Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
File: HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer (raw, json)
Hash identifier: 0DH31qaIFuB/QgFdQedk23xVy3KVd1CRmnIYensr1JA=
Subject key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D582BD61ADD41125DE1C1DA3E2B8D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:34:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 208575
IP: 45.128.16.0/22
IP: 2a0e:3bc0::/29
Validation: Failed, certificate revoked on Thu 05 Jan 2023 13:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d5:82:bd:61:ad:d4:11:25:de:1c:1d:a3:e2:b8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1db853b861973fc506e64714cca796d15ccace51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:3e:6a:8d:c9:39:d7:81:f1:5c:c4:7f:32:
2b:56:f5:31:8a:cf:20:9f:17:20:f2:ee:8e:a1:08:
2d:7e:d4:eb:d6:6d:dc:ff:e3:91:9d:fd:25:1f:5c:
3e:7d:b1:d5:82:53:0e:6d:bd:7f:7f:0e:1d:37:7a:
b3:f5:87:3d:bf:74:6e:b0:96:6c:46:39:10:73:fe:
38:76:47:8e:cd:b7:32:56:b6:dc:94:ae:b1:e1:5d:
05:af:6a:6d:b8:a0:c1:26:9e:ce:90:fd:77:e2:ae:
eb:1b:73:d1:51:81:e1:40:6a:76:53:ba:96:74:e7:
b1:51:42:96:41:44:c9:ba:ee:c4:0a:b4:f5:be:9a:
49:24:2d:70:0a:30:50:33:c3:a8:a2:4f:3e:ac:19:
01:25:f5:86:87:3e:60:a9:01:0d:f0:ae:6c:ac:3f:
82:8a:4c:80:b2:b7:45:f4:11:e7:91:37:ac:7b:1f:
3a:cb:e7:b0:11:00:fe:5e:60:29:54:da:01:f6:2e:
72:94:3b:9a:15:b9:d3:25:44:e4:50:7c:30:98:73:
f7:b5:dd:90:14:24:65:40:05:5a:ff:16:d3:81:2a:
67:ef:67:a8:91:0f:5b:9a:ad:03:28:27:e2:c3:a2:
d1:78:72:f0:f8:f9:a4:2c:e2:e3:86:6a:92:fd:cf:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.16.0/22
IPv6:
2a0e:3bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208575
Signature Algorithm: sha256WithRSAEncryption
34:8c:0b:11:2b:2a:99:7d:a6:85:30:66:ea:b8:47:08:7e:1c:
1e:f4:70:67:6f:eb:82:ad:82:31:a6:f0:48:4a:0a:cf:12:13:
41:2c:ad:ca:69:1c:9d:9f:b3:5b:11:98:e4:6a:1e:97:84:08:
41:23:b4:a3:5f:cf:73:2d:12:72:5a:ad:5d:16:32:38:d6:d8:
8f:80:4d:7d:00:5b:b8:9c:27:63:4e:a8:ec:56:15:6b:df:80:
b2:7e:21:f1:92:5f:bc:8f:13:a0:4b:3b:de:82:bb:79:88:8e:
ce:cf:5c:13:a3:22:3c:bd:9c:28:ec:83:a2:64:30:96:ba:c9:
8c:83:9e:3f:80:1b:15:86:f4:ba:a9:54:94:01:ce:c5:9f:c8:
96:34:3a:4d:91:52:c5:81:37:c2:23:37:8e:1d:c8:ba:b6:58:
9e:15:22:3c:20:5e:38:67:e0:3f:1e:6d:72:62:17:39:99:64:
02:22:8a:c1:2b:5f:4e:ab:fc:d7:83:c4:86:9a:e2:0c:db:84:
56:99:b7:76:72:c4:c1:d5:2a:b3:46:2f:e3:17:16:bf:bb:1b:
91:0f:dc:b5:29:94:fa:79:1b:55:89:ec:6e:ef:54:93:1d:8c:
b7:02:b1:2d:e8:9c:79:9a:cb:4d:25:7d:cb:37:d4:75:aa:5c:
83:15:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-fra.rpki-client.org