Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
File: 73OJCflNmWhDa7Tgmi1HzHkBczw.cer (raw, json)
Hash identifier: 8qpRixuKy+AuCv3fTXP2XWyziI8oSUyG6XEAeSssD90=
Subject key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF866B9FF9E6416E2D47E4F2905CEF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49372
AS: 58062
IP: 185.237.185.0/24
IP: 185.255.120.0/22
IP: 2a10:e0c0::/29
Validation: Failed, certificate revoked on Wed 07 Feb 2024 08:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:86:6b:9f:f9:e6:41:6e:2d:47:e4:f2:90:5c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:0f:cd:4d:23:49:af:ba:fb:ba:34:44:54:
a5:3d:44:9a:d9:99:09:c6:ad:43:72:ce:d4:2f:1e:
99:01:1b:78:2e:f5:01:82:91:e3:d9:a5:b8:95:d5:
14:e5:ba:50:ca:04:eb:c6:08:5e:3d:b5:1f:db:49:
75:6d:00:91:7f:ac:c3:66:e0:d7:73:80:18:d8:c0:
8a:9f:eb:cc:6e:f2:9d:04:91:9c:4c:ec:3d:f1:c8:
3a:a8:4b:ff:40:d2:7a:1f:ec:9d:22:43:a1:0e:f1:
f7:0c:37:6e:d5:ae:ed:6d:0b:6e:19:e0:a1:1e:62:
0c:23:67:25:0b:92:78:91:da:5f:ea:11:01:94:b5:
30:77:b5:b1:6c:9e:58:18:a4:c6:51:ff:60:9b:9a:
2a:93:5b:a4:de:4b:32:06:52:ae:77:49:54:28:de:
89:74:83:9d:80:07:12:31:88:ca:3b:a8:c7:3e:2f:
9a:78:0e:aa:68:f2:d9:20:d0:e3:ab:7c:c8:06:9e:
68:db:be:3e:70:3d:ad:f6:e9:4a:62:5a:87:d2:f9:
a5:31:3b:96:a8:97:fe:87:fb:9b:7c:2e:1b:f5:57:
b0:53:6d:d7:fb:59:94:58:3a:c1:28:47:53:8e:35:
d1:4c:a2:e7:b3:29:49:82:80:ca:45:17:87:c7:0d:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.185.0/24
185.255.120.0/22
IPv6:
2a10:e0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49372
58062
Signature Algorithm: sha256WithRSAEncryption
20:4d:43:b9:5a:23:56:15:31:9d:e9:38:06:f7:60:6a:c0:cc:
49:47:cb:a3:7f:9d:f6:6e:b9:3b:e5:e3:53:97:ec:4b:38:1e:
2e:5c:44:a2:94:8c:25:f1:ae:0d:54:64:b0:79:3b:bf:b3:38:
13:60:58:a1:87:5f:61:01:72:74:89:97:c0:25:db:05:c1:9e:
99:e1:c9:d4:dd:11:9f:8b:8e:21:87:3d:94:28:da:f9:6e:fe:
f4:ab:ca:b6:9d:c4:86:51:b6:d9:94:50:fc:70:02:ef:2f:27:
69:b9:69:d3:52:69:e7:eb:2b:cd:54:b0:d6:ef:2d:8b:6f:be:
4f:9d:77:19:d4:0f:e1:38:a8:c6:73:c9:cd:28:40:bc:d6:68:
d3:a0:c6:0a:b7:0d:d2:43:7f:e2:39:84:7d:91:e5:47:28:44:
95:d5:76:d6:1a:f2:9d:3f:80:62:16:f9:00:47:b5:b8:16:c7:
1d:1c:30:85:07:2e:66:f4:e1:45:36:cb:23:22:10:4c:64:0d:
e9:f1:3f:ae:33:ab:df:69:27:92:21:22:48:06:67:b9:7a:0a:
df:d6:94:c6:b1:01:20:36:b8:56:3f:06:e6:73:6d:fe:7c:df:
8b:83:a2:db:7d:11:9f:37:37:57:d3:03:a1:85:7e:f5:b1:0e:
45:88:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 11:50:13 2024 by rpki-client on console-ams.rpki-client.org