cd:e4:63:fc:
1e:14:3e:26:b0:3e:5b:16:41:88:5c:f9:1e:2a:48:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BF:90:4F:41:8B:FC:7B:49:B8:5F:3A:BD:AC:41:7C:CA:5E:37:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/6b-QT0GL_HtJuF86vaxBfMpeN1k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.96.0/20
89.221.96.0/20
185.15.216.0/22
185.92.52.0/22
185.126.184.0/22
212.33.128.0/19
IPv6:
2a00:1e18::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8896
212642
Signature Algorithm: sha256WithRSAEncryption
04:33:bf:88:6e:7d:71:00:74:79:5f:fb:e4:7a:3a:d5:c4:71:
9c:52:60:de:c4:ce:7c:9d:10:b1:bb:2d:31:cf:f4:05:bd:52:
07:48:b5:5c:39:8b:dc:f3:11:83:9c:fb:c9:62:1e:5d:96:a6:
42:81:b3:df:dc:7c:3f:ad:fa:de:9e:6d:27:f5:7a:f7:63:5a:
36:cf:23:a8:88:cc:84:3d:a1:2c:62:74:9e:19:3c:a3:4c:a3:
95:32:e4:ed:c8:08:e1:bf:22:dd:c9:de:35:e8:76:13:6d:ad:
e4:13:85:6f:68:8d:b3:08:70:e7:36:0e:86:79:07:6b:22:c0:
0b:6d:f5:cf:be:18:c1:44:df:7a:66:15:8b:bb:ea:1a:cf:38:
71:bc:c8:a2:49:5b:6f:f7:54:75:fc:75:bc:d3:e4:ec:0b:60:
e3:3a:e2:8a:d7:0e:7c:26:3c:7c:2f:5e:60:78:b7:a9:e4:f0:
cc:c2:18:98:47:0e:59:3f:d4:ff:8c:16:38:10:d2:02:25:86:
0c:c8:13:d9:4e:0d:74:33:7e:12:66:d3:07:b1:6b:87:eb:a6:
12:c7:c8:c7:13:99:ff:0a:3c:3d:f3:f2:1f:e2:c6:d3:09:51:
56:f6:0e:57:27:7f:0d:e7:5f:b3:f4:f6:ec:8a:d7:30:c2:cb:
de:a2:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 13:09:58 2024 by rpki-client on console-fra.rpki-client.org