Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Wt8dTe3mSAPDD88aDKmmOlQijo.cer
File: 9Wt8dTe3mSAPDD88aDKmmOlQijo.cer (raw, json)
Hash identifier: cynJ/+1Caz9pmO++al/ragC+Y4H09QPLn85deyRVWDI=
Subject key identifier: F5:6B:7C:75:37:B7:99:20:0F:0C:3F:3C:68:32:A6:98:E9:50:8A:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3BDBDB43A9BDCC4C46D04EE7CE0C2E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/F56B7C7537B799200F0C3F3C6832A698E9508A3A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:37:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204978
IP: 185.233.96.0/22
IP: 193.84.101.0/24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:bd:bd:b4:3a:9b:dc:c4:c4:6d:04:ee:7c:e0:c2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:37:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f56b7c7537b799200f0c3f3c6832a698e9508a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:89:2a:93:27:f0:7f:7a:70:cf:56:9f:82:
37:e4:d8:12:1a:a7:cf:78:a6:47:d0:f6:dc:d3:be:
0d:80:52:58:a5:9a:b6:6e:55:94:fa:f4:e0:aa:a5:
79:a1:ee:75:ab:d5:fb:8d:9a:98:64:d7:d3:c4:a8:
0e:98:a8:00:37:a6:96:6d:a0:1f:09:c6:c0:3a:07:
bd:f8:a0:47:f8:8a:07:c6:c0:dd:0b:cf:5a:0e:6f:
e2:6f:9c:be:cc:5d:0e:eb:c6:ff:33:f8:07:d9:43:
c3:41:f3:52:56:0c:29:24:6c:6c:de:17:a3:69:bf:
36:49:41:28:1f:bf:0c:2b:83:78:7c:b3:d6:59:b2:
77:60:b3:6f:36:c0:0a:4c:1c:40:b5:66:b3:72:e9:
ee:98:15:39:4f:6a:c7:f0:f1:ce:53:46:6f:25:35:
e2:a0:45:a4:01:f2:98:f9:fe:7a:50:dd:f2:63:a3:
50:7d:3a:e3:1b:75:06:b0:76:68:1e:f9:d8:2b:9d:
b7:e8:6a:3e:73:f3:e3:58:dd:14:46:f4:7f:69:28:
f4:78:6f:37:03:41:53:9f:14:ee:40:6e:39:d4:3e:
e9:04:e2:a5:ed:32:c2:2c:b9:53:32:fb:21:3f:3b:
55:f9:62:22:90:7a:37:31:b8:ce:ba:48:f3:87:7b:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6B:7C:75:37:B7:99:20:0F:0C:3F:3C:68:32:A6:98:E9:50:8A:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/F56B7C7537B799200F0C3F3C6832A698E9508A3A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.96.0/22
193.84.101.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204978
Signature Algorithm: sha256WithRSAEncryption
a3:eb:a8:44:ea:bf:86:a3:ab:40:9a:65:63:2d:d1:ed:ed:4b:
ea:cb:b7:4c:3b:ae:0e:d0:2a:31:d0:c7:00:78:db:b1:28:5e:
74:67:cb:ac:07:57:3a:11:d5:4f:f6:49:07:73:02:3e:30:df:
59:db:a5:da:c3:93:c0:05:88:b7:77:33:09:fc:7b:7f:e7:4f:
cd:19:64:e4:a6:c0:c1:78:5e:5e:17:ea:43:05:7c:77:3e:c0:
fc:fb:01:c3:d8:f0:94:f7:e2:e2:35:80:14:05:cd:47:a2:11:
ba:53:bb:bc:34:71:22:e2:43:02:44:bc:fe:da:21:9c:0a:4b:
aa:e6:48:48:be:8c:bc:35:8c:dc:9b:3a:ef:4a:13:f4:e9:ae:
4c:a1:24:3a:5a:06:07:f5:87:44:c7:34:d6:2a:da:72:b9:14:
1c:d2:8f:1f:fa:33:62:a9:75:9f:c3:d2:6d:5f:4a:f6:11:d9:
d1:0e:31:00:5f:c4:91:44:0b:a6:0c:52:c5:23:1b:1a:d7:94:
da:cc:a8:b8:59:eb:7b:96:a3:4f:90:3b:a5:a9:b6:6d:6a:a1:
e1:3e:66:f0:9b:fd:28:2f:15:ef:70:fd:13:b7:96:ed:2b:4c:
1b:5e:10:e6:88:61:a7:8e:63:88:fd:5d:62:f1:cf:f0:33:9d:
c0:df:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:29 2024 by rpki-client on console-ams.rpki-client.org