Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwzMLSHlrodwNa7ZOBtKPLppFho.cer
File: IwzMLSHlrodwNa7ZOBtKPLppFho.cer (raw, json)
Hash identifier: lclja7Pv6a+glmYYjvv6ik0tBN/U773x7wR160ANU4E=
Subject key identifier: 23:0C:CC:2D:21:E5:AE:87:70:35:AE:D9:38:1B:4A:3C:BA:69:16:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E653061BF3389A8CD8EB4D02815F66F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/IwzMLSHlrodwNa7ZOBtKPLppFho.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 43517
IP: 193.162.101.0/24
IP: 2a10:82c0::/29
Validation: Failed, certificate revoked on Fri 24 Feb 2023 10:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:30:61:bf:33:89:a8:cd:8e:b4:d0:28:15:f6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=230ccc2d21e5ae877035aed9381b4a3cba69161a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:eb:5d:1d:e4:c5:76:61:60:6e:5d:a6:e8:
c4:a3:04:e7:1b:f6:cd:09:c1:48:57:0e:ea:ca:5c:
64:da:7b:7c:74:93:4b:9b:68:79:0d:98:cb:4d:2b:
4e:49:de:13:7a:2f:3d:cc:12:7b:8d:38:6d:2f:84:
e8:79:0d:73:ad:97:55:52:50:ae:f4:0b:45:82:e7:
35:56:ea:6a:48:66:4a:15:a3:17:bd:ad:8f:0c:b4:
45:3b:c6:b0:5a:51:3d:c3:a8:2c:63:99:0f:8e:46:
b5:f4:99:28:22:df:29:2f:fe:03:d8:b5:a9:52:86:
d2:e4:f7:7e:cb:a8:1e:72:49:85:55:03:7d:f6:1a:
59:f1:0c:3e:71:ac:dd:90:cc:92:77:71:1d:74:71:
8c:3f:6c:0d:cb:50:07:b2:9c:c0:6c:7d:12:1f:9f:
a0:e6:03:86:d4:a3:fe:ac:dc:58:42:a5:70:38:a1:
b9:ee:ad:1d:4a:34:d8:fc:fa:22:84:ac:bd:5a:7c:
26:24:67:a5:e2:7d:2d:35:22:31:db:64:be:c8:40:
13:a3:6a:aa:de:27:54:c2:c3:a8:fc:99:d9:4e:3c:
db:ac:7d:78:98:0e:0d:59:d0:84:6c:e3:21:59:b0:
8d:de:a8:22:7b:fd:9f:f7:69:90:26:6a:f4:40:a9:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0C:CC:2D:21:E5:AE:87:70:35:AE:D9:38:1B:4A:3C:BA:69:16:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/IwzMLSHlrodwNa7ZOBtKPLppFho.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.101.0/24
IPv6:
2a10:82c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43517
Signature Algorithm: sha256WithRSAEncryption
37:e6:16:0c:24:c5:98:f2:15:b1:bd:12:3b:78:e0:47:8f:83:
c5:b7:8c:4b:e1:79:0b:9b:24:e5:83:3d:e3:29:81:51:23:e3:
81:a4:8b:ca:7c:ea:2b:6b:4c:d4:17:f0:b2:6a:c1:0c:37:82:
59:d9:63:99:45:46:ab:a8:cb:a1:26:20:5d:34:73:e4:79:f8:
df:7c:bb:86:96:fd:fc:73:7f:51:7d:27:ed:67:d9:50:cc:a6:
48:1e:fa:14:f7:d5:50:16:c9:e5:67:2e:3f:76:46:22:ee:f0:
41:43:14:3d:c8:6e:5a:65:1f:b0:4c:5f:9f:62:7c:aa:a5:6a:
4a:7d:1d:75:ca:de:40:88:fe:a1:62:92:34:2f:84:9f:76:03:
c2:e0:f7:68:16:6d:cf:33:a5:70:ea:ee:4c:28:87:63:6b:3b:
76:b0:61:18:91:30:45:4e:21:7e:38:47:61:73:df:69:39:00:
e5:c0:92:cb:b9:16:72:2a:f9:9c:ce:d9:66:bb:04:ad:3a:fe:
c0:ea:a7:00:2d:3e:d1:3b:7d:67:87:43:e1:8c:39:78:8b:db:
e3:18:29:e4:07:b8:10:fb:69:69:2d:25:22:61:7c:c1:87:ec:
54:a2:e9:08:91:d8:28:32:68:19:ec:f9:c1:c2:b5:49:25:83:
1f:11:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:27 2024 by rpki-client on console-fra.rpki-client.org