Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tmem5HMP2ytYIjBtEfQ9vYwzN90.cer
File: Tmem5HMP2ytYIjBtEfQ9vYwzN90.cer (raw, json)
Hash identifier: LsHmJzh24KqtExMvPU5d5oVVOOEcMQSZ9mqS4a8rwzs=
Subject key identifier: 4E:67:A6:E4:73:0F:DB:2B:58:22:30:6D:11:F4:3D:BD:8C:33:37:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7954DA9A4F0EFA8DA0C8E7BF10DB3AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/Tmem5HMP2ytYIjBtEfQ9vYwzN90.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61222
IP: 185.215.88.0/22
Validation: Failed, certificate revoked on Mon 04 Mar 2024 08:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4d:a9:a4:f0:ef:a8:da:0c:8e:7b:f1:0d:b3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e67a6e4730fdb2b5822306d11f43dbd8c3337dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:4b:d4:f2:f6:b6:ee:69:cb:d3:b0:0f:35:
a7:b2:60:14:a8:27:96:c9:47:9b:9b:4a:6f:13:6f:
0e:11:03:ce:fe:4a:3c:e9:17:d6:44:32:46:2d:67:
c2:ad:c8:8e:19:78:d5:e2:84:71:3a:a5:87:ef:47:
23:b6:6d:6d:19:12:f6:4c:21:e5:02:55:88:3f:dc:
ea:3a:df:f9:93:8f:44:cb:84:29:45:3f:89:14:a2:
f3:fb:9a:01:1e:e6:72:cf:d2:ee:fc:44:36:6a:50:
b2:5a:30:e5:42:25:4a:f8:12:a4:ec:b0:09:7e:d3:
23:81:5c:5a:bc:ca:54:0a:7c:1e:6c:e7:10:b1:4d:
34:a4:98:61:06:76:01:48:a5:84:98:87:5e:bf:e8:
44:da:c3:61:06:86:a8:2d:f4:59:60:25:00:f5:35:
f9:4e:cf:ba:7d:85:60:c1:29:07:83:4e:a9:3a:f1:
25:ad:5a:35:4e:9d:d7:95:df:0f:10:e9:02:6c:4a:
7c:0d:bd:f5:12:51:f4:f6:69:b1:92:a0:e1:a9:ea:
1c:62:10:fc:33:31:4e:f4:61:a4:dc:35:04:7e:52:
52:b8:98:02:32:9d:2a:14:53:7b:07:5c:32:52:a0:
53:b2:c9:7c:59:d2:00:7c:4b:3a:48:41:e4:e1:e5:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:67:A6:E4:73:0F:DB:2B:58:22:30:6D:11:F4:3D:BD:8C:33:37:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/Tmem5HMP2ytYIjBtEfQ9vYwzN90.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.88.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61222
Signature Algorithm: sha256WithRSAEncryption
4e:7c:42:fd:0c:07:e2:20:24:db:2d:42:c2:70:7e:9f:88:8f:
b7:5f:73:6c:5f:1e:c9:b9:55:f5:ed:a6:d4:99:e2:6f:44:3b:
cd:73:70:5b:1c:53:07:7a:22:ad:e8:2e:2c:b0:ee:50:13:0c:
b1:5f:8e:2f:a9:5e:30:74:5d:37:f9:b9:38:3a:ba:c6:91:dc:
98:ea:f0:77:b2:ec:23:05:43:59:70:53:33:d0:1c:a9:87:21:
e0:27:c0:71:02:c9:38:01:0f:69:8c:bd:ed:f3:1c:85:11:8b:
b2:38:c9:c2:95:8c:61:5d:6b:92:15:d6:3d:15:56:99:e3:b2:
43:6a:5a:03:f6:f4:3d:7f:d9:fe:7f:c9:6c:4e:9b:68:2e:b8:
9a:2a:a9:74:bc:cb:d2:50:3b:ad:16:a8:d3:fa:15:50:ab:0a:
90:30:a8:47:ee:88:6b:0c:de:58:e8:20:ea:b0:3d:9b:8b:b4:
89:84:80:cd:56:0e:18:05:b9:54:8c:4e:ee:eb:16:53:a0:0e:
b7:47:84:9d:b1:b5:6f:bb:75:a8:5b:e4:ae:f4:19:15:d5:dd:
bc:cf:f1:68:37:01:f3:da:07:46:17:6a:9d:bd:a1:02:b9:e0:
e9:57:be:dc:b1:08:a2:db:02:4f:a3:cc:07:7a:c5:79:00:8b:
de:72:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:18 2024 by rpki-client on console-ams.rpki-client.org