Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U7srk9Rnvy5WGuUiVEoA63PkcTs.cer
File: U7srk9Rnvy5WGuUiVEoA63PkcTs.cer (raw, json)
Hash identifier: 9sKtmdyzMWJFwid6vNca+BpevLz4yMrY1miqQsEauJI=
Subject key identifier: 53:BB:2B:93:D4:67:BF:2E:56:1A:E5:22:54:4A:00:EB:73:E4:71:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F9BA82EDA89B8AA513130730815009970
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6/53BB2B93D467BF2E561AE522544A00EB73E4713B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 21 May 2024 14:57:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12839
IP: 193.194.16.0 -- 193.194.20.255
Validation: Failed, certificate revoked on Wed 22 May 2024 18:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:a8:2e:da:89:b8:aa:51:31:30:73:08:15:00:99:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 21 14:57:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53bb2b93d467bf2e561ae522544a00eb73e4713b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:b5:98:75:a0:00:51:19:f3:40:80:fd:0b:
77:3c:23:5e:c1:0b:5e:a5:ee:33:c2:88:c7:e4:b3:
a6:f8:5d:40:c4:c3:4d:4c:f5:97:79:f5:6f:d5:5d:
05:be:ac:eb:ae:9c:a0:22:a0:84:45:fd:65:de:94:
94:e0:27:2e:55:6b:0d:b9:50:0f:c6:1d:8a:6e:87:
98:7a:ad:d7:b4:a7:1c:58:1c:0a:a1:3a:d6:d0:09:
4e:d6:6e:30:66:a5:96:a2:ee:aa:c8:88:ee:84:63:
2b:ad:c7:03:a8:f7:3c:a2:4d:a2:84:3f:ab:7f:1d:
bd:e1:b5:e8:c1:ab:2d:7c:91:6e:1e:a7:6e:27:e9:
27:f7:1f:b2:66:9b:68:78:39:99:8d:02:db:6f:05:
4a:b8:05:f1:d8:66:f5:df:9f:5f:b6:88:63:1f:ad:
29:de:23:9e:9b:8f:22:ef:6a:3e:79:7f:15:ad:a3:
d1:05:9c:cc:14:79:14:13:55:24:33:36:78:48:90:
44:e6:2c:a1:9a:84:dc:14:d9:b7:65:ee:73:36:77:
49:ea:75:d3:c5:45:1a:e0:df:59:a0:fd:e0:94:98:
02:ce:dd:c4:3a:ea:00:45:ba:e9:ae:43:50:fa:83:
64:1d:a7:69:68:98:14:62:4e:c0:bd:1a:28:38:64:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BB:2B:93:D4:67:BF:2E:56:1A:E5:22:54:4A:00:EB:73:E4:71:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6/53BB2B93D467BF2E561AE522544A00EB73E4713B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0-193.194.20.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12839
Signature Algorithm: sha256WithRSAEncryption
3f:f8:df:1d:72:94:83:06:ea:23:58:40:3c:17:b8:12:98:3b:
cc:7d:53:0b:76:37:86:e9:09:ac:cb:db:30:2f:77:ef:45:66:
01:e7:61:b0:07:1c:ac:18:f3:8b:d0:1a:95:a6:83:c2:91:97:
7f:bf:3c:5e:49:75:ab:52:82:9c:30:a0:28:b3:67:72:50:99:
41:3c:64:eb:e3:9f:c0:ea:3c:9b:12:65:2c:1f:cf:33:75:39:
47:65:ad:a8:35:61:8f:9c:6b:5e:01:0b:f1:96:d6:ec:17:b1:
29:ae:33:28:4e:f9:17:18:67:79:67:80:42:6b:c2:d7:ad:64:
12:17:a1:7e:c9:38:2c:16:9b:04:de:a7:2b:ed:0c:bc:7b:46:
ba:64:b0:e4:9d:ea:55:95:76:a4:ea:9a:bb:ad:70:25:a4:de:
f4:97:22:99:84:82:d1:49:d8:78:82:e6:2b:67:66:08:1e:6e:
e8:0b:b8:3a:56:0f:e1:6b:3f:8c:01:89:5e:8b:93:e0:72:49:
42:f1:16:23:28:d0:7c:df:28:41:a3:5c:a6:d7:de:f8:0a:78:
87:e9:d6:e4:33:27:db:0b:45:d9:23:49:e4:42:74:17:cd:50:
f2:ce:27:01:d6:e2:12:79:b5:bd:c4:67:aa:c0:e4:81:9e:96:
b4:d3:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-fra.rpki-client.org