Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8mI53KnekLP_m9jCPv38Ep9t7Tc.cer
File: 8mI53KnekLP_m9jCPv38Ep9t7Tc.cer (raw, json)
Hash identifier: Z595xqUMo/q5n5t/U+aTBrnltgj7r23HWmesBu9t5Cg=
Subject key identifier: F2:62:39:DC:A9:DE:90:B3:FF:9B:D8:C2:3E:FD:FC:12:9F:6D:ED:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190EF513D17B0E6835CCECA65809ACA93D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/8mI53KnekLP_m9jCPv38Ep9t7Tc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jul 2024 13:53:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208687
IP: 45.89.4.0/22
IP: 141.195.128.0/18
IP: 185.147.244.0/23
IP: 2a0a:5580::/29
Validation: Failed, certificate revoked on Thu 29 Aug 2024 13:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:51:3d:17:b0:e6:83:5c:ce:ca:65:80:9a:ca:93:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 26 13:53:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f26239dca9de90b3ff9bd8c23efdfc129f6ded37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:90:d6:01:1a:2e:ba:d1:b2:15:51:38:0f:
36:f6:bb:1e:4a:82:a3:ef:28:7a:48:b8:0a:34:9d:
48:92:35:7b:dc:4e:70:f3:05:16:5f:ee:75:0a:60:
18:9c:1c:40:90:ec:c5:c0:3f:ed:96:34:21:1c:94:
34:27:9d:39:05:e0:37:c2:13:ac:4e:e3:dc:7e:a0:
14:df:bc:d4:34:9e:c0:9f:3c:7c:15:3c:66:85:50:
51:38:9b:d2:20:d2:4e:31:24:42:a9:36:0f:d0:d1:
6e:41:cc:f9:0e:1c:a8:7a:69:99:a2:97:9c:28:6d:
58:cf:52:83:b4:21:4e:a1:d5:8e:ec:5a:b2:64:e1:
b1:ba:7a:5e:15:9e:1b:01:e8:64:5d:03:08:7b:31:
1b:bc:04:7c:d9:3f:60:04:3b:5e:36:53:1d:d5:dc:
15:bc:ed:3d:b0:c8:1e:14:ac:c2:e2:97:9b:11:18:
25:56:be:64:e8:c1:6a:11:59:4a:f4:24:e1:7b:6b:
36:0c:5f:16:2c:dd:92:90:21:1c:eb:b1:8c:d6:4e:
5a:18:fe:0e:0d:98:14:ed:2c:64:46:32:8d:41:58:
f2:7e:90:82:af:d0:6b:64:cd:be:34:09:7d:3d:de:
9d:67:4e:b4:db:74:53:31:05:50:1b:be:b0:36:b1:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:39:DC:A9:DE:90:B3:FF:9B:D8:C2:3E:FD:FC:12:9F:6D:ED:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/8mI53KnekLP_m9jCPv38Ep9t7Tc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.4.0/22
141.195.128.0/18
185.147.244.0/23
IPv6:
2a0a:5580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208687
Signature Algorithm: sha256WithRSAEncryption
52:ea:79:78:3d:1c:0d:30:30:5c:cf:ec:20:b4:65:89:47:6d:
61:9c:6f:ea:37:04:c1:97:7e:7d:3e:86:a3:25:24:21:ba:70:
39:27:9b:2f:d5:42:fa:99:6f:9e:f3:ac:ff:bb:84:98:1b:cc:
9c:6a:65:25:88:5d:e2:64:4b:5d:62:6a:00:3a:36:51:21:df:
1b:f6:72:34:7b:4d:8d:25:3a:57:22:8c:92:29:fd:f4:ed:9d:
4d:9b:58:a2:7b:5e:0b:23:a0:dd:e2:74:73:e9:47:91:45:18:
18:1f:cd:52:17:98:fe:41:34:a1:13:c6:24:fd:74:57:fe:ec:
a1:28:3f:1d:a1:02:40:db:d4:71:69:bf:cb:7b:29:de:ac:7e:
e6:1a:ab:cb:b4:e2:96:17:f3:aa:84:93:35:be:81:d4:33:8b:
74:5e:46:74:ef:f9:64:08:f8:67:ba:b2:48:46:08:5b:9d:f1:
fd:e1:f1:4a:a0:ee:a8:4d:eb:8e:69:14:59:f7:b1:ab:50:5b:
d5:0d:1a:d8:8b:0a:f3:af:d9:8c:c3:e3:72:f2:b3:ae:d9:2d:
e9:cf:ed:aa:63:a8:5d:5c:30:69:7f:f0:13:cf:d3:af:73:b0:
25:c0:95:c1:25:e1:dc:da:49:e2:28:71:6c:13:66:23:99:9f:
5f:7c:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 17:04:57 2024 by rpki-client on console-ams.rpki-client.org