Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RzBxzWOvWHBY5fsUa4UGq-I0IpM.cer
File: RzBxzWOvWHBY5fsUa4UGq-I0IpM.cer (raw, json)
Hash identifier: qedybPHIPEygTSI+SyI0YsYwKwziwf1P82+2E4RQueo=
Subject key identifier: 47:30:71:CD:63:AF:58:70:58:E5:FB:14:6B:85:06:AB:E2:34:22:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D894BFD5C48779D486E89A2DE5C5AEF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/b192f4-480b-45f5-9a86-c8bb034fa0fb/1/RzBxzWOvWHBY5fsUa4UGq-I0IpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/b192f4-480b-45f5-9a86-c8bb034fa0fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 47693
IP: 185.43.31.0/24
IP: 2a10:48c0::/29
Validation: Failed, certificate revoked on Tue 09 May 2023 14:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:4b:fd:5c:48:77:9d:48:6e:89:a2:de:5c:5a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=473071cd63af587058e5fb146b8506abe2342293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:a6:2f:5f:3e:7f:09:27:ce:b9:1c:94:85:
bf:2a:77:c1:56:b8:f8:fe:f2:d1:2f:8f:96:12:12:
a1:0a:52:47:12:24:cf:ca:92:bb:6d:c0:85:8c:97:
c1:6e:9c:de:a2:51:0d:9d:12:83:b8:69:1a:d0:49:
83:9a:96:8c:4a:93:11:a9:74:da:f0:05:d3:47:6f:
b6:75:bc:66:fa:27:87:06:14:42:86:93:3a:f6:35:
8c:82:fc:b4:38:76:05:ab:44:b8:4b:ca:5a:2a:74:
b0:ec:e5:65:5b:9f:87:a7:92:de:9c:fe:b7:82:7a:
a5:9c:34:dc:f3:7a:52:84:2c:f8:9b:d8:bb:51:65:
36:d6:ef:20:e9:0f:ca:c9:fc:24:ea:72:6c:39:50:
f9:04:c8:5a:aa:de:62:d6:0e:b1:43:91:48:85:79:
32:09:d5:ca:45:f7:20:eb:bb:b4:95:0e:17:a3:8b:
03:1c:8e:0d:3c:31:50:5a:61:c7:5f:4a:64:d7:e7:
88:8b:e9:ec:92:e9:5e:94:5b:f1:fd:b4:00:78:60:
49:2b:ee:a0:53:66:af:aa:65:30:18:64:7f:74:9a:
79:27:be:4b:34:c4:7e:fb:78:ce:d4:aa:9a:9e:bc:
a6:13:f0:15:7d:04:c4:89:1d:01:e8:1a:08:aa:f0:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:71:CD:63:AF:58:70:58:E5:FB:14:6B:85:06:AB:E2:34:22:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b192f4-480b-45f5-9a86-c8bb034fa0fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b192f4-480b-45f5-9a86-c8bb034fa0fb/1/RzBxzWOvWHBY5fsUa4UGq-I0IpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.31.0/24
IPv6:
2a10:48c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47693
Signature Algorithm: sha256WithRSAEncryption
84:07:2c:35:c7:5c:d6:e7:10:5a:67:83:9e:37:8b:3d:f1:5e:
6c:ae:16:ea:18:49:78:42:2e:50:92:f9:c7:fd:6d:6a:f6:6f:
17:0b:32:7c:8a:14:b1:ad:17:5d:c2:fb:d0:b2:33:b8:b0:08:
1d:68:27:53:7a:5b:73:3b:69:a0:a2:74:72:95:e1:8f:0e:99:
6e:94:7c:6b:94:7c:44:d8:b1:dd:fb:10:58:5e:4f:b1:d1:c0:
30:fb:07:86:7a:fb:97:44:e4:6c:5c:ef:58:a6:36:f8:fb:2b:
9f:1f:bd:b9:2f:d8:6b:57:08:f2:1e:5b:1f:78:3e:13:4f:0a:
25:c2:1d:2d:86:b3:76:c6:53:50:1b:34:d3:10:6a:cc:83:7d:
c6:95:f5:41:16:1f:b2:5a:91:84:59:b9:e4:99:9e:17:67:44:
33:ee:dd:92:ad:1f:38:21:56:f3:4b:35:6a:5a:11:fa:72:04:
14:73:38:1b:ae:4f:c4:6c:7d:2d:f0:b3:85:ad:04:cb:d7:5b:
33:7f:f8:bb:52:37:e7:82:1c:8c:a2:45:ae:09:1a:3d:87:9f:
09:ba:02:f9:db:26:34:e7:fb:28:da:d0:82:7f:d4:6c:9e:51:
64:84:93:9b:c1:bc:0e:74:3c:e7:76:f2:3b:6e:2d:41:a0:65:
12:c8:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:42 2024 by rpki-client on console-ams.rpki-client.org