Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
File: EziX_HqWPxQhXVjhgkFEqxn9WBA.cer (raw, json)
Hash identifier: DFMDQeLS/575cwMdviiDIvSDMqdVOVce5Dev0mGH3Sk=
Subject key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857246187A1A772C5D56B2B5A850C5A61A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 5518
AS: 47570
IP: 62.63.128.0/18
IP: 78.28.192.0/18
IP: 78.154.128.0/19
IP: 80.233.128.0/17
IP: 94.100.0.0/20
IP: 185.87.204.0/22
IP: 194.19.224.0/19
IP: 213.175.64.0/18
IP: 2a02:16d8::/32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:18:7a:1a:77:2c:5d:56:b2:b5:a8:50:c5:a6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=133897fc7a963f14215d58e1824144ab19fd5810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:e8:4c:ba:98:91:97:bd:09:c0:d9:09:11:
69:47:a8:76:0c:f9:c4:64:b4:e6:05:d4:48:ef:e2:
2b:2b:81:41:c5:d2:43:ba:fb:ea:a6:5a:f7:e4:7c:
20:40:87:83:7c:52:eb:59:9d:03:7c:43:f6:ba:47:
fa:45:02:0c:9c:ad:c0:31:c9:f6:8b:56:d7:c5:11:
00:d9:7d:76:43:20:07:4a:ce:7d:95:39:6f:84:ff:
0f:31:f8:53:c1:e5:af:d7:4e:71:ef:97:bf:ee:9f:
c5:ec:db:40:a2:48:0b:ec:c8:d4:aa:91:ea:0f:02:
b4:b5:c5:71:72:88:8e:50:e5:32:a7:73:f5:ce:ad:
d3:15:a0:d8:78:d7:84:0d:85:c2:e2:a3:7d:1d:61:
43:33:1c:69:4d:27:cf:ff:24:b4:d9:da:07:54:46:
c5:59:01:40:8e:5e:47:ac:8a:3f:a0:66:30:89:f8:
75:32:df:1c:e7:89:97:ec:1e:f4:5f:b7:f7:4b:db:
86:e1:6f:e4:bd:75:35:de:ba:0d:d4:b2:8e:6f:70:
25:5c:4c:4b:77:ee:78:07:30:5f:db:eb:30:43:d9:
ee:38:db:92:a4:77:ea:11:b8:3b:15:5f:76:65:d8:
bb:2d:ac:74:89:2c:30:a1:3c:b5:c2:e3:ac:2d:f4:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.128.0/18
78.28.192.0/18
78.154.128.0/19
80.233.128.0/17
94.100.0.0/20
185.87.204.0/22
194.19.224.0/19
213.175.64.0/18
IPv6:
2a02:16d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5518
47570
Signature Algorithm: sha256WithRSAEncryption
51:04:b1:23:a6:eb:84:f2:cd:2a:cd:d5:53:fa:21:0b:fb:9d:
72:93:69:1c:9b:11:73:31:23:e2:39:f3:1f:e6:c0:8b:71:a6:
ce:77:e2:0a:56:37:95:14:41:c7:c2:94:5b:16:03:6e:3d:ea:
3f:b9:9f:27:b9:c7:27:a5:9c:d4:d0:a3:ea:bb:39:2d:96:11:
54:d5:15:26:18:15:d0:f3:ec:fc:64:9a:ea:cd:c8:7c:fe:9d:
97:11:03:3e:e6:8e:63:04:c3:62:1d:38:62:ba:15:6c:f6:74:
09:00:31:86:4e:36:86:85:1f:ad:fb:87:8a:ee:b5:0d:09:78:
c6:c1:dc:ce:07:87:20:3d:c3:55:db:36:94:0e:e4:b7:cc:3c:
ad:20:a4:dc:91:00:43:68:6f:45:e5:fd:5b:92:82:de:92:ab:
40:80:d1:b0:07:65:3e:29:d8:e3:d2:61:5f:da:c6:85:70:26:
9d:c3:33:aa:e7:99:ad:a3:50:07:81:95:cd:ab:21:7c:b1:0f:
fc:44:95:05:67:fb:ad:ce:d3:ba:01:8c:f6:d6:b2:d0:d6:fc:
27:cd:96:ba:89:99:a8:1d:8f:d8:56:f1:e7:9c:85:a6:b7:63:
c6:8c:65:ab:af:60:1b:d0:f8:9b:a5:be:f7:96:2f:6d:ba:e3:
aa:93:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org