Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W3jFEaYsLluU8Gk99q-Ufl3iEMA.cer
File: W3jFEaYsLluU8Gk99q-Ufl3iEMA.cer (raw, json)
Hash identifier: AoAVzHbkxDn4WGyi0q85tMbRSAzlzPMTY+PJxzbuySM=
Subject key identifier: 5B:78:C5:11:A6:2C:2E:5B:94:F0:69:3D:F6:AF:94:7E:5D:E2:10:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DABE5281E0CD3C7BA9A8610A14B112
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/fbf160-63c8-4e04-9100-e6343c34a0be/1/W3jFEaYsLluU8Gk99q-Ufl3iEMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/fbf160-63c8-4e04-9100-e6343c34a0be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212773
IP: 185.160.156.0/22
IP: 2a07:be80::/29
Validation: Failed, certificate revoked on Tue 08 Oct 2024 12:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:be:52:81:e0:cd:3c:7b:a9:a8:61:0a:14:b1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b78c511a62c2e5b94f0693df6af947e5de210c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:4b:8f:66:5f:cb:ec:f6:38:2a:55:32:b2:
0c:b8:f5:0b:40:3f:e6:14:35:72:c4:b8:82:69:75:
2c:bc:41:ab:87:2b:21:8a:b8:3e:fc:59:ee:09:ec:
3f:19:7b:40:aa:db:ed:3d:16:c1:a6:c0:27:01:85:
1f:f7:a7:7b:d8:c6:a7:ee:e1:f6:5e:5a:37:73:08:
f4:b5:93:07:e4:a0:0c:2e:fc:df:c3:06:21:63:ff:
41:58:0e:39:24:b9:00:52:76:05:45:6c:a9:20:03:
fd:75:04:6f:e2:5e:6e:e6:bb:08:7f:19:1b:c3:8a:
5b:f4:c1:94:51:74:a6:ea:d2:d2:d7:5f:f4:87:ba:
be:f3:4d:fd:ca:73:08:42:03:dc:6a:3f:16:9b:b2:
e7:7b:22:74:87:0d:26:75:08:97:d5:92:c0:59:b0:
17:e0:31:86:a5:2a:c8:2e:3a:3f:11:f4:9e:55:8f:
b7:69:2b:7a:f2:d8:d4:7c:03:14:08:df:ed:f1:51:
b0:a8:d5:d8:2e:8d:73:d8:60:1c:33:5b:35:6a:2b:
e7:42:c2:53:d8:06:97:1b:5f:a4:cc:18:a8:ed:aa:
1b:6e:73:5d:f5:e7:d1:98:d2:a3:e3:df:ff:a5:a3:
ae:24:ee:72:84:35:b8:28:88:60:33:61:06:1a:43:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:78:C5:11:A6:2C:2E:5B:94:F0:69:3D:F6:AF:94:7E:5D:E2:10:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fbf160-63c8-4e04-9100-e6343c34a0be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fbf160-63c8-4e04-9100-e6343c34a0be/1/W3jFEaYsLluU8Gk99q-Ufl3iEMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.156.0/22
IPv6:
2a07:be80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212773
Signature Algorithm: sha256WithRSAEncryption
4d:51:a2:4c:44:8d:ab:c3:f1:95:60:af:85:9e:5a:ed:88:aa:
40:2c:67:30:4e:35:04:7e:86:7c:07:a6:2b:3b:fc:ca:87:f5:
6d:b6:c6:61:9b:68:4a:e9:a0:73:1e:a3:83:ff:97:78:65:85:
70:2e:ad:de:8a:ae:54:93:7b:22:85:9f:69:b4:fa:31:01:1e:
ce:27:75:26:f3:d0:ca:2c:f3:38:5f:e7:07:cc:ee:13:c6:c9:
93:03:f7:a8:cb:bb:3c:64:99:6f:2c:ff:0f:33:be:35:c4:1a:
ef:f7:a3:b7:bc:48:5d:e6:2e:e5:13:09:5d:a1:70:d7:19:45:
25:e2:93:e3:7e:24:c9:7b:39:64:93:fd:26:8e:0c:e8:d3:10:
f1:86:cc:1c:54:5f:33:24:ec:da:7d:aa:02:83:a0:e2:59:cf:
af:22:dd:9a:ca:96:0f:1c:fa:6c:c8:bf:a0:bc:77:71:59:e3:
64:d8:41:81:d4:04:b0:04:22:18:16:02:a7:c0:86:17:6c:0a:
aa:c8:05:8a:48:c9:8d:e9:97:24:0f:f8:65:d6:10:8b:da:f5:
9d:c2:cb:73:af:b2:47:01:50:d7:54:6c:e0:c3:fb:ee:08:de:
61:8f:d4:ae:1f:c1:ed:57:47:27:9e:7f:2b:e1:3e:72:db:75:
32:c4:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 18:03:47 2024 by rpki-client on console-ams.rpki-client.org