Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
File: IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer (raw, json)
Hash identifier: bCvdy5A2m6xmXsMlp3asZF1MLhkGeNl2pAwLXRkFwJw=
Subject key identifier: 21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49360C7169C19290DCCBCD4ABA44B13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47828
IP: 91.199.134.0/24
IP: 2001:67c:1824::/48
Validation: Failed, certificate revoked on Wed 04 Dec 2024 13:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:60:c7:16:9c:19:29:0d:cc:bc:d4:ab:a4:4b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21409e170842785e5e787c3ac27a8844bab76c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:c1:dc:d9:d7:34:fc:26:60:20:e3:c1:b8:
b8:f9:35:da:8e:00:9e:20:22:f7:41:27:87:66:b5:
f4:86:14:88:3d:57:ba:a7:c1:be:53:80:77:50:be:
f5:ec:ce:4c:ef:b7:2c:8e:f2:d9:81:83:d2:43:d5:
7a:97:50:c7:c7:4a:db:96:78:47:28:7a:2f:b2:bb:
b3:0d:88:18:cf:f2:10:23:8c:a7:b4:49:5f:af:42:
9e:42:9b:81:af:54:b6:b5:ec:cb:14:46:3c:b0:f5:
64:5a:11:95:6e:6a:82:58:f6:ec:9a:e2:b7:1b:64:
a9:5d:ac:cb:d4:fb:32:0e:b8:75:2b:59:9a:b4:cf:
47:f4:cc:6e:10:58:f8:f2:72:71:ba:bf:4d:0b:37:
e2:2d:15:c4:20:0b:bc:9b:d3:07:a4:bb:a1:74:36:
fb:36:f7:2d:0d:21:28:41:ab:eb:0f:14:18:38:9c:
a4:f8:e1:f2:36:4e:a4:d8:b6:31:bf:72:6c:d9:85:
a5:ca:e2:8f:82:23:95:0f:02:e5:5d:cb:c9:59:00:
4c:90:dc:27:e3:22:c7:b7:2d:1e:db:d3:35:bd:5a:
e9:30:36:96:86:fc:e5:d4:a8:09:5a:76:75:72:0c:
51:b7:51:66:35:e6:13:39:da:d3:c4:48:6d:93:04:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.134.0/24
IPv6:
2001:67c:1824::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47828
Signature Algorithm: sha256WithRSAEncryption
ac:ba:8c:60:ca:1f:9f:e4:82:ef:4b:6b:fe:c8:e7:67:ce:07:
02:d9:04:a1:ab:f9:5f:03:ed:bb:dd:53:07:d4:62:99:c1:35:
5f:9b:c2:9b:ff:9b:09:27:4f:4f:9e:06:9d:e0:81:d2:01:a4:
df:5b:de:cf:62:d6:f9:d2:55:ee:ea:61:f0:13:de:0a:87:63:
dc:69:0a:60:b7:4e:17:19:93:cf:2d:55:0e:cb:9d:60:4d:95:
30:dc:d1:18:84:95:7e:fc:37:59:20:48:c2:ba:99:e6:72:18:
79:20:9f:25:38:04:36:16:53:f3:e5:86:73:11:38:8e:78:d9:
db:dd:5b:65:2c:9c:d0:3b:cf:85:50:64:c1:43:7b:78:a2:91:
15:8a:c3:89:01:f0:81:7c:b4:cb:d5:20:18:fe:ab:0b:06:34:
39:42:60:b4:48:60:cf:12:7e:46:f3:1c:a0:66:5f:12:18:4e:
4a:bc:77:9c:0f:7f:92:05:c5:f4:2e:32:11:fe:0c:5b:0d:d8:
85:cf:5d:c3:44:d1:c7:91:ba:c4:1c:0d:6c:8b:e9:df:39:65:
18:17:6a:a1:d0:76:68:6b:3f:ff:a7:ee:fe:68:1e:f3:d9:f7:
5d:50:78:d4:11:64:81:2f:53:bd:ac:2e:4e:31:04:0a:c0:c8:
fe:38:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:10:57 2025 by rpki-client