Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
File: 7HmntUyMlNBsovaFlxokSfuPzs4.cer (raw, json)
Hash identifier: GvCb6Rgt7kUoL9ueBON/qVvUGIqKVC8Nfcf+xizzziE=
Subject key identifier: EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F527281FB56C6FD5226836181D4BA4414
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 May 2024 09:46:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48280
AS: 52112
IP: 193.34.203.128/26
IP: 2001:7f8:159::/48
IP: 2a13:9640::/29
Validation: Failed, certificate revoked on Thu 08 Aug 2024 15:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:72:81:fb:56:c6:fd:52:26:83:61:81:d4:ba:44:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 7 09:46:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a0:4f:43:de:26:36:81:d5:ba:aa:ef:c4:a3:
5b:e4:4f:33:28:7b:8d:fd:fb:2e:1b:40:50:7f:d7:
74:7d:6e:db:d3:ae:f6:31:77:79:1b:3a:0d:b7:44:
d6:b7:ce:29:af:8c:48:c0:c9:73:c6:f2:1d:25:55:
b5:80:21:10:59:2c:6c:a5:c4:ae:6d:bd:99:2e:80:
1a:ca:c6:5e:27:33:dd:8a:bc:89:76:6e:6a:6b:4c:
17:8a:cb:16:8c:08:e7:ef:25:8a:46:5d:9d:63:0d:
fa:05:76:ac:71:85:53:f2:3e:66:a8:58:a4:6b:24:
8c:e3:24:80:0a:e1:ac:0c:ce:b4:77:3c:be:d5:42:
e6:b0:17:85:ef:6d:94:f4:1d:ae:25:bd:4d:53:fc:
72:3f:72:0f:6d:0f:da:98:31:ba:f0:91:78:ae:03:
8d:46:cb:e4:83:df:11:80:e4:85:27:e5:0a:2f:be:
0b:94:92:91:f5:75:f0:85:1c:51:0c:17:42:c3:16:
9e:bf:a5:5e:e6:16:e5:3f:2a:73:41:9c:0c:11:57:
7b:71:c0:86:94:3f:5e:8c:6b:a7:c5:c6:bf:22:ba:
5b:c2:2b:5e:c4:2b:94:f7:c4:f6:fb:8c:80:06:8c:
78:ef:b4:1c:d1:38:70:f3:d8:bf:98:7f:c3:0d:5a:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.203.128/26
IPv6:
2001:7f8:159::/48
2a13:9640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48280
52112
Signature Algorithm: sha256WithRSAEncryption
03:c8:8e:f7:df:b6:06:5c:b8:6f:04:f5:4e:fd:70:d2:a8:14:
0a:64:f5:f9:82:c5:b0:fb:8d:43:39:9d:d8:b8:6e:3a:2c:c2:
8b:63:e5:73:a1:d3:dc:5b:36:9f:cf:48:2e:f2:1e:6c:9d:62:
bb:bf:00:3b:37:92:d5:27:1c:0a:50:8d:4d:4b:a8:34:d1:11:
b0:9a:d6:8d:74:04:a4:b9:de:4d:ec:bf:28:2e:09:b4:26:d1:
13:a0:80:cf:3e:9c:1d:d9:11:cd:07:d3:14:4e:da:39:c5:98:
66:c5:cd:3b:42:d3:79:69:89:ea:5c:94:f6:25:52:96:d5:58:
ab:8e:32:b5:96:fb:52:d5:7b:8a:72:4d:3a:a3:24:b9:d2:80:
ae:a2:73:f5:6e:ad:59:b1:44:af:e8:59:4e:d8:50:bc:51:ef:
37:8a:54:da:3b:84:ed:5d:5c:fb:9e:40:9e:d3:0a:7f:f3:34:
d1:30:5a:62:7c:bd:1d:0d:4c:b7:db:59:1b:1b:75:07:9d:9a:
f5:db:a2:51:9a:6d:3e:82:bb:a3:cb:ae:87:a8:80:98:4a:99:
06:e2:a7:5f:56:f1:0b:e7:90:0c:45:c6:b3:70:ef:9a:47:af:
03:ec:cb:6d:42:9e:a8:a3:8b:d1:90:30:bd:43:b9:81:08:23:
b0:c4:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:26:33 2024 by rpki-client on console-ams.rpki-client.org