Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_4Nu2M0puBuEIaHauSCQXi7XYYQ.cer
File: _4Nu2M0puBuEIaHauSCQXi7XYYQ.cer (raw, json)
Hash identifier: e/0kl1SsvSHX9mOKq2dvK4NBaEcWKez4g2/sbvE76nQ=
Subject key identifier: FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CFDD87FEE87E03429BE29902514FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/_4Nu2M0puBuEIaHauSCQXi7XYYQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203690
AS: 204995
AS: 206502
IP: 185.184.8.0/22
IP: 2a0b:2180::/32
Validation: Failed, certificate revoked on Mon 18 Mar 2024 08:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fd:d8:7f:ee:87:e0:34:29:be:29:90:25:14:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff836ed8cd29b81b8421a1dab920905e2ed76184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:d6:bf:04:01:e0:73:99:33:54:f8:27:de:
18:0a:b1:b3:87:74:cd:d7:79:b1:d8:ad:b9:c3:b4:
cc:20:41:6e:9e:47:cd:e4:8f:a6:86:e7:52:d2:a2:
e4:1c:ce:86:95:76:a2:fa:0d:e5:d3:20:64:93:ef:
59:56:aa:03:fd:66:ec:4c:3c:a9:3b:1d:0b:22:00:
1a:fc:ce:52:e9:9a:39:21:6e:a6:c8:29:cc:48:a9:
ba:72:80:b6:34:6e:38:2e:2c:b8:90:d6:00:72:95:
07:08:76:b8:28:f8:16:e1:9d:11:a6:b2:85:b8:da:
dd:cf:18:87:14:17:2f:e7:e0:47:67:0c:07:11:dd:
ce:fb:b4:ea:e4:7e:6a:a9:a1:37:b5:b6:79:f4:eb:
08:57:34:be:97:16:10:2f:d7:9f:15:c8:ff:82:57:
9c:40:93:e4:72:2a:da:a6:1c:97:58:2c:7d:6b:b5:
1d:12:ec:58:b2:84:f3:19:2c:5a:4e:48:dd:80:5d:
e2:66:b9:ac:46:5e:2e:29:50:3f:4f:20:5b:c0:83:
be:6c:c7:53:0f:6b:1b:ab:fe:57:b0:80:7e:a9:17:
41:d3:fd:40:b0:91:16:85:2f:fd:9e:38:79:2b:f1:
77:37:7a:7c:52:36:a1:fb:c3:83:51:90:a8:02:c3:
a9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/_4Nu2M0puBuEIaHauSCQXi7XYYQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.8.0/22
IPv6:
2a0b:2180::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203690
204995
206502
Signature Algorithm: sha256WithRSAEncryption
4c:fe:52:b1:18:0b:01:bd:c5:99:80:04:02:51:66:d2:f7:0c:
40:d0:e5:fe:c0:36:a6:63:f1:20:66:f3:e3:5c:33:b3:ec:7f:
ed:6b:b2:1f:ff:37:73:2f:83:cb:22:63:6a:cf:a9:52:c4:1a:
8c:e5:f6:95:e2:1f:5e:31:5d:66:89:71:04:00:3e:cf:22:46:
93:5c:72:c2:1f:be:2c:b5:bb:c5:95:c3:f4:aa:5f:08:ce:b4:
21:a5:bc:b6:30:29:e4:6b:9e:2c:e8:36:e4:a5:6a:e1:96:43:
ba:9b:c5:1c:37:5f:d3:46:d6:f7:c3:4c:eb:0f:26:77:94:8b:
85:f9:5d:c0:c7:0a:f8:d8:fc:0c:5e:81:46:ff:a4:fe:5f:ae:
80:c0:f3:56:00:0c:cb:9f:c3:ed:cc:ab:af:20:d5:ab:f2:80:
f7:46:02:fd:cd:46:51:92:b7:8b:d2:37:df:22:b5:c7:01:b3:
0f:87:17:b2:c1:51:38:31:9d:d9:f5:c2:2e:08:f7:3c:2e:be:
45:8f:55:75:e4:f6:f3:6e:ac:1b:77:64:c4:ef:ab:05:75:bb:
4c:f5:a8:2b:8f:1c:e0:e9:89:fc:1e:84:c8:f3:00:d0:6b:2c:
a3:4f:02:2d:ee:08:b9:6b:30:d3:96:c0:5a:47:32:90:6a:f9:
99:3b:b2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:31 2024 by rpki-client on console-fra.rpki-client.org