Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IM7l6duwexdWUmuGbNcqKSIlStw.cer
File: IM7l6duwexdWUmuGbNcqKSIlStw.cer (raw, json)
Hash identifier: udC/iywArvfmOHBl6qE8DQBjF57j2tKMSaUTjEPnYWE=
Subject key identifier: 20:CE:E5:E9:DB:B0:7B:17:56:52:6B:86:6C:D7:2A:29:22:25:4A:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF78AB447D1B3B75D973D974EC2F54B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/IM7l6duwexdWUmuGbNcqKSIlStw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 5500
AS: 28816
IP: 80.92.144.0/20
IP: 85.119.112.0/21
IP: 88.82.128.0/19
IP: 193.108.218.0/24
IP: 193.109.50.0/23
IP: 195.72.113.0 -- 195.72.115.255
IP: 195.128.250.0/23
IP: 195.206.192.0/19
IP: 217.22.80.0/20
IP: 2a00:1160::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:8a:b4:47:d1:b3:b7:5d:97:3d:97:4e:c2:f5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20cee5e9dbb07b1756526b866cd72a2922254adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:95:ed:4b:74:b1:50:68:8c:39:5d:ed:4d:
45:69:41:ab:6a:a9:7d:13:d8:4d:63:bf:7f:7e:c6:
d5:cf:12:28:ae:68:95:83:98:5f:59:20:6b:d4:e8:
1b:c5:ba:56:56:7f:b4:7a:55:f9:04:cf:2c:ef:46:
39:78:9b:a3:eb:1e:96:b0:8f:bd:36:94:fe:5d:3f:
98:6a:16:6e:51:8d:5b:02:b7:d9:43:8b:cc:ea:73:
c1:fd:01:9d:ff:78:cd:83:c9:dc:a1:84:73:90:35:
06:40:d8:36:dc:f7:22:a6:0f:b7:21:19:77:a1:4f:
33:15:bb:97:ca:72:6b:12:83:b8:e6:0c:b3:d4:07:
15:ac:e0:84:97:ca:eb:14:f2:dc:eb:49:76:77:96:
6d:3c:d2:49:1a:ca:3c:b0:aa:d5:d4:9a:3a:54:ee:
a7:b7:aa:22:49:08:4c:ec:1a:0a:38:38:6f:e7:dc:
57:dc:6a:33:47:c7:c8:52:ed:cd:8e:04:28:77:06:
71:2c:8a:d5:88:e3:28:8e:f9:50:02:79:95:f0:76:
80:4c:38:d1:32:dc:de:cb:d4:87:09:cf:b3:8f:f2:
cf:14:8d:cc:22:6e:ee:e6:c4:9b:c6:33:de:51:66:
0d:84:a9:af:45:11:f1:ef:b2:d6:e1:29:ad:a1:b7:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:E5:E9:DB:B0:7B:17:56:52:6B:86:6C:D7:2A:29:22:25:4A:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/IM7l6duwexdWUmuGbNcqKSIlStw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.144.0/20
85.119.112.0/21
88.82.128.0/19
193.108.218.0/24
193.109.50.0/23
195.72.113.0-195.72.115.255
195.128.250.0/23
195.206.192.0/19
217.22.80.0/20
IPv6:
2a00:1160::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5500
28816
Signature Algorithm: sha256WithRSAEncryption
4f:e7:24:d6:6b:3c:40:9c:01:1a:12:33:9a:8a:73:50:9c:da:
39:53:7d:3d:0d:57:e5:dd:f9:4f:48:47:84:6e:42:04:87:a5:
78:d1:72:3c:95:4e:06:4e:45:3a:c3:89:89:b2:c7:45:3a:87:
ce:31:5f:1d:70:05:06:13:6e:3a:d9:b8:7f:fc:66:98:7a:ae:
ec:af:de:0f:7f:0b:e4:f8:2f:df:c6:46:12:16:ce:62:67:6f:
88:6f:cd:c9:c1:3b:39:ee:0f:5e:29:b0:f5:17:55:a7:2b:6c:
60:eb:46:43:42:03:4e:05:50:e4:5c:b0:a8:b5:31:d9:ba:30:
6a:3d:28:e5:af:9b:03:02:c8:b3:99:e7:c7:9d:01:be:c8:0d:
03:f5:cb:0e:ae:d6:89:66:8a:7f:18:7e:ab:e4:c3:35:20:ee:
16:6a:ee:ab:14:68:24:f9:f5:66:4d:b6:45:5d:8a:b7:86:64:
86:d2:c5:09:01:9c:01:c7:e5:ad:8c:0e:9b:3d:e3:d4:26:53:
31:8f:28:f3:72:18:29:ca:f7:35:2c:3a:ca:98:ac:e1:dd:13:
0d:1e:28:f4:3a:91:77:f6:e5:95:ad:3a:c2:85:e6:1e:cb:2b:
fd:97:9d:fe:92:4d:98:8f:cb:94:d9:8b:b6:1a:64:aa:72:1c:
1a:60:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 12:41:34 2023 by rpki-client on console-ams.rpki-client.org