Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8C0hySXt19gR4b6W8PKH18zS81s.cer
File: 8C0hySXt19gR4b6W8PKH18zS81s.cer (raw, json)
Hash identifier: jWWfkjprE/LcsXu//q36NvB1imQAVKq3hDm61vJFKx8=
Subject key identifier: F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B148ECA9684DF8702FE9A38833E9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/8C0hySXt19gR4b6W8PKH18zS81s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 202119
IP: 185.20.4.0/22
IP: 2a00:4ce0::/32
Validation: Failed, certificate revoked on Mon 27 Feb 2023 13:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:14:8e:ca:96:84:df:87:02:fe:9a:38:83:3e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f02d21c925edd7d811e1be96f0f287d7ccd2f35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:bf:ff:83:81:f0:98:0a:4f:a8:51:06:a0:
40:43:18:cc:a3:dc:f9:54:f7:4b:7e:fb:fb:6b:49:
43:20:f7:b8:7d:37:ee:61:52:cf:5b:7b:87:53:32:
b3:de:a4:06:f5:49:38:aa:eb:61:41:00:89:10:45:
83:df:d3:da:72:8d:77:6d:ca:2f:74:b1:a3:11:78:
86:9a:31:cf:8a:4e:9c:86:e8:d0:0d:25:0e:ce:77:
5f:64:75:ae:7b:c0:66:ee:ef:01:ac:65:f2:4e:84:
99:a2:71:20:03:fe:bc:a2:4d:e3:54:eb:ac:47:48:
fb:16:94:e4:fc:dc:29:fd:a0:5f:98:dc:7a:e8:a3:
08:91:ce:37:5a:bd:fb:92:03:74:8a:a0:c4:41:7a:
e2:2b:c0:24:43:3f:c6:f7:64:9f:1f:20:4f:59:96:
58:d4:1e:cd:7f:aa:df:f1:cd:cc:3b:a3:ff:62:d1:
cd:43:dd:d0:cd:40:73:8a:0a:a3:62:cf:18:d2:8c:
81:60:01:6c:b0:de:40:10:f5:26:ad:c4:5f:3f:e0:
36:bb:86:e7:ef:38:b9:03:8e:8e:14:85:58:57:46:
06:c7:b9:69:05:14:d0:1c:bf:fd:83:d3:22:6f:87:
5b:3e:3e:37:f1:ba:be:eb:d0:f6:c3:f7:cc:17:c8:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/8C0hySXt19gR4b6W8PKH18zS81s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.4.0/22
IPv6:
2a00:4ce0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202119
Signature Algorithm: sha256WithRSAEncryption
34:ee:51:11:7a:26:d9:e8:ab:a4:87:61:8f:c3:82:d9:bd:98:
8c:18:36:a5:9a:bc:aa:c9:90:c1:22:bd:ff:3e:a6:2d:af:33:
23:c8:23:12:ec:9c:c2:91:cc:2e:eb:10:92:74:e4:3b:25:53:
0d:b2:e4:fc:1a:c8:68:9c:ca:fc:2d:0d:20:92:e4:88:98:fa:
d4:7b:f3:1f:3c:2d:29:73:df:61:4e:fa:3e:89:a5:e5:74:a2:
7e:18:bc:78:2b:51:a2:90:95:a2:31:b6:2a:45:21:86:fd:90:
15:ed:9e:3c:01:65:39:e7:2a:51:06:2e:82:7f:63:d2:a4:71:
77:63:f8:9c:fe:3e:09:4a:d3:24:bd:2b:bb:38:8a:12:38:8c:
5a:63:54:58:30:a7:d1:d8:fc:70:a7:3b:c5:c5:60:03:ab:2a:
95:42:01:0f:ff:6f:3b:3e:87:54:79:a8:e3:75:d5:c4:b0:c9:
d2:8b:84:61:75:44:df:54:da:8d:2b:cf:ae:04:e1:cc:be:7c:
11:75:e9:8a:a5:15:29:5e:fd:08:77:f3:0a:79:84:a2:82:c7:
52:b1:b1:9f:bd:f8:5c:f4:79:10:f9:39:88:63:29:a8:9f:d8:
18:bd:44:0d:98:48:05:d7:94:8e:bb:e4:fb:69:d6:8e:b4:87:
3e:b9:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:09 2024 by rpki-client on console-ams.rpki-client.org