Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RSSNwIhIXXjc-BramhjV_50vkGw.cer
File: RSSNwIhIXXjc-BramhjV_50vkGw.cer (raw, json)
Hash identifier: QJHZ5BQd6Qh3NaEaFFf6N2k4yc+t/5ZfhAn28iPME4Y=
Subject key identifier: 45:24:8D:C0:88:48:5D:78:DC:F8:1A:DA:9A:18:D5:FF:9D:2F:90:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185716892C9D606B1A0780FD5368AB70F03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 43221
AS: 51030
IP: 185.121.224.0/22
IP: 185.188.140.0/22
IP: 2a06:a140::/29
IP: 2a0b:c580::/29
Validation: Failed, certificate revoked on Wed 02 Aug 2023 14:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:92:c9:d6:06:b1:a0:78:0f:d5:36:8a:b7:0f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45248dc088485d78dcf81ada9a18d5ff9d2f906c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:10:bc:26:a1:05:26:b0:4f:d0:52:93:89:17:
f3:6d:54:3f:7a:d2:54:9b:60:dc:7c:c2:d5:e9:4f:
de:56:58:0f:a5:1c:af:39:a9:b0:57:6f:28:44:32:
8d:5e:72:83:e8:8b:1a:27:9f:bb:ff:08:c4:ec:42:
8c:dd:3d:59:00:89:2a:74:77:14:67:1c:da:12:25:
72:4b:7f:55:ad:6b:95:4a:2c:c6:57:f4:0c:98:a9:
a9:2e:7f:52:5f:4d:d0:c8:e3:ab:91:12:68:56:72:
08:87:e5:6b:2f:9b:27:7c:a9:dd:00:d5:a4:b7:ce:
ac:7e:e4:07:f5:6d:4b:db:71:59:a1:e5:d7:3b:10:
28:b7:4d:8e:22:36:3e:10:40:32:2c:00:5e:b5:a0:
4b:68:b2:7f:ac:ff:18:bd:e2:31:79:f7:b1:64:e6:
e5:28:f4:2a:02:c8:b9:12:4a:2a:50:5c:ca:ba:78:
57:3f:36:e0:d4:96:bc:25:95:58:14:f6:54:96:0b:
f9:92:ff:db:19:ec:5b:8f:38:af:d4:1c:d0:b2:b9:
d0:8b:62:1a:4d:24:66:ef:51:7c:82:ef:b1:94:6e:
52:a2:ec:c5:8b:10:05:a2:68:18:75:75:31:e1:8b:
e3:20:88:bd:3b:eb:82:85:29:2e:e3:b5:c6:23:90:
1d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:24:8D:C0:88:48:5D:78:DC:F8:1A:DA:9A:18:D5:FF:9D:2F:90:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.224.0/22
185.188.140.0/22
IPv6:
2a06:a140::/29
2a0b:c580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43221
51030
Signature Algorithm: sha256WithRSAEncryption
25:8a:fe:83:7f:8e:df:dc:76:3f:c5:65:66:9c:3b:06:d1:43:
e3:27:e1:6e:ea:f6:d8:44:68:ad:61:7f:27:3e:69:6f:a3:8a:
3b:54:9e:66:bd:49:d7:30:a3:3b:93:c2:bd:e3:01:42:aa:c6:
22:1b:7d:37:36:df:0b:83:21:d0:50:64:4c:54:af:d7:bb:79:
d4:b6:39:b0:f4:aa:fb:4e:53:96:7a:35:e9:b0:c3:1a:80:f1:
b4:3c:a7:8f:ac:54:70:f4:1b:34:8d:a3:93:ff:82:2b:aa:29:
57:0b:28:b3:00:53:91:64:d1:20:e9:5f:65:54:91:ce:43:3f:
f9:d5:ce:1c:f6:b0:75:55:ce:7f:92:81:e4:2d:92:a2:6b:26:
20:d3:f2:f2:93:3c:ef:47:5c:f9:e5:53:8c:1d:48:6a:b0:11:
8d:56:8c:29:50:3b:76:20:87:62:d6:8a:b9:c4:07:90:fa:0e:
b8:01:ed:23:7f:6b:54:3d:a4:0e:e8:a3:d4:f6:43:f2:68:fa:
1b:37:d7:cc:ef:cc:13:ca:9d:82:c3:d7:eb:ef:b7:c5:68:3b:
fa:1e:8d:17:47:49:10:a7:c2:26:6e:18:55:6b:e2:ec:c5:c3:
77:07:63:0b:37:a8:dd:fd:e5:33:f8:b8:f7:51:4d:16:26:a2:
59:a4:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:34 2024 by rpki-client on console-ams.rpki-client.org