Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IMzQqVAFIx8V15KU-VjvjT2zrpk.cer
File: IMzQqVAFIx8V15KU-VjvjT2zrpk.cer (raw, json)
Hash identifier: 4MAd28BX3ZX0zcZoAmbTEl0NvKN2jP2aKK82hZPbWrw=
Subject key identifier: 20:CC:D0:A9:50:05:23:1F:15:D7:92:94:F9:58:EF:8D:3D:B3:AE:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF4CA4E34B8212322F8BA0FF74DD0ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/IMzQqVAFIx8V15KU-VjvjT2zrpk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 25451
IP: 185.105.48.0/22
IP: 2a00:4600::/32
Validation: Failed, certificate revoked on Fri 03 Mar 2023 08:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f4:ca:4e:34:b8:21:23:22:f8:ba:0f:f7:4d:d0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20ccd0a95005231f15d79294f958ef8d3db3ae99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:92:7f:3b:a1:72:d9:35:95:d2:97:8d:38:87:
bc:7d:06:b8:0b:3b:37:7f:8a:c6:ba:06:4a:15:cd:
79:0b:47:be:ca:06:3f:77:b4:ee:da:74:49:d7:71:
c3:e3:b5:2e:72:d2:f4:3f:a1:87:b3:8f:e0:d4:76:
0e:52:d6:04:e8:bf:17:16:6e:55:4c:bc:48:6a:81:
fa:d9:68:1f:e4:d0:27:c0:e4:1a:54:dc:4b:36:31:
fe:24:ae:4a:ab:a9:f5:db:b3:a8:81:d2:14:39:5b:
79:4b:f8:05:6f:d7:b5:4b:23:fb:b0:12:03:71:a6:
98:af:cd:db:4f:23:55:ba:6b:1a:db:92:5a:32:37:
d5:e1:e0:56:dc:2e:cd:15:fc:4e:43:36:77:df:84:
d9:df:b1:2d:a8:55:d8:5b:51:a0:9c:b7:02:bb:5f:
97:3c:b6:97:1f:00:42:91:47:2b:62:c8:ab:f4:f4:
74:ca:15:49:58:7b:af:e7:0c:14:c5:86:c4:d1:41:
d2:43:8d:e7:bc:c6:ed:bd:1c:a7:37:32:b5:bc:7c:
4c:47:0d:60:55:0e:82:66:a1:09:4e:d2:9a:14:3b:
7b:4a:34:70:89:fe:ad:97:0a:e2:12:f0:79:e2:05:
3b:80:0b:24:8d:83:bb:b9:b3:7f:c8:09:0a:48:ec:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CC:D0:A9:50:05:23:1F:15:D7:92:94:F9:58:EF:8D:3D:B3:AE:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/IMzQqVAFIx8V15KU-VjvjT2zrpk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.48.0/22
IPv6:
2a00:4600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25451
Signature Algorithm: sha256WithRSAEncryption
69:4e:f5:7b:cd:c6:ef:65:0c:19:5d:df:04:74:5b:9a:6c:1e:
42:b2:46:78:8c:76:b9:07:c3:a8:09:fb:d6:e9:a6:74:b0:38:
23:88:e1:d0:6b:e2:05:cf:a3:b3:e9:ae:c2:1e:15:c2:14:18:
94:f3:41:9a:0b:a7:78:8a:53:85:e8:99:ce:43:82:f2:5b:a5:
11:47:18:38:25:f7:7d:53:51:ea:39:5e:76:60:3d:8a:35:eb:
a1:27:7f:ca:46:7c:f1:0c:16:a9:41:f5:9d:2b:21:52:30:a8:
2b:58:5f:23:e5:18:b5:2f:b7:78:81:40:ed:1a:27:a1:c5:57:
7c:12:c6:9f:ea:2f:3e:be:48:0c:6f:a4:b7:b5:dc:0f:e8:04:
73:e3:88:c2:06:e1:cf:05:1b:0e:ff:cd:a4:0c:fc:b0:70:00:
8d:21:a2:71:87:4f:10:74:ee:7c:4d:af:70:c7:d3:e3:59:2e:
91:0d:d9:08:9d:cc:6d:03:15:3e:b4:6f:2f:1a:e4:ff:3d:6a:
f4:f2:c2:52:4b:d8:2f:03:ad:3a:c7:d6:c1:7a:c3:52:d9:1c:
05:a2:5b:6e:82:bc:a2:94:23:85:68:f3:8b:19:92:a1:c6:d6:
99:eb:4d:bf:2b:79:8d:92:1f:8a:f8:a7:70:c0:d5:b5:16:96:
ad:fa:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:35 2024 by rpki-client on console-ams.rpki-client.org