Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
File: CbnTdFC2KuPxROtCrFLOJDtiino.cer (raw, json)
Hash identifier: tbnewy4w88SB2PUsH9WpWWiVusXSV+7Yg7U/2qQyUlU=
Subject key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD0AEFB4561601D0E67788C64EFEB72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:31:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 59462
IP: 185.22.231.0/24
IP: 185.150.16.0/22
IP: 2a0e:d480::/29
Validation: Failed, certificate revoked on Thu 19 Oct 2023 18:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:ae:fb:45:61:60:1d:0e:67:78:8c:64:ef:eb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:31:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:83:e7:cb:26:dc:1f:0f:12:9c:68:24:44:
06:7d:86:bd:73:95:8c:2c:91:67:89:6b:c0:29:9d:
04:78:9d:94:f9:4c:ce:86:a5:22:de:d1:37:4b:98:
6d:07:75:95:f7:71:55:8a:53:38:8f:4e:c7:72:5c:
79:4e:92:4f:d9:10:b8:cf:29:8b:cd:70:61:01:34:
22:08:01:c1:a1:af:3d:c2:32:84:7f:70:4a:10:2e:
9f:7d:d7:db:48:f1:a0:12:0e:9a:02:c0:b7:fc:e0:
a7:46:6d:2b:1a:f7:0a:12:4c:2c:c0:35:33:e5:e4:
4c:37:d4:07:cf:7a:92:f1:6c:f9:49:87:b8:f9:e2:
66:39:13:63:94:13:8f:f1:d2:67:ce:72:c4:3e:3e:
35:24:bb:9b:49:4f:0f:38:bb:6c:f5:05:bc:20:e4:
65:75:f7:34:0c:09:e9:c6:9e:51:7d:c6:13:8c:28:
d0:5d:a2:6e:d7:a8:2f:d7:be:ce:76:e1:96:34:e1:
16:4d:c9:c0:73:5d:97:a3:6e:ad:fb:99:80:e9:de:
5b:1f:48:2a:31:21:78:58:18:72:76:c0:b2:cf:35:
7e:38:e8:29:32:71:77:8e:72:a2:3f:9c:ec:a3:09:
96:a1:b1:fa:96:8a:9e:9c:6b:88:ee:ac:89:af:9e:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.231.0/24
185.150.16.0/22
IPv6:
2a0e:d480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59462
Signature Algorithm: sha256WithRSAEncryption
4d:a1:66:cb:26:0c:32:e1:32:a0:a8:8c:4c:55:a5:3b:11:9f:
b3:09:1b:96:86:5d:82:4b:98:31:33:08:4e:bf:e8:f6:ef:6b:
90:1e:32:ce:f5:9e:b6:bb:70:4d:4f:b6:6e:c6:db:70:fb:a9:
4b:79:6b:56:76:1e:3e:42:51:28:a4:0b:0c:4b:c7:9d:fa:63:
5c:05:86:a1:29:61:d3:40:e1:e9:79:cd:6d:a3:f1:bc:40:50:
0d:bd:53:9a:b3:44:4a:c0:ba:a2:bb:55:8a:df:59:4c:87:eb:
9d:95:c6:04:ea:24:6f:35:6a:2c:42:13:03:19:c1:5d:f4:f1:
b4:11:3e:ba:7c:96:01:23:a3:bb:eb:cf:a1:91:5a:44:2a:3e:
0b:f8:2f:82:35:1b:3e:df:6f:12:45:88:e9:9d:04:a4:39:fc:
50:94:33:db:98:53:f9:3b:32:d5:73:ca:6e:26:a1:45:32:ad:
7b:8b:92:85:bb:73:c9:02:3a:64:43:80:9f:7a:cf:a0:37:76:
15:e1:b9:6d:85:a4:76:4e:e9:60:fa:5a:46:93:cd:8b:de:e2:
04:e3:d8:e4:91:21:b6:bb:32:32:f7:57:df:66:d8:32:73:39:
8e:05:fe:15:5b:8e:55:ae:9b:b0:b1:86:79:f9:ff:53:3b:72:
94:67:f4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-fra.rpki-client.org