Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X_KDEQZhpZ2_Il0DOArMCDhHTlY.cer
File: X_KDEQZhpZ2_Il0DOArMCDhHTlY.cer (raw, json)
Hash identifier: uOBKxANHeSVxTMWVHz3aiuBupTdzRCnDFDL8yGnCZz8=
Subject key identifier: 5F:F2:83:11:06:61:A5:9D:BF:22:5D:03:38:0A:CC:08:38:47:4E:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50123BB9BCB35532EC9FD90B791B361
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/X_KDEQZhpZ2_Il0DOArMCDhHTlY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42252
IP: 77.72.56.0/21
IP: 91.194.214.0/23
IP: 91.194.240.0/23
IP: 2a00:1778::/32
Validation: Failed, certificate revoked on Thu 25 Apr 2024 14:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:23:bb:9b:cb:35:53:2e:c9:fd:90:b7:91:b3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ff283110661a59dbf225d03380acc0838474e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:3b:25:80:bc:d4:c5:39:14:fd:74:8d:34:
ff:87:fb:45:55:fe:19:2a:35:97:05:4a:db:ff:d6:
86:6a:d1:e6:97:a1:22:81:18:ce:ca:3b:bd:e3:1c:
42:23:56:90:1d:a1:ce:29:5b:2e:65:47:df:83:2a:
34:7f:27:b0:0c:34:b7:c0:99:52:67:84:41:08:3a:
92:c8:a5:c6:06:f8:87:20:2b:c3:c4:c6:61:78:2e:
06:62:39:b0:59:82:d9:13:4d:92:46:96:4b:6f:a8:
7c:c4:08:12:35:3d:7c:0b:82:4f:69:86:75:74:6e:
4c:42:bf:b9:63:9d:ef:f1:34:9d:cd:88:b2:7e:ab:
6f:8d:f5:0c:18:b2:ba:5d:79:63:0b:7b:04:7c:80:
0e:ae:91:15:e2:c1:10:ca:48:92:96:68:2b:2b:0f:
08:d4:85:dd:71:fb:f5:65:4a:08:44:c2:9c:0b:86:
16:00:ca:1f:9d:97:c4:0c:33:37:27:f1:29:1d:c1:
18:4b:9f:53:dd:4e:e9:cb:d4:75:f6:29:8a:f9:30:
d4:23:16:f2:b3:d7:77:43:2a:a5:fb:57:b2:39:b9:
64:ea:e4:32:5b:e7:aa:2e:ea:93:ac:08:1b:46:b8:
eb:2f:e0:e3:2d:4c:27:db:a3:b3:17:49:fd:ca:59:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F2:83:11:06:61:A5:9D:BF:22:5D:03:38:0A:CC:08:38:47:4E:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/X_KDEQZhpZ2_Il0DOArMCDhHTlY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.56.0/21
91.194.214.0/23
91.194.240.0/23
IPv6:
2a00:1778::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42252
Signature Algorithm: sha256WithRSAEncryption
5b:3b:4c:94:a8:5c:8a:3c:c4:69:a8:f6:20:48:e3:17:c7:e4:
84:5a:18:5d:e2:dd:9a:f4:d5:85:86:d4:0d:a6:e7:4d:6b:32:
01:09:04:f8:ca:f1:2d:27:b6:b1:b0:64:ef:1d:34:a0:8b:14:
af:69:e0:47:2c:29:9d:dc:3c:16:a9:f0:1b:b4:80:29:4c:94:
7e:bf:f1:e0:4b:a8:dc:6b:03:e6:66:25:fa:16:3f:17:e4:39:
b0:91:5a:6e:cd:7f:dd:e2:8f:d2:21:8e:fe:32:01:35:38:51:
30:b5:ae:c6:39:48:78:d6:3f:73:28:6c:73:a3:fe:4c:d8:01:
2b:aa:4f:87:fb:bb:b5:80:5d:ef:68:02:71:15:52:cf:5a:c1:
af:5f:e5:4a:6c:7d:36:60:7b:70:9a:cc:e5:41:94:70:e3:6a:
35:25:9a:cd:0b:cb:4d:fb:eb:c1:dd:79:4e:4c:31:02:b6:a9:
2a:da:1c:3d:eb:f7:80:85:9c:26:3f:36:11:b1:bd:87:22:1f:
89:d6:b4:2d:5c:cd:5e:f8:38:71:98:1c:d4:9d:24:3b:d0:a3:
e5:94:57:91:90:a5:43:3a:f8:ed:64:05:8a:ec:bc:48:a5:d4:
d3:25:3e:56:f5:02:8d:05:61:46:6e:3c:87:d6:32:c4:b0:e0:
31:d2:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:34 2024 by rpki-client on console-ams.rpki-client.org