Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AJWk-PTUGIjkOUxfVkl5KV0vE6o.cer
File: AJWk-PTUGIjkOUxfVkl5KV0vE6o.cer (raw, json)
Hash identifier: nXIFNdcG67aQMvEOj60dJSu4W0h/fKqbC2UaSAcTPto=
Subject key identifier: 00:95:A4:F8:F4:D4:18:88:E4:39:4C:5F:56:49:79:29:5D:2F:13:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425367212AC3A78F9F257268F82716C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/AJWk-PTUGIjkOUxfVkl5KV0vE6o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209531
IP: 147.78.168.0/22
IP: 2a09:27c0::/29
Validation: Failed, certificate revoked on Tue 05 Mar 2024 12:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:36:72:12:ac:3a:78:f9:f2:57:26:8f:82:71:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0095a4f8f4d41888e4394c5f564979295d2f13aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:ba:82:ae:2e:52:62:ee:17:61:50:07:ba:
1a:df:60:93:f7:5c:fc:9e:c7:02:55:27:23:f3:76:
aa:b9:6c:22:22:24:2f:72:5c:8f:fe:36:96:ac:2c:
09:ec:88:15:0a:dd:cf:17:06:ca:41:a2:57:30:88:
df:71:d1:e4:b7:da:4d:da:86:32:79:38:21:04:eb:
d6:a8:2c:0d:ab:25:28:51:12:ce:7e:4b:80:d4:4d:
35:cc:7e:18:a1:d7:0f:93:64:23:e2:15:03:f5:28:
d2:24:59:f8:2d:ef:b8:36:38:67:ba:a5:98:9b:c8:
f8:ac:a0:f7:bf:af:73:2d:1d:99:c1:6b:12:96:ba:
a1:76:04:aa:76:95:f0:a6:7a:d0:2f:ec:4e:d0:d9:
99:8f:5e:e8:48:27:83:58:e0:a9:92:5d:0f:05:70:
c4:64:e0:14:a6:51:50:07:75:b8:4d:f7:ff:68:96:
48:88:10:17:04:c3:58:b7:1d:89:17:8d:c7:48:08:
27:52:4a:71:be:1f:40:0c:f1:68:3c:30:b5:cc:9b:
e8:b9:d1:0d:f7:81:60:6b:eb:4e:69:c0:58:3d:02:
d3:3f:05:7d:5d:9c:f2:13:ad:09:67:85:68:15:7c:
8e:45:78:ab:01:52:3b:ad:9e:04:e9:1e:29:16:9e:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:95:A4:F8:F4:D4:18:88:E4:39:4C:5F:56:49:79:29:5D:2F:13:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/AJWk-PTUGIjkOUxfVkl5KV0vE6o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.168.0/22
IPv6:
2a09:27c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209531
Signature Algorithm: sha256WithRSAEncryption
09:63:01:4a:39:d6:e6:84:87:a4:2d:e3:65:d6:1a:02:6c:0a:
dc:cf:52:f6:57:f9:b5:d8:4e:d3:a3:1a:87:00:30:49:b1:e5:
96:87:fe:80:70:37:24:0b:ea:bd:2a:fd:4d:15:c8:92:02:1b:
ef:1b:6c:9c:d5:1b:df:38:1d:49:20:d5:b8:f7:9a:2b:54:84:
d3:e7:a9:4b:12:8b:35:1f:b0:e7:66:fa:d1:a7:69:ae:13:f3:
83:84:e3:6a:f3:36:19:e5:39:9b:86:67:39:72:26:b2:0d:58:
09:7d:b7:5d:cb:17:f5:af:50:28:2b:37:e6:0b:37:4a:1f:12:
e1:8d:4d:b7:23:c8:70:84:28:e2:67:93:a5:e2:80:d0:cf:36:
5a:76:23:92:13:5d:f9:55:d8:1b:98:7c:60:2f:18:39:e5:57:
66:85:fa:2b:26:11:75:03:e0:a4:f4:b2:cc:ab:b7:eb:ca:00:
b7:f3:27:65:d1:13:9c:d3:d9:99:86:06:00:81:9c:7c:6b:21:
16:65:68:57:18:d3:7b:e6:59:69:2a:cb:9f:3e:fc:aa:e0:46:
ba:18:29:e1:3d:2c:22:b8:a4:a7:67:c3:86:a4:2a:1f:b5:b4:
31:b1:9e:f1:48:85:27:01:2e:37:1a:ea:3d:45:d2:1d:5e:4b:
4a:22:5b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 15:06:31 2024 by rpki-client on console-fra.rpki-client.org