Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XAn7aQXUjq4r5e3zy_vKa1_ul1I.cer
File: XAn7aQXUjq4r5e3zy_vKa1_ul1I.cer (raw, json)
Hash identifier: n3iA4y39EWy47M09BiOxSc6LEZ46wIdqWAhIw9Hi5ss=
Subject key identifier: 5C:09:FB:69:05:D4:8E:AE:2B:E5:ED:F3:CB:FB:CA:6B:5F:EE:97:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D5F0ADD512FC38261DBBBA55ADD7A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/XAn7aQXUjq4r5e3zy_vKa1_ul1I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 50346
IP: 193.104.202.0/24
Validation: Failed, certificate revoked on Wed 01 Feb 2023 14:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d5:f0:ad:d5:12:fc:38:26:1d:bb:ba:55:ad:d7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c09fb6905d48eae2be5edf3cbfbca6b5fee9752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:c3:f7:36:91:c1:ec:f4:bd:b8:cd:19:82:
80:0f:45:cc:de:27:7e:60:73:6f:5f:03:61:52:c1:
0b:3c:98:97:29:61:66:76:b9:4a:3e:64:63:10:9b:
bd:2a:23:d7:46:54:97:bd:db:d4:0b:1d:44:42:ee:
0d:6e:33:70:06:ad:bd:59:6e:00:62:10:9e:17:5d:
1f:16:ef:e4:8a:0f:0a:4d:06:ff:e4:f1:2e:f2:23:
10:20:6e:5e:ef:7e:6b:16:4f:4d:eb:28:84:12:95:
a8:35:d7:8c:17:db:8d:3e:51:65:97:c7:21:83:cc:
b7:35:3a:09:be:a8:c1:be:24:27:76:76:7f:70:e5:
4c:89:27:d9:61:84:b2:b8:d2:cb:25:38:02:23:e2:
21:e9:67:7c:1a:74:30:f5:97:90:e6:b1:c7:e1:fb:
72:50:ba:4b:f7:fa:ec:e3:d6:ff:0e:04:b7:02:03:
e4:e7:89:13:b4:8c:0f:4c:1e:d7:63:d5:82:fa:27:
99:e6:0e:4b:e6:6f:8d:3d:7a:cf:f1:40:50:47:6c:
7b:15:ab:ee:a5:8e:1b:3c:7c:41:00:5e:73:3b:99:
e1:3e:51:72:fb:a8:3b:50:17:f1:96:3b:d6:0e:a9:
b6:cc:f8:8c:e4:96:5e:24:d2:22:6a:44:95:be:57:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:FB:69:05:D4:8E:AE:2B:E5:ED:F3:CB:FB:CA:6B:5F:EE:97:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/XAn7aQXUjq4r5e3zy_vKa1_ul1I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.202.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50346
Signature Algorithm: sha256WithRSAEncryption
9f:92:39:4b:ac:bb:92:e3:d4:0c:1d:e0:83:ce:79:02:81:7b:
81:4d:56:05:c4:12:e7:a2:b9:20:6e:94:fd:c6:1d:e3:5b:26:
9c:1c:26:2c:c6:2b:f5:42:00:b4:22:9d:ca:fc:df:5b:5f:dd:
33:5d:7c:4d:14:0b:cf:b7:92:50:2f:d5:ed:ea:3c:2e:ef:20:
dc:e1:c0:7d:af:d6:ff:a7:96:75:4f:07:f9:6d:dc:4c:e9:06:
42:c1:66:62:77:a7:0d:7f:2b:66:9b:52:08:69:f8:76:28:b0:
11:31:46:2a:fe:6d:dc:c3:26:74:31:92:aa:a7:47:9a:a4:2b:
74:48:71:0e:40:21:53:8e:d1:14:a8:ef:d9:66:35:86:5f:b0:
aa:14:a7:0b:ff:0d:cb:0d:0b:4f:47:11:46:47:91:b1:84:62:
47:34:ac:0c:3c:29:f0:2a:3b:58:2d:73:43:b7:cd:80:c5:9d:
f7:69:8f:01:3c:3d:84:eb:8a:95:02:ce:32:1f:0e:8d:83:2e:
8e:5f:b8:f0:fe:d9:25:ca:6c:61:ef:42:4d:e6:f2:2e:50:de:
fb:91:9b:33:57:0c:58:dc:48:31:83:55:89:d1:f7:21:36:75:
b2:1f:eb:d5:58:30:4b:c1:98:d3:f5:7d:d8:ab:5f:a8:4d:b7:
05:be:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:25 2024 by rpki-client on console-ams.rpki-client.org