Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.cer
File: P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.cer (raw, json)
Hash identifier: jpsrp2BocoPVICBxk4UpJtV3wEQO22OkyBqnOPvDscU=
Subject key identifier: 3F:EF:CA:05:A3:21:2E:AD:58:6E:09:72:23:75:DB:D8:DE:D9:68:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD0E860715D3A1BF8F62616D0882031
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 43969
IP: 185.223.207.0/24
IP: 2a0a:c880::/32
IP: 2a10:9b80::/29
Validation: Failed, certificate revoked on Wed 29 Mar 2023 11:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:e8:60:71:5d:3a:1b:f8:f6:26:16:d0:88:20:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fefca05a3212ead586e09722375dbd8ded968a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:a1:7a:d9:b5:eb:52:c2:dc:9a:c1:20:bf:
f0:a8:6e:9e:e2:cc:63:94:eb:35:49:3c:0a:f1:48:
ef:b9:67:c1:b7:b0:33:18:b3:ac:f6:6c:f3:c7:da:
3c:92:73:a6:e9:78:7b:ef:d8:36:4f:f3:f5:d7:5a:
9a:28:31:63:a6:a9:fa:a9:65:d6:de:98:f2:46:07:
7e:ff:ad:3e:5d:c7:44:0a:b8:ae:4c:79:a3:05:c0:
2e:bc:ae:38:7f:84:6d:59:6d:ce:d7:35:f0:8f:c5:
ba:e1:12:b5:a4:c3:b9:23:83:23:3e:2a:d7:52:67:
df:c5:38:46:f5:58:b3:36:60:44:16:9b:27:df:93:
e9:36:f4:c8:d1:24:58:4b:9b:bf:22:97:93:2b:60:
a7:1b:bf:25:07:87:66:d5:e3:71:1a:22:07:5b:ef:
23:5f:23:32:0b:2a:0c:3a:49:dc:d4:12:22:c0:f5:
e8:66:eb:14:eb:d7:41:1f:5f:c4:54:56:b8:f8:fd:
34:e5:00:32:22:12:db:44:3e:f2:0b:d8:d9:c8:e8:
d9:38:06:58:e8:27:1a:a3:94:e8:0d:00:6a:d6:9e:
b3:4a:79:e3:89:31:ec:f1:b8:e1:58:1a:17:ff:4c:
6d:7b:1f:73:16:de:a3:bf:37:95:25:9e:d9:56:e4:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EF:CA:05:A3:21:2E:AD:58:6E:09:72:23:75:DB:D8:DE:D9:68:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.207.0/24
IPv6:
2a0a:c880::/32
2a10:9b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43969
Signature Algorithm: sha256WithRSAEncryption
5d:88:b6:37:25:03:92:1d:2b:ff:20:8d:d0:b2:80:31:86:bc:
9d:7e:12:52:97:72:3a:e6:37:49:2e:22:d0:a3:08:4b:dd:f1:
f5:bc:ab:c9:9d:b8:0a:79:75:2c:1a:b5:1f:e6:0a:4d:c2:25:
c9:cd:30:1d:6c:5e:94:5d:fa:c3:0c:ed:d5:57:05:ec:93:e5:
83:5e:c2:f1:3c:50:22:41:a9:e7:62:58:51:14:d5:08:db:8f:
b1:ff:a2:d4:57:fc:38:9c:c6:db:7f:90:9b:ba:c6:73:2c:e0:
e6:16:72:8b:c0:0d:63:b2:87:31:ed:0c:4f:88:08:1e:6e:7c:
9b:9f:dd:c9:d5:c1:b2:7c:c0:ff:35:e6:19:cd:78:75:00:ed:
1a:91:7e:60:bc:37:84:41:bd:e3:67:e2:3b:40:ab:09:57:ff:
b6:d3:e6:1d:10:f1:56:e9:3c:ba:6c:da:d2:18:2e:60:2d:c7:
34:46:39:1c:de:ff:9b:a1:70:49:bd:ba:7f:e4:41:fd:68:f2:
c4:27:23:a8:7f:fe:04:46:87:b2:05:6b:db:47:3b:f7:39:f4:
0d:ab:ab:04:e6:43:fb:ba:f0:e1:86:16:a4:39:78:68:2e:87:
b1:8a:0d:18:c3:cf:36:ad:fe:7d:6b:8b:10:65:fe:98:e9:75:
23:6d:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:47 2024 by rpki-client on console-ams.rpki-client.org