Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FpJgoG3IRLRUxgB02u1U4J1Y8Kc.cer
File: FpJgoG3IRLRUxgB02u1U4J1Y8Kc.cer (raw, json)
Hash identifier: Wm67o2zpEXyXsxeg4rcgLXWJyCcwMqpPc5nKmR6We/4=
Subject key identifier: 16:92:60:A0:6D:C8:44:B4:54:C6:00:74:DA:ED:54:E0:9D:58:F0:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAD7D81FBE98E9D35A18A0572B8DDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/554d3a-a5e8-43c8-9f09-4ccf0f2df588/1/FpJgoG3IRLRUxgB02u1U4J1Y8Kc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/554d3a-a5e8-43c8-9f09-4ccf0f2df588/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 211020
IP: 185.222.212.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:d7:d8:1f:be:98:e9:d3:5a:18:a0:57:2b:8d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=169260a06dc844b454c60074daed54e09d58f0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:6e:56:41:06:fd:4c:62:e9:18:16:3d:1d:
12:d4:30:1d:87:d8:f9:13:a8:6a:84:a5:40:6c:5d:
70:86:2d:4e:32:b6:5b:50:5b:99:01:f1:69:96:4d:
b2:38:d4:c1:e1:0a:73:32:c5:52:81:69:59:29:df:
6e:f0:92:a7:c3:ba:84:ac:7e:15:c9:82:d4:70:23:
da:53:64:e7:da:b4:58:ba:74:14:5b:6c:e6:f8:c1:
b0:25:4f:96:af:a9:1f:56:49:7b:fc:e0:6e:89:97:
17:3d:56:35:5d:cf:59:4b:1d:1e:06:80:78:11:bc:
5b:80:c0:4c:bf:26:2b:36:6a:e0:1e:44:26:da:7a:
c4:da:43:fd:03:19:d8:4e:82:9c:54:07:5c:a8:ce:
38:a6:7a:72:8e:84:9f:aa:67:cd:e0:26:f8:66:8b:
6e:8a:c3:2a:e4:7d:fb:50:5f:eb:98:c7:43:90:91:
c7:ce:f1:fa:5a:ee:df:cc:7b:e8:ca:6b:9e:2d:43:
02:e4:45:ca:67:b3:f7:3a:c7:fe:aa:cf:b7:74:60:
1b:df:b7:90:1b:2e:d3:c6:71:98:43:e2:d7:c5:0e:
e5:4b:d3:29:08:39:ff:c2:0f:0d:3f:61:96:05:fb:
3e:8d:63:c0:93:ee:1b:77:2c:56:aa:be:7b:65:ff:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:60:A0:6D:C8:44:B4:54:C6:00:74:DA:ED:54:E0:9D:58:F0:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/554d3a-a5e8-43c8-9f09-4ccf0f2df588/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/554d3a-a5e8-43c8-9f09-4ccf0f2df588/1/FpJgoG3IRLRUxgB02u1U4J1Y8Kc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.212.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211020
Signature Algorithm: sha256WithRSAEncryption
78:5c:52:74:38:1e:e7:3d:46:30:9b:4a:e2:05:ba:5e:56:87:
61:5b:e1:b4:6a:49:09:79:6a:d7:d8:f6:b6:9d:7f:f9:56:70:
7e:15:8c:be:d6:31:f4:6d:49:9a:2f:67:ae:59:c6:5c:5d:47:
33:7b:53:33:e6:b6:52:8c:84:4b:23:78:8e:b3:97:56:14:ab:
ba:53:2c:24:df:63:f7:68:b3:8e:d5:83:83:7b:31:4c:6f:25:
ec:b1:ec:80:99:12:c4:23:48:8e:02:32:47:30:cb:2e:a2:47:
eb:42:18:d0:65:9c:18:3d:53:9e:47:2a:67:69:8f:83:99:be:
91:b7:b1:67:2d:2f:6c:68:cd:c9:b3:09:f5:f8:55:59:be:40:
48:37:b1:f4:c9:bd:c3:14:1d:b0:9e:16:18:ad:fc:ec:31:5d:
83:79:6d:96:20:67:74:cd:5c:11:a0:3f:4c:d2:2b:5b:7e:45:
09:a7:6f:36:29:d1:99:9c:ed:a8:78:58:71:95:00:10:1b:53:
55:6b:59:6e:95:4a:66:14:1f:bd:f1:35:84:26:53:cb:ba:0c:
d7:ec:d5:78:6a:30:0c:9d:0a:d0:d6:48:49:5e:f2:25:8e:c9:
b8:7c:f9:ca:f9:3e:7c:65:ba:99:30:0d:2c:c7:9d:01:e6:3e:
96:a9:5d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 11:56:18 2023 by rpki-client on console-ams.rpki-client.org