Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BrwJWvzinyLll6BKZ4m3vG5I0jM.cer
File: BrwJWvzinyLll6BKZ4m3vG5I0jM.cer (raw, json)
Hash identifier: sWhuv95a749Av8eH6WRkOUUGj11vkyxFP/VJrqjCVps=
Subject key identifier: 06:BC:09:5A:FC:E2:9F:22:E5:97:A0:4A:67:89:B7:BC:6E:48:D2:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D89542CA12539D1F2ED5E73D7F38458
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/BrwJWvzinyLll6BKZ4m3vG5I0jM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:14 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 41944
IP: 62.192.153.0/24
Validation: Failed, certificate revoked on Fri 21 Apr 2023 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:54:2c:a1:25:39:d1:f2:ed:5e:73:d7:f3:84:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06bc095afce29f22e597a04a6789b7bc6e48d233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:67:5f:db:ea:d9:53:47:1d:11:22:84:93:
82:37:9d:e6:06:3c:3b:91:0c:63:b9:ed:84:0b:ed:
b6:1c:c6:75:c1:09:74:61:2e:c9:ab:1b:bc:c5:55:
35:01:98:77:a4:43:51:0a:25:c6:bf:c3:d2:ce:6f:
07:1a:d8:5f:2d:89:50:02:80:06:b8:45:bb:50:e6:
84:17:09:b2:01:e1:19:f2:6f:fb:0e:fe:65:68:82:
62:2e:a1:99:1c:69:9c:40:75:59:96:6f:d5:1d:08:
0b:c8:13:4f:96:52:c4:09:e4:7b:15:f6:24:6d:a1:
5a:7d:fc:13:13:79:c8:7b:a2:62:00:01:86:0a:35:
6b:1b:03:2e:b6:79:50:58:f2:84:f0:ff:cb:76:41:
8a:f2:1f:1b:85:b4:45:93:18:12:b7:40:2f:8c:2e:
29:15:74:dc:60:54:1f:fb:8a:76:e0:41:ce:e7:33:
b3:5f:a8:c6:60:19:95:7f:b3:ad:8c:fd:4a:4f:a0:
a9:e7:e1:6e:70:77:5a:40:f0:e9:57:ca:b8:3e:a4:
80:70:6f:c7:6c:69:11:11:92:9c:f4:b1:24:fb:3a:
9d:a0:3b:bb:c8:ff:fd:1a:be:b6:82:67:aa:4a:d0:
5c:b5:cc:29:4a:1a:36:91:8e:8a:7f:59:63:61:3a:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BC:09:5A:FC:E2:9F:22:E5:97:A0:4A:67:89:B7:BC:6E:48:D2:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/BrwJWvzinyLll6BKZ4m3vG5I0jM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.153.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41944
Signature Algorithm: sha256WithRSAEncryption
4b:ab:d2:5f:6b:9c:e1:d6:93:2b:85:29:a9:16:38:5d:16:59:
da:7b:25:d2:2b:d5:b0:83:10:65:ef:33:fb:de:80:41:43:ff:
9c:ea:13:b0:d5:0f:ce:5e:6d:75:4f:9e:09:bd:01:7b:21:e3:
38:0b:fa:07:51:e2:ee:12:0f:9c:24:6d:f1:61:5f:b9:25:0e:
b5:83:7d:e1:7f:a3:b2:a2:83:e1:b3:50:ff:c3:ba:d2:f4:2d:
e5:cb:78:d8:54:95:eb:9f:a9:45:a3:76:39:b4:b2:be:3c:ed:
46:be:62:e7:e5:ef:25:04:e0:fe:88:be:7c:34:af:4d:f6:60:
e8:ee:8d:8d:17:15:f0:ef:c1:4e:45:70:7f:96:13:2f:24:4d:
69:20:4d:6f:d5:33:af:4f:cc:24:27:20:42:70:77:b7:bb:a9:
6f:ab:3b:79:2e:cb:8c:59:2a:e1:8c:5a:ac:87:87:eb:fa:cd:
57:fb:78:b9:0a:bc:4b:fd:0b:f0:bf:25:4c:a7:cd:61:3d:e9:
c2:76:0f:8d:12:b7:9c:33:c2:6c:c9:42:ae:b9:d6:f2:c4:1a:
56:45:63:23:ad:9c:af:df:93:7c:7d:dd:ae:67:de:a8:03:af:
b6:02:f3:ed:0a:67:71:0d:d3:11:fc:0a:6b:a5:2b:b7:19:75:
97:95:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:26 2024 by rpki-client on console-ams.rpki-client.org