Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WTrY7EJeLgXKbvpPQC7alzvrQsQ.cer
File: WTrY7EJeLgXKbvpPQC7alzvrQsQ.cer (raw, json)
Hash identifier: omN/F3tO/hAT3f8JKo4XXSqocjPfDUMb6Rti3RnEl4w=
Subject key identifier: 59:3A:D8:EC:42:5E:2E:05:CA:6E:FA:4F:40:2E:DA:97:3B:EB:42:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571685516F4C39F8B51230D51FADD8132
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/082a78-75dc-4de6-bc70-456de460c1b4/1/WTrY7EJeLgXKbvpPQC7alzvrQsQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/082a78-75dc-4de6-bc70-456de460c1b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 211528
IP: 185.251.37.0/24
IP: 2a10:ae40::/29
Validation: Failed, certificate revoked on Wed 06 Dec 2023 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:55:16:f4:c3:9f:8b:51:23:0d:51:fa:dd:81:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593ad8ec425e2e05ca6efa4f402eda973beb42c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:c4:c1:a0:e4:95:aa:c7:98:2f:56:47:4b:
7d:c8:ad:f7:08:e8:e8:a6:94:91:7b:4b:40:31:53:
49:ea:9c:0a:2d:38:57:fc:9f:ae:35:bf:33:61:1c:
62:0e:93:9a:01:15:06:77:fd:56:5b:79:f3:b7:86:
55:5c:de:39:27:38:06:e1:c5:ab:39:08:4d:20:bd:
b9:84:65:cb:f3:3b:75:2e:90:c1:ec:b0:b6:1d:d7:
33:04:8b:9c:8f:58:3c:f0:cd:1a:fe:15:f8:67:c6:
fa:d6:0a:87:78:9b:5a:03:01:55:10:b5:a9:32:06:
16:c3:c1:a0:16:e6:60:8d:e3:2b:6d:3c:9b:94:a2:
64:91:4b:72:1e:27:38:28:ef:50:7d:b5:86:61:35:
e4:92:8e:4b:3c:9e:77:c8:68:61:35:8b:50:5f:d4:
a2:99:d8:a5:42:c2:21:09:9b:6a:7d:bb:12:b9:fa:
ce:8c:fc:50:22:f5:46:45:75:7b:4c:d5:04:68:0e:
c0:aa:ae:22:30:c5:19:dd:49:5e:4d:c8:4a:d2:c3:
c8:eb:88:5b:35:0c:ee:84:e4:88:1b:1d:8a:97:1b:
d4:50:b3:6f:c9:a6:99:67:2a:ca:50:3c:32:d3:af:
56:12:af:9b:1a:b6:55:7d:a4:28:8c:9a:f7:8f:67:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:D8:EC:42:5E:2E:05:CA:6E:FA:4F:40:2E:DA:97:3B:EB:42:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/082a78-75dc-4de6-bc70-456de460c1b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/082a78-75dc-4de6-bc70-456de460c1b4/1/WTrY7EJeLgXKbvpPQC7alzvrQsQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.37.0/24
IPv6:
2a10:ae40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211528
Signature Algorithm: sha256WithRSAEncryption
73:91:5e:a4:01:8a:60:f6:51:7a:6b:1a:c6:33:a1:8f:94:a8:
d0:1c:3d:e8:d1:12:36:53:49:f6:fa:cc:f8:e9:f9:9f:81:2b:
39:69:63:2b:38:08:03:01:b5:b0:10:d2:04:91:47:f1:2c:52:
a8:78:a0:11:cd:a5:6e:a0:d0:13:46:1b:b1:88:4f:bd:71:06:
0a:ad:fb:c4:89:f7:2b:e9:56:73:8b:37:d3:a8:d9:9b:21:45:
c4:65:06:73:9a:8e:f6:f0:9e:15:f5:5e:df:0d:36:a4:6c:4b:
f1:69:ee:e7:c0:34:21:90:69:70:42:98:87:55:7b:7f:5c:44:
df:87:8e:39:10:c0:a4:ed:84:29:47:ca:ee:26:41:7e:4f:aa:
11:ba:12:a6:28:4b:72:81:06:af:a3:22:42:69:22:17:f6:8c:
92:8a:4e:76:fe:8a:23:24:96:2c:3d:be:ae:5e:86:55:7b:e3:
7f:c5:32:a5:e2:22:db:31:f1:81:62:43:e9:88:92:e3:cb:bf:
be:3a:09:76:e0:d1:4c:23:67:a9:bf:00:09:98:85:19:29:b6:
17:06:2f:ab:80:75:0c:5a:06:40:b5:5f:7e:f9:40:4d:ae:03:
a7:49:27:56:50:68:25:5b:35:fd:90:36:38:1e:d2:ff:63:40:
38:d3:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:42 2024 by rpki-client on console-fra.rpki-client.org