Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ByF8BjTBAscbo-RE8GiKvdGvTOg.cer
File: ByF8BjTBAscbo-RE8GiKvdGvTOg.cer (raw, json)
Hash identifier: 7mNpbhOM9SY26AbxZlCOuJnBHVYqu4M+aFd79WUHRs8=
Subject key identifier: 07:21:7C:06:34:C1:02:C7:1B:A3:E4:44:F0:68:8A:BD:D1:AF:4C:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B4FDA8DD31AE2C71FC4E5324E6622
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50319
IP: 185.84.196.0/22
IP: 2a03:71e0::/32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4f:da:8d:d3:1a:e2:c7:1f:c4:e5:32:4e:66:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07217c0634c102c71ba3e444f0688abdd1af4ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:76:2c:d1:3a:b9:7b:9d:45:be:d1:37:71:e9:
17:5e:ee:38:d1:05:79:0a:7b:01:cd:ba:cc:07:04:
85:8d:e4:ac:87:71:d6:b0:56:23:28:bf:ce:1b:45:
21:9e:38:24:9e:3a:ba:9a:e8:fa:09:fd:88:f9:cc:
78:23:98:d6:ec:34:f0:b1:82:44:08:65:8f:e1:ce:
f9:de:08:4c:c3:d2:98:b3:a4:fc:c3:c9:d9:60:e5:
3d:c3:2b:4d:db:27:2c:57:6f:80:bf:a5:c6:0f:ae:
12:f0:10:d9:f6:a4:2f:4c:8c:74:84:e3:cc:b0:16:
9d:de:cb:15:cd:0a:25:4f:39:7d:20:14:de:51:a9:
d7:d4:6e:55:ef:00:58:4c:f4:2d:80:5a:da:cc:29:
64:a1:e9:b1:d4:3e:b8:83:1f:f0:09:c5:aa:d4:75:
82:9f:70:89:b3:f8:9a:a5:ec:38:8c:45:0b:4c:ba:
2c:6e:3d:5b:8c:39:1d:72:af:c4:8e:35:17:89:fb:
dd:50:1a:56:09:83:8f:03:e3:69:0f:8e:96:c3:3f:
96:58:e3:af:13:fc:f5:76:8b:3d:10:1f:73:81:62:
13:7e:3f:69:7c:da:a8:56:d5:44:9c:ae:67:fa:dd:
d2:81:e1:71:c7:0e:b1:5f:04:b6:61:a2:99:14:30:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:7C:06:34:C1:02:C7:1B:A3:E4:44:F0:68:8A:BD:D1:AF:4C:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.196.0/22
IPv6:
2a03:71e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50319
Signature Algorithm: sha256WithRSAEncryption
77:5d:a1:ea:2e:e4:52:d6:2e:25:24:2f:42:cd:8c:96:b3:ff:
05:e6:10:19:8b:81:e2:b0:1a:7b:47:cc:5f:cc:9e:14:91:2c:
d8:ef:4e:6c:cc:76:9d:bb:98:76:53:d0:a7:64:8c:64:49:71:
3e:c4:fa:a6:dc:5f:5b:5e:af:7b:21:2a:62:51:21:48:54:e8:
5e:8a:52:d1:00:fd:b7:a9:4e:25:a8:4e:9b:51:df:ca:18:e1:
31:ae:a9:be:3e:0f:74:9a:50:a0:a1:98:5e:6d:db:15:49:be:
ed:e3:70:87:03:39:76:e5:35:80:98:f3:41:d8:14:db:66:b0:
f1:15:e1:84:33:ed:6f:c3:6b:28:49:cf:db:b4:fc:45:2f:1d:
b2:ff:37:d4:35:20:5a:11:16:73:e8:9f:4e:1e:db:04:c0:7c:
5f:c1:83:fe:f4:4d:26:e0:5a:df:33:89:ad:2d:65:52:3e:07:
d3:d0:34:0f:eb:eb:b1:16:aa:1e:9e:60:32:95:b0:41:c7:45:
64:3e:00:d3:d8:09:f1:5c:6d:98:8a:4a:97:1d:11:63:d1:d5:
12:f9:65:35:fd:86:25:5c:23:80:41:61:86:0d:1d:84:d9:87:
92:7b:ec:39:f4:b6:e9:35:90:7e:d3:8e:ad:6c:82:93:6a:87:
b3:13:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:49 2024 by rpki-client on console-fra.rpki-client.org