Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
File: 7BG20O5rnsz-NOxQaidQeMOezLM.cer (raw, json)
Hash identifier: UbOSqDkaPlQvwpxlOAdfgEIyVI3BLnGoKpalr0PfT7s=
Subject key identifier: EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DC5C298E554A956462D447A3E40A7CF14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 Feb 2024 09:04:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208172
IP: 2a0f:1680::/29
Validation: Failed, certificate revoked on Tue 20 Feb 2024 13:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:c2:98:e5:54:a9:56:46:2d:44:7a:3e:40:a7:cf:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 20 09:04:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:a9:d6:17:6c:39:77:ea:81:71:bf:be:15:
53:8c:b0:26:47:bf:a1:9b:64:8f:db:4b:d1:1c:29:
f5:44:23:cc:a3:7c:49:79:12:a6:52:a7:c3:6f:2d:
4b:7c:23:8c:7f:b6:0b:96:f5:c8:77:68:59:42:dd:
85:eb:00:8b:39:c5:4d:22:77:c4:9c:67:bb:f2:68:
d8:57:1b:d4:d0:59:bf:39:36:a3:08:22:bb:dd:94:
db:9b:c9:ae:fa:ee:f9:7e:9e:bd:db:25:09:7a:42:
a5:cc:94:62:ea:73:6c:d5:64:73:bb:3e:3a:6b:d1:
7b:15:f3:7c:84:f8:d3:ce:14:c3:97:fd:cf:e8:ef:
7e:1e:b5:27:99:b3:6d:2e:c1:b1:64:e7:97:76:a6:
7f:f8:9a:d2:16:d8:b2:b8:f0:00:be:bd:b5:69:4e:
4e:f9:5a:9a:7a:36:b9:f2:9b:7e:ad:6f:b3:8c:23:
db:f4:89:80:3a:ff:26:bf:fe:84:6b:3e:13:b0:cd:
6f:bc:41:c4:e2:45:0b:ae:06:6f:74:1b:c8:92:53:
b3:7d:d6:fc:0e:95:38:ae:23:20:4c:6c:93:19:da:
67:e5:ad:38:7c:f6:c5:81:fa:ef:4a:a5:1c:f0:26:
f0:f4:c7:43:3e:10:7a:0e:19:ab:83:d5:43:a3:05:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208172
Signature Algorithm: sha256WithRSAEncryption
ad:4c:0e:7a:54:a7:53:65:19:44:71:3d:fe:fa:7d:25:4b:fe:
95:22:23:2d:75:f6:b1:b9:94:ef:2d:12:2b:72:6d:a8:21:37:
b3:40:84:ec:9f:57:b5:c2:5b:47:67:b7:39:6b:8e:dc:db:b0:
98:9d:61:e1:59:93:65:c0:55:a9:ee:1c:19:c5:0f:3d:fc:eb:
bf:6f:4e:4d:e9:19:cf:4d:04:84:af:07:a9:8a:07:99:a1:c5:
73:c3:ab:31:58:4f:f3:43:dc:79:85:58:fb:a5:f9:3f:df:94:
84:6e:7e:f9:43:3a:6b:77:d2:8a:29:1c:72:0c:ba:1c:84:c4:
37:93:a9:eb:33:0d:01:53:29:bf:49:65:cc:3e:99:ef:da:18:
16:d8:de:46:0a:70:f8:01:43:b9:fc:d3:b4:98:95:e5:7e:4c:
96:4e:03:38:6b:46:d0:77:7e:50:ca:58:fb:ea:ab:db:28:b0:
a8:25:4f:8a:7c:7c:32:21:a5:1d:9d:42:16:87:bd:b4:1d:ea:
ef:4c:5e:25:b7:7f:81:3a:c9:6c:37:e7:d5:ce:75:73:91:7d:
89:87:67:3f:01:be:dc:b9:8b:8e:8b:28:bd:00:10:35:8a:9d:
c1:e5:f5:06:11:76:01:0c:19:17:13:e9:43:cd:3c:cd:a5:0a:
8f:29:e6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 17:51:13 2024 by rpki-client on console-fra.rpki-client.org