Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
File: 9VzN-l_IGzQsmIh3LbMebE_bJiI.cer (raw, json)
Hash identifier: zaFBKiT05pkHXKqoDfbekMVhLqFZ/5f0G9b0VtsocIo=
Subject key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01875EE5430EFE8EF0DDC70053C9A92E792E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.mft
caRepository: rsync://rpki.co/repo/HYSP/14
Notify URL: https://rpki.co/rrdp/notification.xml
Certificate not before: Sat 08 Apr 2023 03:24:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 51818
AS: 59486
IP: 185.0.19.0/24
IP: 2001:7f8:2::/48
IP: 2a13:c000::/29
Validation: Failed, certificate revoked on Sat 08 Apr 2023 07:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5e:e5:43:0e:fe:8e:f0:dd:c7:00:53:c9:a9:2e:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 03:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:28:81:e1:ed:31:55:2c:40:25:7f:82:31:
7e:b6:3a:d6:05:49:9a:6d:db:b0:46:be:1c:e5:69:
fc:bc:2a:84:6a:74:80:aa:62:81:c5:79:61:47:8d:
19:b6:6e:1d:02:d0:d3:47:7c:b8:8c:76:76:36:31:
26:b3:f7:69:42:66:d1:f9:b0:c1:2d:da:d1:00:ed:
d4:4e:4a:d3:f9:2e:18:0e:e8:f1:c2:05:30:71:fb:
fd:34:b2:16:68:15:a9:ed:08:d1:06:b5:7a:24:0e:
9f:03:a7:ea:7b:30:61:00:f5:98:0d:a5:9e:77:70:
88:cf:cc:36:18:5c:3f:d0:d1:df:e2:5d:20:15:86:
9b:11:1f:b0:e9:27:0f:55:41:31:6c:37:5a:7a:ee:
a4:00:40:b2:1f:6a:ec:db:ad:cb:be:28:98:47:65:
9d:01:61:b4:e2:7d:a0:58:28:16:ce:37:0e:9c:2d:
54:f9:96:86:92:51:44:a1:0f:c6:40:3c:7b:4a:ef:
1b:9a:27:0b:43:72:69:3c:54:37:00:8d:50:5c:58:
53:b1:e0:58:50:d8:32:51:df:85:60:da:64:2d:21:
ba:31:22:4f:47:1c:66:94:5f:d2:a4:53:67:14:0a:
8c:bf:da:9a:b9:f7:a1:7e:ef:88:7c:54:67:c8:d4:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/HYSP/14
RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.mft
RPKI Notify - URI:https://rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.19.0/24
IPv6:
2001:7f8:2::/48
2a13:c000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51818
59486
Signature Algorithm: sha256WithRSAEncryption
a9:c3:62:f8:93:b6:29:69:1d:5c:64:f8:94:88:41:75:71:5a:
86:e7:35:27:f9:1a:f6:32:d1:4d:e1:0b:15:65:fe:75:09:e0:
f4:de:0d:65:4e:5a:4a:a5:60:ac:ea:fd:f1:d3:9a:fe:e0:98:
da:e6:82:29:56:cc:11:01:76:f9:26:4b:f9:43:a3:7d:39:a4:
06:d7:24:6c:20:bf:7d:5f:3b:e2:6d:45:30:89:15:8f:fc:78:
6a:f4:d0:1a:a8:52:e5:ce:03:fd:d2:2b:d6:21:fe:84:96:1e:
95:33:93:39:e1:e8:00:ba:e2:0f:8c:2e:bc:b7:c5:72:cb:86:
ce:56:e5:b0:c1:21:a1:c8:bc:3f:d7:14:14:c2:d1:98:9b:c3:
c5:6a:11:52:c1:6d:3d:ce:50:1d:d1:4d:41:59:d7:a5:94:09:
ef:f8:f3:fc:7a:16:29:d5:15:c3:68:8d:7e:f4:f1:ed:38:e3:
77:98:5a:3b:2e:4f:88:0a:c6:87:ef:61:d7:0a:e8:69:c2:35:
db:4d:7c:ec:7b:f0:4e:c9:ee:18:3d:c5:ff:cc:ba:90:16:98:
bd:3d:f4:a3:d3:a1:3e:37:18:0c:2a:b2:fd:c9:d5:b4:0b:ea:
0c:ec:21:ac:78:2f:d3:a4:1b:dd:01:88:81:2e:c8:e4:9f:63:
ec:7c:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:29 2024 by rpki-client on console-ams.rpki-client.org