Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_wHxqk246j5J4eOjXIvDalJ1BwA.cer
File: _wHxqk246j5J4eOjXIvDalJ1BwA.cer (raw, json)
Hash identifier: o6tWqS9TIOvpPF+tOdwC6auW80EtlOyNNNOaTV1CcaY=
Subject key identifier: FF:01:F1:AA:4D:B8:EA:3E:49:E1:E3:A3:5C:8B:C3:6A:52:75:07:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFAD0098CAFAEFEAC95328FED65A70B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/_wHxqk246j5J4eOjXIvDalJ1BwA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 208683
IP: 45.89.132.0/22
IP: 2a0b:cf00::/32
Validation: Failed, certificate revoked on Mon 20 Feb 2023 12:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:d0:09:8c:af:ae:fe:ac:95:32:8f:ed:65:a7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff01f1aa4db8ea3e49e1e3a35c8bc36a52750700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:b4:54:cf:59:84:60:0e:2c:94:b9:87:4f:
a0:5c:fd:59:90:89:82:bf:42:7e:f1:00:13:5d:55:
79:86:8f:04:48:a7:32:d3:35:19:a6:e8:c3:22:a2:
82:80:67:3e:e2:b2:7c:c6:f9:d5:19:51:1e:ce:bd:
51:af:af:2a:b6:40:7c:12:57:45:aa:c9:59:07:f1:
11:a1:ef:45:d6:5d:37:f3:c3:6a:c5:01:f1:db:c0:
b5:d6:c8:c7:14:72:30:68:72:8e:aa:21:0a:d1:67:
7e:60:a5:e2:87:49:0e:52:bc:49:9c:5f:1c:e7:06:
61:b4:5a:b2:b2:59:7a:3f:cf:99:fd:96:42:ea:52:
95:ec:e7:64:ca:aa:94:98:ac:96:94:b4:1c:bb:eb:
dd:69:33:d5:35:ae:b1:b3:da:76:a8:bd:8e:3c:94:
c6:11:ed:31:3e:a8:7e:08:4a:8e:71:ca:ff:ac:59:
00:71:76:88:e8:9e:a3:ae:10:f6:eb:46:3a:51:f1:
a2:6a:ac:f0:f9:92:4b:cb:b7:fe:aa:35:39:4c:a7:
d6:6d:b5:0c:a0:5a:6f:98:14:82:df:c5:2d:2e:bb:
9c:c3:e6:d6:21:2e:cd:8f:1c:2c:a2:68:3f:a7:c5:
34:21:20:eb:b5:82:2d:4f:c3:47:5e:54:e7:07:04:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:01:F1:AA:4D:B8:EA:3E:49:E1:E3:A3:5C:8B:C3:6A:52:75:07:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/_wHxqk246j5J4eOjXIvDalJ1BwA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.132.0/22
IPv6:
2a0b:cf00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208683
Signature Algorithm: sha256WithRSAEncryption
9a:4a:38:cb:1d:4b:31:2d:57:6c:ba:cb:22:e4:57:bc:34:cb:
87:e3:b5:2e:f4:dc:79:0c:bd:ff:89:d0:31:01:55:f7:a7:a1:
b1:03:9a:52:1e:3f:36:94:9e:a9:53:28:9b:9f:a9:5b:44:0e:
a3:1c:e3:7a:99:19:4f:cd:34:ec:66:35:53:12:ed:35:88:b5:
e1:ea:44:57:a6:98:37:05:9b:a1:d3:45:87:eb:93:b1:81:61:
d1:b4:c3:4f:1f:e6:1b:7d:63:31:df:0e:59:1a:6f:50:46:0d:
af:d8:3d:7c:a0:0b:28:49:97:7b:e6:94:e9:cd:ef:65:64:7f:
cb:1f:0d:2d:4f:f4:d0:73:24:63:b0:03:21:21:58:71:fb:d0:
db:0e:06:d7:79:a8:4e:bd:76:f9:b9:16:0d:45:02:dd:f7:d9:
44:58:ea:3e:f7:e4:d8:90:e3:97:59:d5:cf:1a:91:0b:d6:e8:
68:38:1f:b9:e4:4a:9d:2e:d3:a4:89:88:35:93:47:79:76:a9:
8d:ae:fe:9b:e2:78:37:e5:0f:21:1b:57:b9:23:e8:4d:1b:f8:
df:2b:f5:28:f0:ec:53:99:85:f3:24:c3:d0:6e:a7:7f:f5:45:
b8:cd:51:72:ba:db:4e:4c:e4:6a:62:ae:77:37:2d:ff:29:95:
80:0e:2a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:41 2024 by rpki-client on console-ams.rpki-client.org