Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SDPRuEW3M-p-gcEfnajFSiFUQTQ.cer
File: SDPRuEW3M-p-gcEfnajFSiFUQTQ.cer (raw, json)
Hash identifier: /farv1QNykXgru/Y7u1g9pOp2DiyBTeevptbSFIQ/l8=
Subject key identifier: 48:33:D1:B8:45:B7:33:EA:7E:81:C1:1F:9D:A8:C5:4A:21:54:41:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B0EAB8B310B0DC5EAB1F86894D2CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/6c6f86-d378-4796-ace3-261f3ec84f2c/1/SDPRuEW3M-p-gcEfnajFSiFUQTQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/6c6f86-d378-4796-ace3-261f3ec84f2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60277
IP: 185.32.252.0/22
IP: 185.190.204.0/22
IP: 193.57.206.0/23
IP: 193.57.216.0/23
IP: 2a00:ca20::/29
Validation: Failed, certificate revoked on Wed 02 Oct 2024 11:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:0e:ab:8b:31:0b:0d:c5:ea:b1:f8:68:94:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4833d1b845b733ea7e81c11f9da8c54a21544134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f4:52:22:83:b7:cd:0e:f9:fd:34:9e:f2:0a:
42:b3:de:94:fd:84:a5:68:b7:e6:ab:59:df:20:dc:
53:09:37:2e:4d:85:fe:e9:bb:34:54:32:1e:b6:7e:
e2:fc:9d:90:23:08:1c:23:54:ee:e2:d5:77:da:fc:
60:21:6b:3b:44:77:9c:3c:ba:bd:59:d0:65:71:90:
6e:f2:89:84:b0:4f:e2:90:8a:e1:96:7b:2d:66:fa:
ab:3d:04:fe:dc:1f:87:b4:83:a9:c3:78:64:36:37:
94:a1:81:58:9e:dd:69:38:e8:ee:4a:7e:54:34:04:
87:9d:3d:18:c5:61:70:55:b6:84:61:51:1b:23:1c:
1e:64:96:eb:2b:01:01:dd:ce:6f:ad:03:5c:cc:ff:
2d:e7:d2:7e:3c:36:b7:e5:b7:fa:f7:f8:bc:c5:a0:
16:35:b4:20:4f:06:d3:5b:f2:85:ce:ef:a8:1b:e3:
9b:fe:46:76:d9:d3:1d:58:cb:48:0c:57:31:50:2c:
1b:e4:02:54:43:c6:f4:df:67:e7:cc:bb:e9:35:f4:
a1:70:3f:b3:dd:34:49:e7:0b:71:24:b0:43:73:4f:
1d:36:0f:7b:86:92:47:c7:c1:f9:96:85:ae:23:62:
d2:18:00:c2:bb:db:f5:eb:8d:f8:84:87:d9:78:0b:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:D1:B8:45:B7:33:EA:7E:81:C1:1F:9D:A8:C5:4A:21:54:41:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6c6f86-d378-4796-ace3-261f3ec84f2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6c6f86-d378-4796-ace3-261f3ec84f2c/1/SDPRuEW3M-p-gcEfnajFSiFUQTQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.252.0/22
185.190.204.0/22
193.57.206.0/23
193.57.216.0/23
IPv6:
2a00:ca20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60277
Signature Algorithm: sha256WithRSAEncryption
a6:c8:58:ce:42:47:90:b4:4c:38:06:77:5a:54:6d:06:6a:0e:
f9:f0:9f:48:79:7f:2b:5c:23:8d:97:5c:38:fe:96:a2:2e:4d:
6a:2f:1c:8e:24:b1:52:5f:8b:73:3c:0b:b2:c8:18:d4:77:9d:
37:45:fd:0c:c4:a2:05:ab:e2:3e:97:b5:e3:7f:72:3d:6e:52:
4c:a1:87:5e:6e:5f:18:c9:91:eb:4f:47:a7:74:f1:3d:12:ce:
f9:4c:93:68:34:b8:59:ec:9d:87:57:11:da:9d:77:ac:cd:c2:
a6:cf:96:c9:46:79:51:74:c7:d7:24:95:ca:f1:77:02:24:88:
79:93:0d:56:36:ab:71:96:4f:2e:fc:cb:a7:35:83:89:e8:db:
87:41:bf:21:6d:4d:89:2e:18:50:46:ad:ab:98:48:95:5a:bb:
77:1f:95:e6:9b:9b:20:e4:cc:e8:55:d2:c3:1f:3d:58:b9:4b:
d8:4d:79:cf:39:4b:04:cf:cc:3a:6f:ba:39:bf:35:e9:8b:d5:
c5:1c:c1:1d:6b:51:e8:c2:5e:ac:8b:84:a6:14:3f:81:70:0d:
0f:9a:38:6d:49:4b:8d:89:3a:54:bd:da:a3:e0:e3:5d:9b:e1:
d5:4b:fa:c5:06:15:ce:b0:78:e1:99:77:9f:10:cc:0c:dd:b5:
de:c3:e6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 15:13:49 2024 by rpki-client on console-fra.rpki-client.org