Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Keymc3vupMA7jgZ4vqmDjh5SvzI.cer
File: Keymc3vupMA7jgZ4vqmDjh5SvzI.cer (raw, json)
Hash identifier: aiS/xcBR+yIZedUU6kp1GZ7PDLthdCF/w/qJzdbkaZE=
Subject key identifier: 29:EC:A6:73:7B:EE:A4:C0:3B:8E:06:78:BE:A9:83:8E:1E:52:BF:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D5619CD305F95F149300D03886A0E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/bdd4bb-56ec-4762-958e-ecd998e05714/1/Keymc3vupMA7jgZ4vqmDjh5SvzI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/bdd4bb-56ec-4762-958e-ecd998e05714/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:34:47 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 34517
IP: 194.102.215.0/24
IP: 195.182.212.0/23
Validation: Failed, certificate revoked on Fri 25 Aug 2023 10:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d5:61:9c:d3:05:f9:5f:14:93:00:d0:38:86:a0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29eca6737beea4c03b8e0678bea9838e1e52bf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:d5:3e:e7:47:ef:c4:20:31:49:7a:79:9e:
b5:0a:f1:70:06:68:fa:5f:17:43:d6:9e:26:c9:b3:
30:c3:0b:17:5f:6a:28:46:0a:37:fb:99:d8:f4:0d:
6f:57:ed:39:ff:f7:a2:2e:38:24:bb:62:92:5e:c3:
8d:f1:16:e2:4b:c5:42:28:2e:28:59:74:a2:53:89:
21:5b:41:3e:99:d5:f7:1c:67:5e:18:62:50:8d:cb:
41:f0:93:8f:83:d5:66:05:3e:41:01:d0:35:5b:76:
4c:cd:94:b7:a1:a2:16:ef:02:8e:a0:65:fa:71:da:
54:24:37:87:1b:77:cb:21:e4:79:1c:36:42:03:c6:
28:bf:c1:b4:87:22:7d:80:66:cc:fc:73:d8:c3:8a:
99:06:aa:1a:c2:56:11:3e:41:0d:b3:da:ad:3b:ed:
7f:02:c8:45:49:5e:66:33:08:4c:b1:48:11:d0:da:
e6:46:06:60:57:38:9e:b2:bb:1c:e6:57:48:06:82:
27:e9:8f:4d:bb:30:41:4d:14:74:39:d8:f2:c9:24:
b6:36:be:dd:87:f9:3c:4e:1c:41:ba:5a:a1:df:d8:
ab:8b:b7:b2:9c:5e:c6:e3:a4:61:78:8e:5e:d8:db:
4c:6c:49:be:42:63:32:5a:c0:99:2b:fc:e4:98:e9:
f3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:A6:73:7B:EE:A4:C0:3B:8E:06:78:BE:A9:83:8E:1E:52:BF:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bdd4bb-56ec-4762-958e-ecd998e05714/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bdd4bb-56ec-4762-958e-ecd998e05714/1/Keymc3vupMA7jgZ4vqmDjh5SvzI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.215.0/24
195.182.212.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34517
Signature Algorithm: sha256WithRSAEncryption
66:b8:3a:40:6d:39:53:5e:4c:59:98:dd:ad:e4:a2:f5:3e:58:
03:d8:c3:21:81:01:53:57:f2:b6:81:fe:fa:d6:ad:14:58:41:
7a:3d:fd:41:53:a3:d9:2d:e7:3a:15:16:d3:d5:7a:eb:64:0b:
3d:0e:85:9b:9e:11:38:94:a1:d2:89:73:c3:83:67:a6:1e:78:
33:f9:df:28:ef:bf:9b:8f:2c:6c:cf:ad:b7:b9:f4:fa:d6:57:
d1:c5:3f:0e:74:37:66:15:85:ce:85:9d:fe:96:eb:64:04:6c:
08:01:b5:54:35:c3:85:5a:53:74:08:18:a0:9a:ec:11:e4:e1:
66:8b:38:12:9e:c8:92:60:f8:51:e7:70:e7:74:82:48:a6:51:
78:77:4d:b1:74:bb:ee:5a:24:82:97:36:f3:74:db:18:ef:55:
4d:11:92:c6:b5:b6:59:de:9b:d2:ed:11:01:ff:bc:47:93:30:
d7:5c:7c:da:70:6c:ff:14:da:00:bc:6d:77:f3:57:a0:6d:71:
55:7e:98:46:a9:df:7d:e7:78:6f:23:42:08:26:5d:55:43:fb:
bb:2a:ee:a3:77:8b:5c:0d:15:38:a5:cd:bd:a3:b8:43:7c:48:
4d:84:77:75:8d:1b:14:ed:03:75:87:78:99:9f:a9:06:9d:87:
ce:92:85:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-fra.rpki-client.org