Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
File: GdzFYNrz4qyFtguGYTh_BsH6ExU.cer (raw, json)
Hash identifier: qoiMZgEupuyRTDZggBg3ujDRAHr6dui91R08HmolEiA=
Subject key identifier: 19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D63E6CA02430E2791B24C9BE5B191C2EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/GdzFYNrz4qyFtguGYTh_BsH6ExU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Feb 2024 09:01:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60135
AS: 203914
IP: 31.216.63.0/24
IP: 37.16.88.0/24
IP: 62.68.83.0/24
IP: 62.204.38.0/24
IP: 93.157.109.0/24
IP: 109.107.141.0/24
IP: 109.205.188.0/24
IP: 146.19.25.0/24
IP: 176.126.115.0/24
IP: 178.212.136.0/24
IP: 185.187.18.0/24
IP: 194.26.135.0/24
IP: 195.64.112.0/24
IP: 195.96.146.0/24
IP: 217.114.41.0/24
IP: 2a11:4b80::/29
IP: 2a11:5640::/29
IP: 2a11:7580::/29
IP: 2a11:7740::/29
IP: 2a11:92c0::/29
IP: 2a11:afc0::/29
IP: 2a11:d1c0::/29
IP: 2a11:ee40::/29
IP: 2a12:c00::/29
IP: 2a12:2280::/29
IP: 2a12:2b00::/29
IP: 2a12:7480::/29
IP: 2a12:7e00::/29
IP: 2a12:a980::/29
IP: 2a12:c700::/29
IP: 2a12:df80::/29
IP: 2a12:fb80::/29
Validation: Failed, certificate revoked on Thu 29 Feb 2024 07:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:e6:ca:02:43:0e:27:91:b2:4c:9b:e5:b1:91:c2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 1 09:01:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:ab:a7:5e:9e:ab:1a:59:5b:86:52:ab:7c:
19:7a:02:a7:ff:74:b5:c6:3c:9b:50:c3:4f:1e:b4:
2f:82:57:17:6f:8f:72:96:3c:55:d8:f5:0c:27:a7:
21:bb:42:03:b2:11:99:1e:88:89:7d:e8:34:c9:32:
e0:10:41:ee:db:2d:13:14:f8:24:f2:1f:c0:35:41:
a1:4d:c9:e0:5e:66:5d:fe:98:32:61:18:5e:e7:1b:
b6:3a:22:fd:ec:57:b1:cc:16:1b:ef:cd:33:dc:a8:
f7:40:77:51:02:26:83:da:76:19:95:9a:da:73:f7:
28:ea:1e:e0:a6:b3:fc:23:e6:68:b7:48:17:37:89:
1b:63:05:e9:ff:f9:f8:f0:72:d0:dd:62:37:ee:bd:
a2:14:cc:77:2f:1c:26:cd:fd:90:64:02:61:78:bc:
42:f6:da:18:1e:ae:ff:1a:ec:0a:92:f7:09:5c:3b:
e9:6e:e8:27:9a:c4:dd:e6:21:34:0e:06:54:38:d2:
e9:56:59:b0:06:ed:2b:ae:94:02:17:77:ab:d7:ca:
12:a7:d4:bd:d5:f0:60:a1:27:9c:83:5f:8f:ad:ff:
f7:09:87:57:c4:9b:9f:e1:3c:9f:35:fb:ad:2e:77:
fa:65:4a:2d:43:cf:5f:f8:03:9d:9a:aa:e8:90:aa:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/GdzFYNrz4qyFtguGYTh_BsH6ExU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.63.0/24
37.16.88.0/24
62.68.83.0/24
62.204.38.0/24
93.157.109.0/24
109.107.141.0/24
109.205.188.0/24
146.19.25.0/24
176.126.115.0/24
178.212.136.0/24
185.187.18.0/24
194.26.135.0/24
195.64.112.0/24
195.96.146.0/24
217.114.41.0/24
IPv6:
2a11:4b80::/29
2a11:5640::/29
2a11:7580::/29
2a11:7740::/29
2a11:92c0::/29
2a11:afc0::/29
2a11:d1c0::/29
2a11:ee40::/29
2a12:c00::/29
2a12:2280::/29
2a12:2b00::/29
2a12:7480::/29
2a12:7e00::/29
2a12:a980::/29
2a12:c700::/29
2a12:df80::/29
2a12:fb80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60135
203914
Signature Algorithm: sha256WithRSAEncryption
a0:6f:24:74:74:41:ee:6a:34:1f:e9:a5:04:75:3f:b8:1a:1d:
26:96:94:72:ba:09:ac:15:4c:fc:e5:4e:03:05:25:e5:a7:9c:
7d:87:46:38:6d:e0:20:26:37:2a:41:f1:1e:06:3f:fb:fb:cc:
45:c0:fe:fc:2e:b4:de:9d:56:83:c7:60:c6:65:cb:ae:6d:7b:
d2:28:7e:c0:16:88:c8:66:80:e3:2b:c8:c3:47:52:61:96:b5:
e9:63:c6:24:34:f0:ec:57:11:2c:fd:17:ab:24:5c:f3:58:64:
f1:c9:4e:d0:c7:04:ae:3d:6f:db:96:d3:d2:1e:f3:cc:71:2c:
3d:bd:52:41:ed:86:84:78:f5:01:51:a0:3a:d8:c8:7d:84:8c:
7a:7e:bb:6c:a9:74:c1:79:59:44:38:d0:12:a7:0c:2c:ce:d5:
a6:e0:b4:5c:88:44:7d:47:95:4a:b3:c9:9e:33:ad:85:77:85:
48:2e:ea:49:48:2b:20:52:93:f7:61:bc:77:7e:6f:f1:80:42:
f5:68:6f:d8:c4:a7:c1:93:4b:38:9d:a2:a6:fc:65:a1:68:e4:
99:44:50:91:fe:2f:0f:33:39:95:9d:f1:5d:e8:75:cd:a7:7d:
f1:23:cc:34:b9:b0:ba:17:0d:2c:4b:b8:da:e5:a2:5d:6d:2d:
fb:0f:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:54 2024 by rpki-client on console-fra.rpki-client.org