Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
File: F76CelgN5hU43e-igjlGjE6QG0A.cer (raw, json)
Hash identifier: QJCD+aFSuGfHt59kWmfwBWSHmHf7f66RnQeNaITfa/w=
Subject key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3492105DEEC1E1BEDE371073830D96D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58332
IP: 176.120.96.0/20
Validation: Failed, certificate revoked on Mon 04 Mar 2024 07:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:21:05:de:ec:1e:1b:ed:e3:71:07:38:30:d9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17be827a580de61538ddefa28239468c4e901b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:5c:47:88:02:aa:1c:9d:03:1d:f5:8d:7a:
d4:53:09:3b:83:ef:ac:8e:f8:28:54:7a:30:a1:ce:
81:06:2c:1c:b2:0c:63:0c:b6:b3:2d:a7:37:b0:40:
42:bd:57:bf:f0:96:32:55:4e:6b:25:8d:14:9c:be:
79:3a:0a:8a:5f:bb:30:1e:5f:80:99:bc:c8:2e:fa:
9e:ba:4b:12:9e:56:55:a1:ab:d5:fb:49:04:b1:ac:
bd:69:c3:d9:56:33:11:8f:fb:55:8b:bd:d0:89:94:
cb:58:c6:fb:74:25:19:6d:af:e1:cf:41:17:78:08:
72:3f:84:28:d3:04:02:b1:fe:6b:b3:f0:0f:19:79:
e5:2d:df:35:a9:83:54:a8:cd:de:6e:c7:94:2d:2e:
d9:c0:a9:1c:3e:90:39:b1:61:3e:22:91:ac:99:6a:
b4:8f:87:48:cf:e9:42:b3:36:63:20:2e:51:b7:ba:
b4:1d:c2:b8:ca:81:43:f1:d1:b3:e6:c9:6d:14:85:
8d:a0:b9:fd:7a:d8:7d:03:70:1a:ea:da:75:f5:3f:
5a:ec:fa:a0:78:4b:70:eb:be:2a:a3:d0:b8:39:2b:
07:0d:10:6c:6b:94:68:d0:25:57:25:a3:89:ea:6d:
77:96:3b:59:b8:bd:4a:bc:70:95:c2:bb:20:26:ce:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.96.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58332
Signature Algorithm: sha256WithRSAEncryption
3f:31:4c:c3:94:98:b5:92:91:95:fa:a9:d4:4f:ed:4c:dd:0b:
67:2e:22:39:e7:50:c1:66:db:34:fa:24:96:da:7f:d0:71:5e:
cf:e4:70:be:ea:3b:98:d5:08:13:4e:e7:fc:a4:35:f3:84:78:
86:bd:5f:d4:af:1d:fa:bf:44:c6:c2:e2:28:4a:75:10:f8:4a:
30:7e:41:79:6a:30:49:70:be:1f:36:9d:e9:f9:50:bd:cd:be:
5e:06:48:00:c0:e7:1f:c1:d7:ad:e5:c9:50:36:7a:b8:a2:e4:
9e:d5:93:c1:21:27:48:bd:c2:f4:0f:31:91:4d:e1:10:37:33:
e3:dd:82:c2:24:b9:69:03:05:b3:98:5d:66:c3:c9:ab:d4:e3:
ab:84:11:72:bc:20:99:82:86:fa:6c:2a:49:0e:eb:87:6f:29:
47:28:7d:81:ef:d7:5a:d1:9f:f2:74:ff:a1:91:98:a5:95:0b:
f7:ae:d9:42:d7:bc:f6:fb:98:43:03:7d:d8:74:8b:b6:cb:f2:
a8:10:79:51:3d:c1:7f:6a:aa:f9:72:1a:94:63:58:bc:b0:bf:
d6:89:9a:f4:bd:77:39:b2:80:76:69:21:78:9d:66:ab:6c:a3:
31:a8:69:25:e4:27:c7:03:8e:20:a9:4b:ec:d7:97:67:7c:d7:
69:64:9b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 09:33:11 2024 by rpki-client on console-fra.rpki-client.org