Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAoy6AP7K_T0exeHeoElmaP78K0.cer
File: YAoy6AP7K_T0exeHeoElmaP78K0.cer (raw, json)
Hash identifier: NhH6UobiyRGIlmQ9TMMlKw0EwNQg3GwgGd3wQlPMB08=
Subject key identifier: 60:0A:32:E8:03:FB:2B:F4:F4:7B:17:87:7A:81:25:99:A3:FB:F0:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571692A455253F7453FA4FD10A69B4725
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/YAoy6AP7K_T0exeHeoElmaP78K0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 41776
IP: 185.194.13.0/24
IP: 2a0f:f140::/29
Validation: Failed, certificate revoked on Fri 01 Sep 2023 09:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:2a:45:52:53:f7:45:3f:a4:fd:10:a6:9b:47:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=600a32e803fb2bf4f47b17877a812599a3fbf0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:04:66:f9:d2:1b:c2:c4:d7:d6:2c:35:3f:
b3:36:b0:ae:5e:ec:60:1b:77:e0:37:26:b5:4a:a6:
de:34:13:98:6d:e4:e2:bf:eb:e1:b5:68:31:e4:37:
72:e5:87:2c:4c:60:77:01:c3:1e:4f:86:b0:7b:48:
4b:d4:02:ab:b1:26:a4:38:60:c7:49:92:3f:be:47:
0d:d8:a5:9e:f7:df:d4:a9:20:e1:46:57:d0:a0:2a:
40:12:41:6b:4f:ec:e7:cb:60:a6:09:c7:33:58:9c:
98:b6:af:19:1d:4e:b1:a1:b6:f9:77:fb:bf:79:9d:
e9:fb:a3:f9:11:7f:0e:91:2c:eb:ec:6b:27:95:4c:
ce:f1:9b:85:4a:8f:6d:ef:20:63:6a:dc:ef:d1:14:
9b:32:08:33:93:d9:27:98:78:72:82:1f:8c:24:20:
69:dd:3d:ba:40:70:e2:94:79:69:54:65:6b:9c:35:
f9:86:37:9a:95:31:b6:16:87:f0:84:c5:e5:4f:30:
29:80:e7:0c:ff:68:b8:16:08:6b:f9:d4:39:0c:e2:
38:7b:0d:93:9b:76:a4:18:7d:e6:d6:cb:8f:3b:13:
1a:92:9d:67:9b:b0:01:bf:18:1a:4c:eb:8c:0c:d3:
d8:6b:81:d2:77:81:d1:15:aa:5a:b1:a7:63:d0:b1:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0A:32:E8:03:FB:2B:F4:F4:7B:17:87:7A:81:25:99:A3:FB:F0:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/YAoy6AP7K_T0exeHeoElmaP78K0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.13.0/24
IPv6:
2a0f:f140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41776
Signature Algorithm: sha256WithRSAEncryption
7b:7c:47:88:9c:51:c5:45:c1:02:5a:94:0a:dd:0c:71:84:6b:
df:97:96:37:00:21:3d:f0:01:45:8a:75:5c:13:af:3c:1c:9f:
37:3c:a4:22:f5:88:b9:ce:e4:38:2f:98:18:b8:0a:c5:6a:65:
82:b6:f7:fb:b9:28:01:49:be:7c:19:28:db:43:7f:6a:d8:ec:
a7:ea:1e:31:c2:9f:8c:e6:de:77:03:bf:4b:45:74:eb:88:3c:
d9:b2:ea:45:4f:f6:6c:17:1d:07:c3:f9:f6:8c:b6:44:49:2a:
ef:8a:03:91:5a:9b:ba:62:79:25:3d:f6:bc:1e:3a:e3:b5:ac:
82:9b:6b:ec:9b:4b:6b:15:cb:60:02:8d:ca:1e:47:94:07:4e:
c7:d6:b5:fa:d7:a3:8b:01:21:1a:04:d5:77:4e:cf:ab:34:f0:
56:2f:bb:1b:24:85:1b:cd:0a:14:e5:3a:b3:25:c0:46:a7:eb:
77:55:78:ea:db:67:ed:79:4d:4c:0d:2f:dd:32:aa:9d:c9:c6:
3f:c5:67:77:c7:00:4d:77:46:f7:f3:02:af:43:17:50:35:bc:
f1:02:7c:f1:03:ad:4d:95:a9:a5:e9:ee:47:6a:b7:af:4a:61:
ee:3a:3a:37:9c:bc:b1:38:75:39:40:8c:a7:8a:a9:6d:6d:ca:
b7:bf:f6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:49 2024 by rpki-client on console-ams.rpki-client.org