Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BWZHdQv1L3epyRwtaGToccGq-p8.cer
File: BWZHdQv1L3epyRwtaGToccGq-p8.cer (raw, json)
Hash identifier: kr3wKFaDqQ2l0lpj3Llpay9OkN8B8Hqqh4tmH0K5o3k=
Subject key identifier: 05:66:47:75:0B:F5:2F:77:A9:C9:1C:2D:68:64:E8:71:C1:AA:FA:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01863A99B167E5FB181D6C4A7B2DCB1BF213
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/BWZHdQv1L3epyRwtaGToccGq-p8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Feb 2023 09:13:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 209529
IP: 185.228.220.0/22
IP: 2a0e:70c0::/32
IP: 2a0e:a540::/32
Validation: Failed, certificate revoked on Mon 13 Feb 2023 15:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:99:b1:67:e5:fb:18:1d:6c:4a:7b:2d:cb:1b:f2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 09:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056647750bf52f77a9c91c2d6864e871c1aafa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:2d:32:b5:be:6b:9b:15:e5:79:76:72:eb:
45:64:88:44:5e:d6:60:3e:6d:12:59:9d:0d:0b:00:
1f:65:30:f8:d2:a1:f6:2b:c3:f2:15:55:f2:a5:20:
84:db:fe:c5:6d:9e:a5:ef:52:2e:d9:93:b3:bc:93:
d0:59:3a:09:b1:e9:50:d1:e0:da:fe:72:ea:12:95:
a7:1e:5a:ee:55:73:e0:43:f4:37:49:f3:88:e1:90:
41:8d:14:4b:bc:bc:3f:1f:28:e5:1e:34:b8:4d:5a:
c4:21:0a:8b:2e:fb:cd:47:74:e8:d8:c6:c2:5f:ae:
9d:d1:0f:e9:b7:a7:32:b0:15:a9:50:89:e2:cd:be:
b7:22:f8:62:1f:05:0a:93:4d:b5:82:02:6b:2f:49:
38:82:a5:52:6a:2b:a4:eb:61:a8:6f:98:01:52:b6:
92:2a:0b:60:eb:e9:27:52:84:3e:e8:c0:ac:cb:44:
3b:d7:42:57:74:60:1f:5e:ce:e0:98:ca:e4:b9:c4:
fb:ec:07:ab:cc:bf:29:c6:56:c8:c0:2e:c7:db:6c:
11:ed:11:eb:74:e4:c1:7c:42:c8:f7:61:43:c0:66:
84:15:06:b8:f1:6f:c1:e4:d5:2a:01:67:51:83:c3:
6c:8c:e9:ef:7a:3b:82:ea:f9:e2:0b:6d:76:9f:e1:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:66:47:75:0B:F5:2F:77:A9:C9:1C:2D:68:64:E8:71:C1:AA:FA:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/BWZHdQv1L3epyRwtaGToccGq-p8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.220.0/22
IPv6:
2a0e:70c0::/32
2a0e:a540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209529
Signature Algorithm: sha256WithRSAEncryption
62:9d:31:0a:70:eb:f7:45:b6:cd:91:43:a9:9f:dc:56:11:e4:
8d:10:7e:50:47:f2:ef:66:04:85:b0:0d:6b:c7:f4:ea:3b:48:
ee:2f:c0:24:fe:48:88:cb:d2:5c:88:2a:86:7d:63:82:1a:50:
89:f2:51:e5:7e:d4:59:3e:a2:43:d2:8c:45:4e:3a:3b:a0:da:
77:44:86:b4:91:e1:0d:5d:8d:5f:4f:7c:a7:dc:0b:b4:8e:b5:
a4:09:d8:ee:f8:5e:a8:57:dd:45:ce:5c:b6:de:9f:3a:f4:c2:
b9:33:dd:f1:98:9c:05:9f:17:ae:7d:e4:ca:46:91:98:29:bb:
bf:31:75:10:37:92:bd:23:38:f9:72:eb:46:0a:06:d2:03:ea:
66:92:59:05:97:8d:8a:18:c7:e3:a8:56:f8:59:0e:89:91:00:
0b:56:e5:21:ab:92:4c:4c:6b:57:83:6a:2c:c3:48:7a:53:a2:
e6:75:a1:a6:4d:d2:47:4f:05:ee:2e:83:58:df:8a:de:09:99:
df:6d:01:64:4b:de:26:43:b4:ef:53:4a:ad:c1:44:a5:3f:a4:
04:89:55:72:3f:44:77:29:f4:c9:7f:95:a0:95:ae:1e:73:3e:
6e:91:a7:aa:be:d3:26:20:36:1d:a1:c9:6a:13:6b:72:82:9b:
ad:8c:73:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:42 2024 by rpki-client on console-fra.rpki-client.org