Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WX61mcH5lEF-tc3roA33e1le9rc.cer
File: WX61mcH5lEF-tc3roA33e1le9rc.cer (raw, json)
Hash identifier: V6ul4S0m9cBNklUq106h8eO/Qe2Ujtj1pKPVK3VkqOs=
Subject key identifier: 59:7E:B5:99:C1:F9:94:41:7E:B5:CD:EB:A0:0D:F7:7B:59:5E:F6:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018760A36A7D5E9FA8BFCDBE858A419F69E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/HYSP/6/597EB599C1F994417EB5CDEBA00DF77B595EF6B7.mft
caRepository: rsync://rpki.co/repo/HYSP/6
Notify URL: https://rpki.co/rrdp/notification.xml
Certificate not before: Sat 08 Apr 2023 11:32:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 47449
AS: 50058
AS: 202736
IP: 2001:67c:a80::/48
IP: 2001:67c:a84::/48
IP: 2001:67c:a88::/48
IP: 2001:67c:a8c::/48
IP: 2001:67c:a90::/48
IP: 2001:67c:a94::/48
IP: 2001:67c:a98::/48
IP: 2001:67c:a9c::/48
IP: 2001:67c:aa0::/48
IP: 2a12:dd40::/29
Validation: Failed, certificate revoked on Mon 10 Apr 2023 01:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:a3:6a:7d:5e:9f:a8:bf:cd:be:85:8a:41:9f:69:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 11:32:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=597eb599c1f994417eb5cdeba00df77b595ef6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:40:e8:58:a0:37:56:5b:46:69:92:c8:c0:
37:01:9b:ed:d5:ba:a7:25:00:7b:6a:57:8b:da:1f:
07:75:67:3c:84:f8:c2:47:d5:2d:90:38:19:f3:5c:
57:df:ad:fd:2a:98:07:37:3d:7c:cf:bb:eb:81:4d:
ee:0a:05:4e:e3:72:eb:c4:5e:e1:24:a7:80:06:0c:
40:ce:2f:2e:83:1e:75:ea:57:9c:87:0e:04:67:91:
57:93:1d:81:0a:fb:ec:8b:61:9b:bd:17:8a:99:6e:
28:a3:83:ab:dd:45:33:4c:1a:40:5f:a8:65:9b:f6:
3b:11:c2:1b:3d:39:5c:fe:11:84:83:a6:59:bf:fc:
54:7c:30:ea:2a:22:73:05:21:11:5d:c6:1e:fe:dc:
d8:38:65:7e:5e:56:3e:42:18:fc:f2:46:01:55:94:
4d:ae:c3:c7:cc:4a:ed:fe:12:52:3d:19:91:91:08:
20:7d:7c:9e:6c:b5:7d:c2:21:27:af:03:a0:9f:32:
02:b2:7d:de:22:4e:8c:6b:17:ea:56:9d:55:cd:0f:
9b:71:43:1a:34:2b:a6:83:96:3c:c3:6e:c5:b3:56:
fb:49:1a:a0:85:20:49:3c:9c:e6:e5:b7:96:5f:ce:
d1:91:e2:e8:23:d7:46:3c:c5:0e:bd:82:cd:45:25:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7E:B5:99:C1:F9:94:41:7E:B5:CD:EB:A0:0D:F7:7B:59:5E:F6:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/HYSP/6
RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/6/597EB599C1F994417EB5CDEBA00DF77B595EF6B7.mft
RPKI Notify - URI:https://rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a80::/48
2001:67c:a84::/48
2001:67c:a88::/48
2001:67c:a8c::/48
2001:67c:a90::/48
2001:67c:a94::/48
2001:67c:a98::/48
2001:67c:a9c::/48
2001:67c:aa0::/48
2a12:dd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47449
50058
202736
Signature Algorithm: sha256WithRSAEncryption
82:04:77:1c:dd:9a:b4:e4:08:05:be:44:96:78:bc:a7:f9:86:
38:8c:f2:b5:b6:86:0e:31:8a:c2:02:5a:89:48:3e:c4:f3:25:
83:41:49:57:46:73:a3:ab:dd:24:01:8a:bc:c5:70:3b:08:de:
b2:c0:bf:a6:e8:82:41:26:cc:81:4a:b9:12:ac:c6:d0:4e:2b:
f6:87:e6:a3:8d:ad:c8:75:f7:d6:63:d5:f4:6a:f5:78:4e:4e:
0a:af:e8:1a:da:b9:df:cb:92:85:1a:c5:d6:a5:38:b5:e4:f8:
55:34:73:ab:32:55:cc:f6:0b:fa:de:6e:a4:83:22:c2:20:70:
5e:da:44:68:d9:6a:bc:34:01:7c:e8:88:19:54:2d:60:fc:90:
a8:ce:84:a8:83:d3:cf:d9:ca:71:6b:bb:d7:3a:cf:a3:be:5e:
1a:64:fc:c4:05:72:bb:90:64:f1:b6:c9:b6:14:07:21:29:aa:
6e:70:f0:56:33:9b:33:50:71:75:c9:9e:00:95:35:dd:78:a7:
aa:fa:a0:18:10:e4:a3:f9:f7:5e:86:99:9d:1a:36:4d:b3:5e:
ed:73:79:1c:e4:e3:07:fe:a8:4f:fa:e4:a3:8b:34:1b:ba:8e:
34:5d:e8:02:10:cc:d6:d9:4f:84:cb:55:0b:f4:25:2e:67:eb:
41:5b:79:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:12 2024 by rpki-client on console-ams.rpki-client.org