Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BiFvIZDL6Op-TjN-MN6-b6dPUeo.cer
File: BiFvIZDL6Op-TjN-MN6-b6dPUeo.cer (raw, json)
Hash identifier: ABYzZq3bnvxvBl+VWmb0cDrmLOzWA7QuQZPyjbVaNoU=
Subject key identifier: 06:21:6F:21:90:CB:E8:EA:7E:4E:33:7E:30:DE:BE:6F:A7:4F:51:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FE77CA8AE50C921CBD1A1CBD9251E4BAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/BiFvIZDL6Op-TjN-MN6-b6dPUeo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Jun 2024 08:20:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214770
IP: 2001:67c:e9c::/48
IP: 2001:67c:ea0::/48
IP: 2001:67c:ea4::/48
IP: 2001:67c:ea8::/48
Validation: Failed, certificate revoked on Tue 30 Jul 2024 12:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:7c:a8:ae:50:c9:21:cb:d1:a1:cb:d9:25:1e:4b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 5 08:20:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06216f2190cbe8ea7e4e337e30debe6fa74f51ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:50:2b:c1:69:c3:7f:e6:6d:73:71:d9:55:
90:f2:1e:c5:1f:64:36:3e:54:10:d0:96:d3:ce:4f:
23:29:1a:b6:14:04:eb:8c:9c:84:44:f8:9d:5a:99:
9f:41:34:85:84:b3:5c:de:4f:19:4f:db:7b:c7:12:
a1:62:41:7f:8a:83:d6:48:2c:5b:8b:43:5f:2d:af:
8e:01:a2:e2:3d:5a:05:4c:25:20:39:b9:a4:09:a5:
a5:bf:ad:5e:bc:83:7a:8b:e9:57:0c:7e:f7:b6:3b:
00:23:4f:58:e5:75:91:c6:f0:ca:ef:5c:8c:32:cc:
7e:e1:2f:dd:51:47:70:fe:82:f4:e8:e5:2a:d7:21:
5b:03:ba:31:3c:05:d9:64:3a:18:a9:44:e9:c3:9c:
8a:7c:85:5b:46:b1:a4:d6:aa:98:e1:71:7b:a5:31:
90:d5:c6:2d:c6:2a:a4:da:ac:de:e4:4a:d6:7d:63:
58:e8:91:e3:0a:9a:40:e1:ab:44:5a:6c:ab:4a:36:
25:28:b2:38:df:15:e0:99:f4:f5:cb:9f:65:e9:9c:
d3:2a:5c:eb:b3:21:1f:f2:62:36:93:f1:55:32:6f:
c5:62:c2:8b:e9:6e:f9:16:e0:3f:27:bc:0e:3b:dc:
cb:a2:d1:7e:45:12:73:c9:69:82:86:56:b0:81:6d:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:21:6F:21:90:CB:E8:EA:7E:4E:33:7E:30:DE:BE:6F:A7:4F:51:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/BiFvIZDL6Op-TjN-MN6-b6dPUeo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e9c::/48
2001:67c:ea0::/48
2001:67c:ea4::/48
2001:67c:ea8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214770
Signature Algorithm: sha256WithRSAEncryption
3d:a1:82:26:ab:0a:29:81:86:7b:a9:80:46:38:dc:17:96:bc:
d9:67:cc:4e:fe:c4:70:60:20:db:d0:d5:14:59:c9:d8:0f:5c:
d8:1e:d2:93:8a:eb:b9:0d:a7:97:5d:b1:1b:cd:51:5f:2d:06:
a3:e0:23:89:4e:fd:d2:12:8d:e3:9b:0a:8a:e0:2c:71:ce:7a:
c8:f5:a8:f2:27:19:c6:e6:9d:54:73:0d:fb:46:f8:70:f5:ce:
d8:09:ea:d3:21:3c:a5:2e:96:f8:0e:c0:a8:ed:5b:6d:34:7a:
8a:e9:c1:74:05:84:75:f1:ff:5c:8a:1a:61:66:8e:4e:da:ec:
08:db:96:15:b8:2c:45:c0:23:95:7a:5e:0c:37:4f:3d:77:13:
8c:72:5a:69:72:bc:3a:62:1b:fe:36:b4:5d:57:76:58:ea:ec:
b2:97:4c:dd:a9:15:1b:83:67:63:11:bc:6e:65:05:f0:03:d6:
60:91:80:e1:1a:da:b5:a3:16:ac:4f:9e:2b:cb:fa:07:6c:c5:
24:fd:ea:1c:48:aa:b4:63:4b:94:d6:95:b9:87:30:fa:97:fa:
4f:8b:f1:43:00:ba:70:bc:de:db:f4:54:26:8f:29:a6:8a:58:
06:34:8f:bb:5c:c7:38:6a:cc:e8:37:d2:52:22:c7:09:5c:e7:
77:02:65:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:14:04 2025 by rpki-client