Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sqwxf4IEGck68m7kTotOuqbH_n8.cer
File: Sqwxf4IEGck68m7kTotOuqbH_n8.cer (raw, json)
Hash identifier: HsLe6TwQXGI6qeDvom8RDI9rX9ni3HVwCXfhfgpOqs8=
Subject key identifier: 4A:AC:31:7F:82:04:19:C9:3A:F2:6E:E4:4E:8B:4E:BA:A6:C7:FE:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C1C12807ECE4C1C95247038D6A0245680
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/Sqwxf4IEGck68m7kTotOuqbH_n8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Nov 2023 17:13:43 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 56882
IP: 37.209.160.0/21
IP: 45.252.236.0/22
IP: 46.251.252.0/22
IP: 91.228.91.0/24
IP: 103.82.48.0/22
IP: 115.42.52.0/22
IP: 168.245.196.0/23
IP: 185.59.64.0/22
IP: 185.130.152.0/22
IP: 185.193.8.0/22
IP: 188.227.128.0/19
IP: 2a02:69a0::/32
IP: 2a03:ae80::/32
Validation: Failed, certificate revoked on Wed 06 Dec 2023 13:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1c:12:80:7e:ce:4c:1c:95:24:70:38:d6:a0:24:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 29 17:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aac317f820419c93af26ee44e8b4ebaa6c7fe7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:2a:97:46:3f:9b:05:4d:d8:49:a5:b7:16:
8a:49:f5:e3:e5:bf:e7:78:09:b2:97:3d:80:dd:33:
c8:2f:65:70:5a:30:01:98:0b:84:c0:73:ba:ca:c4:
d8:c8:be:b5:84:00:31:19:bc:ed:dd:3d:5c:e2:fa:
4f:55:0b:5a:e9:1c:d7:a6:7c:14:a6:61:f7:4d:3e:
a1:0f:50:2d:9b:1a:b3:ac:56:a3:d9:2b:ad:06:98:
63:b6:d7:db:da:c9:24:ef:aa:93:d9:5c:0f:73:94:
87:2a:1f:1f:00:5d:a5:7e:cc:0b:ad:00:70:41:e4:
f1:7e:33:3f:30:06:7f:b6:9b:44:bb:65:8d:e0:75:
4f:96:fe:a7:70:e7:16:cd:5d:70:19:40:d0:2f:f3:
7c:4a:83:0d:9a:56:e9:ca:ee:64:5f:13:e8:57:1a:
74:06:b3:3e:1a:f0:25:b5:bf:bb:5f:a3:59:0d:4a:
e8:52:cd:79:65:b3:29:31:37:d9:a7:44:87:1c:ad:
43:1c:1b:7f:0e:5a:96:dd:81:1a:88:84:4f:80:4d:
4d:83:6c:e2:4f:05:a5:06:d1:7a:6d:14:5b:fa:c7:
06:a8:74:33:b9:e4:8d:f0:1f:e0:23:04:83:c2:90:
9d:69:7c:14:ef:4f:fc:89:22:9c:35:7a:9d:b1:59:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AC:31:7F:82:04:19:C9:3A:F2:6E:E4:4E:8B:4E:BA:A6:C7:FE:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/Sqwxf4IEGck68m7kTotOuqbH_n8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.160.0/21
45.252.236.0/22
46.251.252.0/22
91.228.91.0/24
103.82.48.0/22
115.42.52.0/22
168.245.196.0/23
185.59.64.0/22
185.130.152.0/22
185.193.8.0/22
188.227.128.0/19
IPv6:
2a02:69a0::/32
2a03:ae80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56882
Signature Algorithm: sha256WithRSAEncryption
ad:d9:2d:bf:a1:20:49:13:14:76:05:ff:94:d1:6b:cd:22:8f:
e7:38:60:9e:ba:6a:ee:c3:01:d3:a7:99:fd:8b:3d:46:b8:b0:
e1:91:37:89:bb:fb:3c:21:31:3a:f0:12:ce:80:56:9b:d7:10:
69:62:98:db:de:17:1a:a3:c0:51:e2:04:a6:9d:ea:40:3d:a8:
6f:84:68:3e:a4:f9:93:11:f6:50:f6:5e:24:47:28:5f:71:32:
6d:d6:db:51:b8:a0:b5:40:f2:82:0e:83:7a:3b:66:3b:fb:3b:
49:c8:38:01:a8:07:9c:c7:dc:eb:bd:7f:81:41:14:b8:12:60:
8a:44:e6:5c:d5:61:d6:a8:b8:85:82:fb:9a:31:c6:9b:30:52:
c2:f4:56:cc:73:dc:1c:cc:20:8d:23:47:98:bc:c3:67:91:ff:
05:7a:9a:53:63:62:b9:f6:7c:78:d0:55:6e:12:75:55:9c:62:
7f:bb:6a:96:cd:98:af:dc:a2:17:67:26:38:c6:40:99:a0:ee:
78:4e:8c:44:9e:b6:69:4f:7d:d2:22:8d:74:5a:03:3b:37:2a:
08:8d:6c:8c:0f:17:5b:06:f4:e3:c2:59:80:69:0e:86:8e:00:
1f:b7:c3:6c:9e:96:0f:c9:68:39:11:b3:84:ab:a8:97:04:a6:
ee:5c:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:50 2024 by rpki-client on console-fra.rpki-client.org