Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cw03aKjvw7cGiAHLvunrVv5tABw.cer
File: Cw03aKjvw7cGiAHLvunrVv5tABw.cer (raw, json)
Hash identifier: BP43T7g1k9GV/+3IjThDVyoT13f0n1VXxQmSf6SV/cw=
Subject key identifier: 0B:0D:37:68:A8:EF:C3:B7:06:88:01:CB:BE:E9:EB:56:FE:6D:00:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B883915F5AC306A3EF95B248B5698F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/Cw03aKjvw7cGiAHLvunrVv5tABw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41241
IP: 91.206.246.0/23
IP: 194.88.236.0/23
Validation: Failed, certificate revoked on Wed 21 Feb 2024 10:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:83:91:5f:5a:c3:06:a3:ef:95:b2:48:b5:69:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b0d3768a8efc3b7068801cbbee9eb56fe6d001c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:77:2d:1c:56:8b:1d:02:b8:74:fd:9c:c5:
2e:44:fb:ab:ba:1e:36:0e:3d:99:27:ee:f0:5c:1c:
a6:21:b2:cf:1b:79:c4:44:e9:d1:19:e5:e1:07:cf:
c1:ad:90:ae:b6:81:48:5a:cc:e3:e7:9b:95:f2:c9:
a2:ea:09:d1:1d:94:e3:2b:9f:0b:92:ff:d3:84:b4:
f5:1e:da:30:b6:7f:55:b4:ba:66:bf:0f:8a:cd:44:
64:3f:be:47:9e:e8:40:ba:12:8c:62:50:d5:0e:fd:
88:63:b1:65:c3:e8:b7:66:2e:03:00:79:34:2a:91:
6e:74:88:ac:01:2e:e3:3f:57:82:39:6c:8e:b7:ed:
70:5e:90:90:dd:bc:02:72:1f:3c:6d:21:37:9d:47:
c9:b6:1a:36:30:64:8d:a7:9c:de:eb:4d:ee:68:14:
0f:60:db:c5:12:91:00:4c:04:89:f4:c7:c2:41:67:
2b:99:19:c4:d6:b3:70:17:72:8d:63:b0:d4:45:f6:
1f:64:49:56:e1:64:40:92:55:3a:59:ac:8b:b1:8e:
16:a6:f1:39:ca:4c:b6:aa:e1:6f:77:22:41:4d:b4:
bc:48:1e:1f:85:61:c3:b3:5b:f9:45:f9:fc:48:b1:
d2:e6:9e:fb:ae:ee:2f:23:74:b0:a4:a4:50:80:4f:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0D:37:68:A8:EF:C3:B7:06:88:01:CB:BE:E9:EB:56:FE:6D:00:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/Cw03aKjvw7cGiAHLvunrVv5tABw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.246.0/23
194.88.236.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41241
Signature Algorithm: sha256WithRSAEncryption
72:de:bf:df:1e:09:ec:64:66:f8:78:3e:81:bc:60:7c:2a:bc:
ee:12:d2:4b:38:30:11:98:d4:8a:91:3f:b4:2a:9f:89:66:3f:
ef:67:ba:75:33:bc:70:fc:bc:37:c1:25:1f:18:11:9b:ca:33:
50:55:56:a0:22:13:0d:12:de:43:40:d6:1d:c0:89:a5:a2:59:
87:38:4e:2d:f8:d2:3a:2f:6b:67:7c:99:76:ed:9b:c7:80:69:
1b:d8:1b:cc:5a:ff:3f:4f:7a:a8:b9:ff:30:a2:33:40:37:f2:
38:0d:e7:14:8b:16:4b:1e:eb:81:56:e4:82:b3:39:46:a2:18:
cc:a5:6b:82:2a:4b:f5:1b:9b:26:17:39:fe:ae:ec:77:f4:ea:
1a:f2:c5:3c:98:26:a3:3c:cc:cd:b3:83:8d:5d:79:80:b4:f4:
0a:d2:03:e8:65:8b:8b:b1:c1:19:3e:0a:20:f4:23:cb:5d:37:
f5:4c:57:70:09:bf:ae:2c:b3:f0:5c:96:cf:38:e9:0d:16:a3:
c4:f9:55:ca:c2:cc:71:a3:1b:33:4e:2a:56:f5:f8:6c:ac:89:
9f:df:d2:22:3e:b3:b5:7e:61:e8:b6:07:cb:5c:6d:54:f4:f4:
8e:ff:9e:7d:10:ff:7e:bb:47:85:93:2d:b3:c8:a6:3d:cf:5d:
08:bb:ac:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 21 13:56:38 2024 by rpki-client on console-fra.rpki-client.org