Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_9hgnOeow8EokI_EXz5tm2cmDk4.cer
File: _9hgnOeow8EokI_EXz5tm2cmDk4.cer (raw, json)
Hash identifier: PmVRJvCkFpJ2LuHngpwmuvM/kj30r3kgOl7e9cmjGao=
Subject key identifier: FF:D8:60:9C:E7:A8:C3:C1:28:90:8F:C4:5F:3E:6D:9B:67:26:0E:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD09D850D126ECC8C92087F1BCDF342
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/_9hgnOeow8EokI_EXz5tm2cmDk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:31:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 8310
AS: 56844
IP: 185.18.208.0/22
IP: 185.132.116.0/22
IP: 185.213.160.0/22
IP: 195.200.160.0/19
IP: 2a02:d640::/29
IP: 2a06:e1c0::/29
Validation: Failed, certificate revoked on Thu 30 Nov 2023 15:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:9d:85:0d:12:6e:cc:8c:92:08:7f:1b:cd:f3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:31:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffd8609ce7a8c3c128908fc45f3e6d9b67260e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:ba:e1:9c:40:66:70:e7:d7:0e:22:43:09:
e1:b9:5f:11:0a:df:50:ae:14:be:d9:5e:0e:84:bd:
dc:e0:30:df:3f:ff:e6:98:34:76:9b:9e:80:69:ee:
f8:dc:dd:01:a5:dd:e0:b7:de:e6:fe:13:bb:9d:45:
a6:c0:55:63:8e:5e:00:c4:58:b8:64:31:ff:4f:61:
ba:19:c6:35:1a:27:f7:97:bb:56:0d:1c:d6:26:05:
be:d8:25:89:83:7b:43:73:18:bc:2b:e6:4f:ae:67:
95:79:65:11:64:87:e2:11:a5:f2:77:65:50:b8:8c:
23:fc:95:15:ec:db:0b:ed:3c:86:c2:b5:fd:94:b8:
68:a1:1a:15:5a:f1:d1:da:a9:0e:bc:f3:53:a9:bd:
be:0b:47:aa:b5:0a:bc:61:23:dc:b3:5c:f7:38:05:
17:79:69:92:31:ce:16:74:f7:c9:8d:b0:26:ca:62:
3a:7d:69:65:56:e3:0c:2a:14:9f:c2:9a:99:47:be:
06:4f:9e:6c:e1:6d:9b:98:a0:27:df:5b:6d:f4:10:
47:45:36:fa:0a:a6:a6:84:5b:48:ae:5f:b0:56:15:
45:b5:ae:c0:e0:23:8c:d7:39:a5:81:b6:57:10:97:
e6:c6:46:ad:2a:8c:c3:c2:00:b0:fd:02:2d:ad:b6:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D8:60:9C:E7:A8:C3:C1:28:90:8F:C4:5F:3E:6D:9B:67:26:0E:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/_9hgnOeow8EokI_EXz5tm2cmDk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.208.0/22
185.132.116.0/22
185.213.160.0/22
195.200.160.0/19
IPv6:
2a02:d640::/29
2a06:e1c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8310
56844
Signature Algorithm: sha256WithRSAEncryption
0c:e7:60:6d:6d:96:81:e3:33:a5:e9:4a:0d:d5:7a:14:77:14:
08:c1:14:25:76:74:56:da:0e:cf:30:fe:1d:5c:29:a1:c3:28:
33:b8:37:e9:21:18:91:f2:e5:09:b0:f6:ca:21:e4:3b:86:24:
e1:e4:b4:25:a4:9c:e4:aa:75:f9:58:82:e7:ca:8f:b2:c7:1c:
2a:cc:d7:71:53:d2:71:5f:ab:21:68:cc:63:da:84:4d:4f:23:
b5:49:de:f2:b2:1a:19:d0:43:71:dc:14:11:30:a9:7f:c5:63:
da:b7:ca:d9:4e:20:a4:8b:7c:d4:21:c4:4c:2e:8d:c8:02:aa:
c4:b4:03:3f:a4:f9:30:eb:09:cb:ec:37:12:51:24:e8:62:ad:
0c:9a:10:be:a2:5a:44:3a:5b:4d:85:83:59:16:0f:e7:81:41:
f0:2d:59:45:35:0c:4d:3b:52:9b:84:f0:f8:60:2e:e4:a8:49:
99:73:6f:41:55:e1:53:c0:04:08:3c:f5:e0:fc:ee:20:64:a2:
88:79:ab:4f:86:c9:aa:7b:0d:a2:14:3d:e0:0e:8b:2e:91:1b:
b1:bd:b4:bc:52:40:b1:c1:23:fc:4f:64:0b:45:a3:2a:ce:06:
08:f8:31:5a:13:8f:b1:09:38:80:84:b2:fb:81:d0:5f:3d:67:
ff:3d:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:26 2024 by rpki-client on console-ams.rpki-client.org