Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
File: GP7IJDEEfs2sGds72TwcP-eRl9M.cer (raw, json)
Hash identifier: ZOgd54XjPoACS5uVnY5zQXBN3zsdRCZAeujpp18X230=
Subject key identifier: 18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DD865E833BFB4AB5814FA07648AAC2E43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 23 Feb 2024 23:56:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43607
AS: 215569
IP: 193.17.2.0/24
IP: 2a07:2480::/29
Validation: Failed, certificate revoked on Wed 06 Mar 2024 22:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d8:65:e8:33:bf:b4:ab:58:14:fa:07:64:8a:ac:2e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 23 23:56:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:4c:b0:0a:26:94:28:48:95:82:21:3a:8b:
aa:98:ff:20:37:ad:00:b7:2a:51:79:64:7d:71:b6:
5c:bc:6b:4a:ea:2c:f7:98:53:f5:28:6d:74:23:34:
00:25:09:32:fa:16:07:07:80:1c:b1:48:01:7e:c0:
90:3a:bf:b2:03:12:6d:48:1c:e2:b8:06:9e:ff:dc:
48:08:10:63:68:c6:15:ab:78:b5:82:0e:cb:2b:fb:
1f:a5:3f:11:61:69:a3:a7:54:e8:cc:86:e2:3c:ad:
f3:aa:94:ac:aa:f1:f1:6f:b6:15:a4:a0:df:af:e8:
61:7f:07:fe:15:91:f0:21:a8:6e:e6:55:95:de:59:
a5:2d:66:c5:8e:e9:ff:55:1d:d1:5e:5b:f6:18:01:
53:ad:4c:a2:80:24:d6:12:03:55:e4:21:1f:45:a7:
de:f0:e0:87:91:8b:90:07:cc:61:19:04:50:33:17:
3b:ba:95:75:8c:f0:a7:90:1c:59:c5:48:9b:c8:c3:
35:9e:cb:76:e4:80:99:3f:2a:74:53:76:de:c7:97:
44:b9:d0:09:31:21:8e:d8:d0:d8:9c:6f:80:c0:a0:
9a:b7:26:82:b2:88:fb:ed:4a:23:71:68:fc:23:44:
8d:f7:64:5e:ec:33:5a:bd:09:3d:45:00:b5:8e:3a:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.2.0/24
IPv6:
2a07:2480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43607
215569
Signature Algorithm: sha256WithRSAEncryption
37:0c:b5:4c:2b:a2:c7:49:6b:ed:a7:81:f0:ff:04:49:e1:9c:
a7:9a:76:13:57:df:c2:a3:25:2c:09:9b:0d:eb:48:ee:b8:34:
cf:7d:8a:4d:8b:2d:f8:51:42:69:1b:a4:0e:fa:8c:6b:2f:3c:
8f:40:68:3c:e2:b8:d7:81:59:1e:fd:af:ab:7b:98:63:f9:b2:
11:1c:5f:58:0c:f9:2c:0b:f0:7a:da:ca:f4:a4:d7:46:c5:ee:
56:1e:ad:74:dc:c8:ca:98:03:ef:9f:24:bb:92:50:e9:52:3a:
f3:dc:64:c2:35:5d:d6:ef:ee:5d:0d:73:a7:50:53:34:4f:de:
83:71:29:92:be:a4:8e:62:9b:dd:bc:56:fe:0a:2d:a6:a8:60:
56:2e:e3:82:66:7d:7c:a1:ab:bb:9f:6d:7e:a1:8b:a2:1a:65:
19:82:0a:6e:a2:ed:8e:91:cd:ea:71:e4:99:5a:52:73:df:75:
0d:d2:ac:d4:4f:4a:84:a1:cf:f5:d3:5e:b9:0d:c9:a2:af:a5:
6a:ec:22:18:f3:83:5c:30:3f:9e:5a:9e:38:bd:6b:4c:4f:e3:
75:66:c4:0c:22:a6:8d:f4:ed:80:71:fc:53:f3:ed:e4:e4:4a:
ff:6b:12:72:c2:08:59:a9:55:8c:a1:a5:d3:30:37:1d:9c:df:
76:62:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:54 2024 by rpki-client on console-ams.rpki-client.org