Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.cer
File: GaaFfFuj9R2-OPTEoMd8hP8Ps1U.cer (raw, json)
Hash identifier: VO5ra4EVe8aAem2f4rpHGInoPAP/QmPc6GeduNcT58M=
Subject key identifier: 19:A6:85:7C:5B:A3:F5:1D:BE:38:F4:C4:A0:C7:7C:84:FF:0F:B3:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B1DA7815902356DE712170A9D8911BB7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Oct 2023 07:33:18 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 206065
IP: 37.19.80.0/20
IP: 37.221.0.0/18
IP: 37.235.16.0/20
IP: 45.128.140.0/22
IP: 45.144.124.0/22
IP: 81.91.144.0/20
IP: 91.184.64.0/20
IP: 92.61.184.0/21
IP: 92.119.68.0/22
IP: 94.139.160.0/20
IP: 109.230.64.0/19
IP: 185.30.76.0/22
IP: 185.172.0.0/22
IP: 185.197.68.0/22
IP: 188.121.128.0/19
IP: 213.207.192.0/20
IP: 2a0c:100::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:a7:81:59:02:35:6d:e7:12:17:0a:9d:89:11:bb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 11 07:33:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19a6857c5ba3f51dbe38f4c4a0c77c84ff0fb355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:0c:8e:f0:99:92:01:f1:fa:32:5c:e4:41:
d8:d0:25:f6:a8:6c:70:fc:a2:2b:fe:d2:65:77:30:
7c:3e:15:bf:93:b4:34:b4:c7:43:67:43:db:81:e4:
94:85:34:d4:83:54:cc:a3:71:59:2d:00:55:1b:bc:
4c:e1:8f:c8:ce:f9:27:da:33:de:70:e9:07:fb:3c:
b6:cf:fd:9c:41:7e:b0:d7:52:29:8f:a4:81:38:b6:
66:e0:82:bb:69:5a:f7:eb:60:5e:fc:b6:5d:04:98:
7d:68:fb:4c:c0:a9:c3:03:ad:c9:9d:b6:a7:ae:c9:
d6:85:a1:30:d1:13:87:25:9a:27:ed:54:56:f8:83:
76:45:8c:da:0a:62:b2:8f:28:d8:0a:cf:5e:82:3f:
23:47:e8:82:c0:58:0d:17:fd:49:03:18:20:d8:1a:
70:e5:d9:35:15:8c:a5:bd:30:5a:cc:ca:7d:04:f2:
c6:18:87:aa:75:03:d1:50:65:32:3f:81:c7:3c:c6:
66:e8:83:38:6f:83:fc:3a:aa:b7:d2:bb:17:bf:53:
eb:39:22:0b:00:92:b7:e9:d4:92:83:9c:99:42:cc:
8f:1d:a3:5a:71:75:6d:e1:c3:16:af:ee:a4:9f:fa:
47:2e:ec:79:5a:1f:59:5a:c6:6a:69:d6:a9:2a:df:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A6:85:7C:5B:A3:F5:1D:BE:38:F4:C4:A0:C7:7C:84:FF:0F:B3:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.80.0/20
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
81.91.144.0/20
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/19
185.30.76.0/22
185.172.0.0/22
185.197.68.0/22
188.121.128.0/19
213.207.192.0/20
IPv6:
2a0c:100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206065
Signature Algorithm: sha256WithRSAEncryption
0e:9a:f5:c0:64:4e:51:85:cc:7f:ac:a1:e0:cd:69:8c:4a:da:
37:88:a7:76:68:bc:26:7f:a2:de:9a:af:73:81:b9:94:b8:41:
d8:9a:c4:0f:6b:a1:20:b7:52:2a:8d:4d:fe:5b:f8:c0:04:8c:
5e:82:fe:cd:ed:c0:89:75:19:88:ef:8c:19:27:f2:17:07:1e:
62:e8:a0:bb:6f:6f:a4:4b:cd:9c:6a:d2:01:5a:fb:19:59:bc:
16:29:47:06:63:84:a5:74:8a:ee:63:11:bd:1b:6d:fc:1e:be:
d4:4f:1f:10:44:da:27:6d:50:58:23:20:62:1a:f5:48:53:8d:
37:34:4f:be:8e:da:3a:ed:93:d6:5b:51:1e:f5:85:53:43:17:
1a:77:43:f9:e7:45:4f:dc:e0:83:50:33:ef:a4:21:4c:67:b6:
0b:f3:7d:05:0a:e4:f1:7c:74:f5:3a:7c:ea:59:73:42:1b:22:
3d:c1:bd:36:5b:de:34:84:be:a8:16:93:5e:85:48:5f:11:ff:
71:6d:23:19:19:5c:bc:fe:dc:92:b2:06:80:7e:98:28:66:bf:
58:0b:da:33:33:3f:1b:b8:34:62:95:22:32:2b:47:69:d2:ab:
f2:a4:b8:d0:fb:0f:1c:16:e6:ed:0c:e2:de:1f:f9:0b:ae:d1:
de:05:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:20:10 2023 by rpki-client on console-fra.rpki-client.org