Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4a3KXGkFznN3SPILmPhG7bKnO8.cer
File: a4a3KXGkFznN3SPILmPhG7bKnO8.cer (raw, json)
Hash identifier: JtDFM+EpOVVYMdqLhBiYuuUiZjPCchH7+334qS9pYiE=
Subject key identifier: 6B:86:B7:29:71:A4:17:39:CD:DD:23:C8:2E:63:E1:1B:B6:CA:9C:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D8981FBE13FAFD98FFA99978009C0FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/a4a3KXGkFznN3SPILmPhG7bKnO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 207358
IP: 2001:678:c50::/48
Validation: Failed, certificate revoked on Tue 11 Apr 2023 07:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:81:fb:e1:3f:af:d9:8f:fa:99:97:80:09:c0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b86b72971a41739cddd23c82e63e11bb6ca9cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:da:bf:81:61:5e:8f:c0:94:5f:00:1e:53:
cb:4e:c1:59:3b:27:53:b9:3f:8d:4d:43:6f:4f:7c:
68:e5:99:9b:80:14:89:42:07:90:b5:21:37:4f:63:
26:51:06:aa:89:ec:23:f7:73:7c:9f:fe:10:82:ed:
a0:23:40:f1:05:48:42:e8:1d:c4:af:c4:9d:7b:90:
df:77:2f:24:22:32:e1:9a:07:f7:81:5f:7f:e6:9c:
0f:db:bb:3f:1a:a6:6b:07:7a:c3:5b:56:09:aa:72:
25:3c:e5:2d:58:b6:f2:2b:ae:8c:76:8b:29:d5:74:
6f:e2:d8:af:8f:ff:54:f6:fd:fe:79:71:69:8f:9a:
7f:e2:5a:69:0f:a0:73:5a:b1:92:f1:09:5c:7e:ab:
56:45:6b:16:61:cd:ab:ae:0f:b5:bd:88:19:27:da:
a6:b2:c6:60:13:d5:ac:74:0d:1c:92:42:4f:e8:e2:
17:4d:f5:8c:31:ef:f8:b2:2b:6b:cf:b1:f3:4d:dc:
d3:f1:b0:67:8e:f4:09:89:e6:b7:ce:38:cb:41:13:
17:27:f8:91:92:20:c4:ba:2a:06:a9:1c:56:51:58:
ce:ea:68:64:3b:49:b3:1e:4c:df:a0:1e:83:2e:52:
b8:3e:be:f9:bf:55:d1:e3:63:25:26:95:13:b9:a2:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:86:B7:29:71:A4:17:39:CD:DD:23:C8:2E:63:E1:1B:B6:CA:9C:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/a4a3KXGkFznN3SPILmPhG7bKnO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c50::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207358
Signature Algorithm: sha256WithRSAEncryption
1e:2f:75:11:95:7a:cf:35:e1:47:ca:12:68:ec:b0:db:78:25:
e4:59:c3:5f:e4:d7:e4:79:98:0b:08:2f:4a:88:70:05:a5:bb:
2d:dd:26:ea:d2:d1:22:26:f1:ef:86:1e:63:b1:29:e4:67:5f:
6c:4b:36:6c:e8:d3:b4:2f:22:c5:fc:22:1a:ec:5f:85:e2:fa:
48:f1:f4:bd:8a:3b:e0:40:73:e0:43:15:b7:5d:08:db:e6:61:
aa:e0:47:a2:ef:04:b4:2f:5b:ea:b9:42:e5:93:b1:b0:9e:fc:
7a:2e:49:94:13:52:3c:78:55:e1:db:62:e1:c2:59:b9:77:98:
66:a8:95:47:76:cb:8f:06:98:4b:35:34:14:c5:27:74:e5:d2:
d8:8b:d1:fd:5a:14:ba:f9:c7:2f:e0:ec:43:bc:ab:8e:f0:b1:
cf:42:6d:8e:f9:4d:28:9f:a4:bf:cc:17:4a:cc:ff:59:c1:65:
8f:7e:ef:49:4a:3b:ef:65:c6:69:82:d7:0a:59:f3:51:41:47:
af:cd:37:41:81:dc:16:c0:e4:55:c7:af:fa:fc:67:9e:cc:7e:
7c:15:62:b6:18:e3:96:bc:10:bb:fa:02:38:d7:63:52:70:5d:
7e:20:fe:d7:aa:e9:a3:81:07:f4:8d:e7:01:4e:54:d7:e5:57:
61:24:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:33 2024 by rpki-client on console-ams.rpki-client.org