Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
File: WL9_OtU_KaPEPwrYIBegU2jAEEo.cer (raw, json)
Hash identifier: Jyrae5vbrMPsBAe2bA9nD1GepVIQIBj72lR1i4bKnco=
Subject key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188BA3930406E14E11016B82919B3D4A23A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Jun 2023 14:04:50 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 21321
AS: 35375
AS: 49201
AS: 58140
IP: 85.158.56.0/21
IP: 85.237.194.0 -- 85.237.223.255
IP: 185.89.76.0/23
IP: 185.93.32.0/22
IP: 185.100.212.0/22
IP: 185.139.24.0/22
IP: 185.235.32.0/24
IP: 193.109.192.0/21
IP: 194.169.217.0/24
IP: 2a00:9c60::/32
IP: 2a01:b840::/32
IP: 2a03:8ea0::/32
IP: 2a07:1240::/29
IP: 2a10:f580::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:39:30:40:6e:14:e1:10:16:b8:29:19:b3:d4:a2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 14 14:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:8f:81:36:55:64:52:5d:ed:0d:17:c6:41:
4f:6a:67:46:16:f5:57:20:e2:a1:05:f0:20:73:50:
02:c9:a2:e3:20:01:52:66:0e:51:c1:db:02:ef:45:
c7:c8:c5:ae:ac:f2:37:85:57:db:cc:13:b1:f6:93:
d1:3a:ad:72:6f:b5:96:69:ca:f6:bf:9f:3b:5e:8a:
8e:98:c2:d8:29:5c:f0:f4:eb:6c:ce:d3:b3:a8:52:
bb:23:3a:19:ba:91:ef:9c:d7:37:94:26:92:b7:6d:
e8:e3:79:64:2f:fe:23:2f:ca:25:5b:5b:48:05:41:
1b:7e:47:9c:c6:75:f6:38:3b:6d:ff:6e:af:76:61:
02:dd:7b:f8:f9:2d:bf:28:06:e1:3b:d5:e7:83:d1:
6e:58:e3:6e:d1:7d:80:7a:ea:c3:e8:8b:bc:31:3d:
61:53:93:d7:17:60:02:7e:5a:6a:80:96:e7:cc:4a:
a2:78:fa:c3:f3:94:47:12:5a:e1:04:4c:43:ba:db:
36:e6:37:57:8f:46:fb:4c:5a:5a:49:79:c3:48:6b:
34:4d:59:9f:32:9b:25:7d:e2:ba:55:c0:76:f8:bd:
a0:10:72:db:47:dd:5c:da:c1:42:82:42:b3:b7:75:
f1:41:7b:c8:b8:0e:06:26:6e:57:1b:46:a1:e9:3c:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.56.0/21
85.237.194.0-85.237.223.255
185.89.76.0/23
185.93.32.0/22
185.100.212.0/22
185.139.24.0/22
185.235.32.0/24
193.109.192.0/21
194.169.217.0/24
IPv6:
2a00:9c60::/32
2a01:b840::/32
2a03:8ea0::/32
2a07:1240::/29
2a10:f580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21321
35375
49201
58140
Signature Algorithm: sha256WithRSAEncryption
51:2b:65:ae:09:f1:40:c9:1f:48:9b:65:cd:8d:6b:40:41:29:
0c:0f:fe:81:bd:a1:fd:72:42:88:6e:5f:e8:6e:e2:1a:80:4e:
ed:d7:0d:54:a4:9f:9f:e8:d1:9d:20:ba:ee:49:0b:50:57:a4:
76:39:c3:07:fe:32:90:6a:ef:43:0f:1e:b6:c8:66:13:a0:08:
52:80:47:2b:86:36:ce:02:b0:8e:bd:06:bb:a9:d0:e1:e5:91:
8f:8a:67:0f:29:8c:09:08:94:28:1d:11:20:02:c0:61:b8:e8:
fb:6e:e0:77:2a:38:86:4b:5e:d8:68:0b:cd:66:f6:49:7c:b2:
46:49:4b:0c:b2:fd:54:1d:bb:fa:87:e7:3f:8e:19:a2:8a:dd:
cc:37:a9:63:6c:f6:df:79:0a:5a:bc:22:8a:6d:c1:96:cb:25:
4c:89:6f:bd:82:44:b3:a1:e8:9c:79:83:13:fc:5f:1d:24:6b:
e4:c9:bf:5e:5e:2f:98:18:3e:b4:05:26:23:1f:6a:bf:6b:b3:
31:cf:07:b8:21:0e:fa:df:28:66:a7:e6:db:69:06:36:9d:1e:
60:ce:cf:ca:09:ae:d9:dc:2a:a5:11:ea:70:ff:d4:54:a5:a1:
0a:b8:ad:9f:c5:72:0f:29:c8:58:7d:2c:98:b8:b8:a3:4e:65:
95:cb:a4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 07:16:17 2023 by rpki-client on console-fra.rpki-client.org