Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J3DKXPD8s-GCPTPQzZglqhqYoQc.cer
File: J3DKXPD8s-GCPTPQzZglqhqYoQc.cer (raw, json)
Hash identifier: QYqil5DemdUrCijvOJTFFtPSv/q8FdkK/U9nkLeBWQw=
Subject key identifier: 27:70:CA:5C:F0:FC:B3:E1:82:3D:33:D0:CD:98:25:AA:1A:98:A1:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708A5AFEE8E2C1DA5C30FC4F9E6B270C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/J3DKXPD8s-GCPTPQzZglqhqYoQc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:33:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210274
IP: 31.210.148.0/22
IP: 2a0d:51c0::/29
Validation: Failed, certificate revoked on Tue 13 Jun 2023 10:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8a:5a:fe:e8:e2:c1:da:5c:30:fc:4f:9e:6b:27:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:33:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2770ca5cf0fcb3e1823d33d0cd9825aa1a98a107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:11:29:99:08:10:06:a1:24:d1:04:44:d1:d4:
5f:e2:09:6a:05:79:c8:dc:79:8f:f0:d6:8e:24:6d:
4a:de:b7:70:ff:aa:08:23:e3:49:1f:ef:ca:4c:d6:
a6:9d:d3:e1:3a:ac:94:b3:36:59:11:ba:6d:91:75:
76:61:60:d9:96:58:a0:e8:3d:bf:4b:c9:61:86:b8:
e0:5f:7b:0f:38:ad:c6:69:48:36:56:69:2f:47:b5:
b1:84:9f:a7:01:4a:1c:a5:be:5f:87:5f:58:b5:20:
6b:23:f7:b4:3d:74:62:d2:79:9a:a3:f7:9b:22:dc:
22:9e:50:df:5d:b8:77:d5:20:43:31:90:22:e0:20:
8b:1b:f9:a9:35:c5:48:8d:74:44:d3:50:5b:3b:b8:
cb:08:b6:26:6b:8a:af:f9:80:7d:40:ba:7f:0f:f8:
be:12:cf:1b:22:50:c0:39:30:16:52:25:dd:6a:00:
59:0c:a6:92:c9:64:f3:fb:a4:f1:61:f4:36:dc:f2:
df:11:ff:19:a7:fb:5a:b3:6a:b9:fa:00:ca:a3:0e:
02:ed:f4:5e:2c:c2:61:dd:b5:3e:0f:69:71:fe:73:
3c:40:94:a6:26:5f:f2:0c:9f:28:f9:34:0a:a0:31:
08:1e:2c:31:a4:f1:79:87:b7:d3:da:99:f1:1f:88:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:70:CA:5C:F0:FC:B3:E1:82:3D:33:D0:CD:98:25:AA:1A:98:A1:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/J3DKXPD8s-GCPTPQzZglqhqYoQc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.148.0/22
IPv6:
2a0d:51c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210274
Signature Algorithm: sha256WithRSAEncryption
35:3e:9b:29:80:0e:8a:29:ae:f6:0e:f7:76:f6:46:04:f7:b1:
4b:d3:e5:84:5f:13:47:0e:ec:be:d4:30:94:23:ea:d6:fc:94:
b1:64:78:e9:18:87:64:89:29:18:04:b5:02:cd:b7:47:89:9b:
4a:1b:01:0f:45:a5:f2:16:d2:59:98:4e:6e:96:0d:47:2d:ba:
fb:c9:99:56:b5:08:63:5a:64:62:ad:93:26:3b:4d:e6:8b:f3:
82:12:d5:13:67:5a:a0:33:d9:fd:7b:2d:13:44:d4:6d:8b:58:
e9:4c:69:2a:a5:0e:30:1d:42:ac:19:d8:45:37:ee:89:92:8c:
20:4e:61:3a:dc:7e:87:d7:ba:42:62:f8:57:e9:26:70:49:2a:
7d:5c:4a:7d:86:70:f3:03:c7:ef:5e:b9:c7:4e:07:e8:70:fd:
32:10:fc:14:30:92:4b:cc:fd:3e:04:6a:70:80:7e:ed:d8:36:
a8:a8:82:c2:e9:99:f0:b8:66:51:7a:3e:ba:f7:fa:8c:f1:1a:
da:36:24:75:c6:47:72:c7:2e:92:41:2f:5a:2a:b4:fc:5f:8c:
5d:ae:8e:03:d4:6b:2e:76:dc:97:d0:78:70:78:df:7e:51:54:
f7:f9:a2:c8:1f:19:56:d5:98:a2:e7:91:d6:55:af:01:4c:0e:
69:a4:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:29 2024 by rpki-client on console-fra.rpki-client.org