Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FaA6ADsBh2NQdSnmCieD6J7GFyc.cer
File: FaA6ADsBh2NQdSnmCieD6J7GFyc.cer (raw, json)
Hash identifier: NQ/3TeZCJBQqVqZDIBWVOS9f/EUvrT9gOIXFibMlmJo=
Subject key identifier: 15:A0:3A:00:3B:01:87:63:50:75:29:E6:0A:27:83:E8:9E:C6:17:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D9D074A637D011D064FF5F769870E35BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/FaA6ADsBh2NQdSnmCieD6J7GFyc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Feb 2024 11:15:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43607
AS: 215569
IP: 193.17.2.0/24
IP: 2a07:2480::/29
Validation: Failed, certificate revoked on Fri 23 Feb 2024 23:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:07:4a:63:7d:01:1d:06:4f:f5:f7:69:87:0e:35:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 12 11:15:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15a03a003b018763507529e60a2783e89ec61727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:b3:82:70:e1:a4:55:e7:41:d9:3e:07:6a:
81:2f:40:ac:08:42:be:33:27:68:7c:4d:35:5b:2d:
f3:fd:12:24:49:86:8b:8f:7f:b5:2e:4b:92:21:5f:
f5:4c:fe:08:7f:9e:e9:08:1b:2b:ba:1b:ab:3d:fd:
90:9f:83:05:71:67:59:fb:01:c8:ea:44:81:45:00:
27:cd:40:fc:cf:12:87:12:01:73:fb:09:cc:15:51:
ed:b7:8e:f6:3f:82:15:33:56:d1:3d:69:97:3e:db:
c8:5a:41:e7:2a:d7:b2:69:bc:07:ae:e8:2d:00:25:
0c:46:a5:c7:8c:b6:43:7c:c6:66:e7:a4:e8:21:28:
de:d8:3b:9c:c1:d7:3e:03:ba:fa:f9:13:25:20:02:
93:d5:40:4a:4b:a2:ab:ea:c2:a8:c3:ee:92:13:da:
37:c5:b9:16:4a:b9:f6:33:c6:38:ae:be:0f:b0:ef:
d1:43:fc:0b:93:85:16:ff:c9:14:32:bb:9d:f1:93:
9e:a7:8c:df:2e:eb:ae:d6:bf:ef:3a:7d:86:57:c9:
1e:5a:50:fd:ef:4d:35:78:b1:50:df:dd:8a:33:61:
29:76:41:97:b0:d7:9d:de:bf:28:95:06:b9:4b:70:
4d:db:27:19:ff:b5:97:a8:8f:52:9a:ab:fd:5f:4d:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A0:3A:00:3B:01:87:63:50:75:29:E6:0A:27:83:E8:9E:C6:17:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/FaA6ADsBh2NQdSnmCieD6J7GFyc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.2.0/24
IPv6:
2a07:2480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43607
215569
Signature Algorithm: sha256WithRSAEncryption
6e:14:44:42:a8:3b:9c:c9:76:f8:cf:6f:6c:56:a9:98:59:1f:
49:fc:38:c5:65:b0:a2:b5:ac:5a:dc:0a:bb:29:eb:cf:04:6e:
03:1f:ae:65:ae:c9:64:2f:75:5b:68:35:74:b0:eb:b3:ca:6b:
75:31:8e:2d:7f:64:3b:05:0c:3a:e4:60:e0:b6:8f:c1:32:eb:
7d:58:52:dd:e5:83:c5:ff:1f:dd:89:71:b2:04:db:2d:1f:fe:
23:12:56:a4:09:d8:2e:fd:3b:95:f2:c8:07:a7:69:41:6c:2f:
80:d3:fa:c2:4d:c5:13:74:fe:e0:24:64:13:ed:09:bf:02:c2:
37:0d:62:76:c8:f4:9a:07:c9:14:08:9d:9f:92:82:f8:d6:41:
a0:1f:9a:e8:d4:0e:18:f5:71:c4:94:d1:0b:9d:e5:45:1b:ab:
84:b0:6d:37:77:a0:83:75:f7:21:41:38:40:99:ec:b4:98:cf:
e3:80:6b:8c:2f:6e:7f:48:44:0c:e5:be:5e:b7:01:fd:5d:d8:
d8:70:6a:8b:8f:34:22:fc:06:02:29:be:5a:f6:d0:25:61:85:
b6:95:41:46:37:01:21:1f:f8:79:f2:67:97:73:0d:55:92:84:
1c:07:cd:bb:44:87:85:67:2f:dc:1e:88:ea:69:b3:9a:d7:92:
d6:06:27:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 04:07:01 2024 by rpki-client on console-ams.rpki-client.org