Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T5xxgvtJstmOBgOMtPjcIccXG4U.cer
File: T5xxgvtJstmOBgOMtPjcIccXG4U.cer (raw, json)
Hash identifier: 5b4Cexsan9IGrWRt8frmeHq3N6jxtiDvToCS/kIuEls=
Subject key identifier: 4F:9C:71:82:FB:49:B2:D9:8E:06:03:8C:B4:F8:DC:21:C7:17:1B:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B584100D92716D06432FE9F735232
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/T5xxgvtJstmOBgOMtPjcIccXG4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:06 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 196924
IP: 195.191.126.0/23
Validation: Failed, certificate revoked on Fri 09 Jun 2023 07:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:58:41:00:d9:27:16:d0:64:32:fe:9f:73:52:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f9c7182fb49b2d98e06038cb4f8dc21c7171b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:46:39:00:7d:cf:3c:85:30:c6:7e:04:be:
66:b6:1f:3d:46:0a:38:2a:8c:98:cf:a0:d6:56:9e:
de:84:4b:3c:23:1b:d5:28:3d:10:f6:4f:01:27:24:
aa:19:89:d5:53:37:7c:f2:22:19:0a:08:55:ab:82:
41:8c:48:1b:ab:8e:b4:c5:2b:ab:c1:e7:cc:98:a5:
41:8d:29:37:ab:e0:cb:f9:38:40:b8:dd:db:3f:e3:
f0:e1:17:05:29:7e:6f:5f:77:a8:38:71:ff:21:95:
e4:a0:d2:96:bf:47:be:43:d1:52:f6:e3:2b:54:3f:
7e:e9:46:b1:80:cf:c4:4c:35:d8:23:fe:37:8e:08:
a4:54:ba:a1:fd:b4:6f:72:58:5b:e8:85:82:df:34:
f4:dc:df:ac:83:6e:39:a7:0f:ee:55:f2:25:e0:0b:
fe:1d:bf:4a:0d:6c:b6:ad:7a:46:3c:82:6e:d5:43:
b0:9d:87:93:32:e5:63:73:b2:f9:10:f1:29:15:fd:
d6:6f:d1:bf:55:75:81:60:e3:5a:5f:2e:3e:b9:d4:
3f:19:18:67:41:42:d7:f0:7d:c3:99:38:9c:87:79:
bb:07:5a:bb:cc:84:d8:7c:37:5d:49:5d:c2:16:0e:
3c:4d:84:d4:8b:91:fa:db:07:56:43:a3:21:e8:27:
4f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:71:82:FB:49:B2:D9:8E:06:03:8C:B4:F8:DC:21:C7:17:1B:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/T5xxgvtJstmOBgOMtPjcIccXG4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.126.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196924
Signature Algorithm: sha256WithRSAEncryption
9b:0a:a1:be:fb:fe:85:a5:0e:5a:cd:e0:35:99:2d:48:d7:ae:
7b:6f:1d:6c:c9:75:ba:4d:c2:9e:40:8e:94:ef:6e:2c:cf:b0:
fb:4e:28:df:b0:4b:84:7b:c9:db:c3:bf:af:43:ff:40:af:20:
13:9c:c6:16:2b:ef:d9:be:cc:19:b1:a9:e0:7d:62:bc:89:4e:
0d:14:ae:31:a4:3c:8f:49:37:05:cd:aa:db:3f:01:a7:81:02:
1f:ff:78:0f:3d:45:15:c8:73:8d:45:1c:28:e8:eb:fb:18:90:
33:5a:ec:1d:7d:60:ce:bb:59:9a:62:1f:4c:dd:5e:22:b5:8e:
b3:ad:09:65:48:47:cd:d9:ec:fa:82:e7:c0:5a:27:07:dc:3d:
15:3c:c8:b5:bd:67:47:dc:8b:13:0f:09:57:5e:1a:b8:02:1b:
17:5d:ff:12:cf:64:7a:c7:c2:3d:44:5f:91:1f:1c:9a:93:a5:
e7:59:26:55:4d:e8:ea:b8:07:e7:f1:e2:e8:18:66:d3:ad:5d:
42:d5:4a:c1:cb:d2:a5:bf:c6:68:46:d5:42:95:ec:b5:c9:61:
92:e8:f8:19:45:9a:41:42:3a:93:61:c3:83:80:5f:b0:25:b8:
c0:d5:9d:68:0c:3e:02:63:e0:0b:4a:73:f4:14:e8:fb:01:3b:
91:e3:e9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:53 2024 by rpki-client on console-fra.rpki-client.org