Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/axL_rNrwjdqYTH4LPbxs3iGWF28.cer
File: axL_rNrwjdqYTH4LPbxs3iGWF28.cer (raw, json)
Hash identifier: vwmTjTwilngFLsnIRhy2TOpf5uWodjUzb8s3pNBqZoY=
Subject key identifier: 6B:12:FF:AC:DA:F0:8D:DA:98:4C:7E:0B:3D:BC:6C:DE:21:96:17:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAFD09B9E22745DDE38CB3B75020D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/5/6B12FFACDAF08DDA984C7E0B3DBC6CDE2196176F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/5
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211032
IP: 185.222.42.0/24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 13:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fd:09:b9:e2:27:45:dd:e3:8c:b3:b7:50:20:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b12ffacdaf08dda984c7e0b3dbc6cde2196176f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:b0:6d:54:ce:c9:12:d5:c5:a0:c1:fc:e4:
f1:22:b6:8d:a2:6d:25:8b:32:5b:14:a9:d6:41:e9:
80:20:ec:ce:f4:34:08:f6:8d:66:e8:07:c3:c1:89:
4b:37:8a:a1:15:8b:60:ed:a6:ef:a6:5a:be:97:ac:
26:0b:04:8e:11:50:b8:a5:08:52:b3:8a:25:ae:34:
52:b0:47:15:0f:1a:ab:cf:57:6c:3f:98:a3:08:6c:
eb:25:88:cb:16:18:73:87:0b:81:2b:94:50:08:5b:
1d:3f:48:00:c6:c9:3e:bf:b5:3f:bc:99:c9:73:ed:
f5:2b:54:4e:e8:1d:e8:a1:e5:d7:83:e4:a0:5f:af:
1e:fc:b3:7d:79:37:89:69:bc:30:6f:dc:44:e0:0e:
f8:27:ad:da:45:dd:b5:14:ef:8d:d6:99:d2:a9:f9:
94:da:c7:5f:48:1e:72:55:ea:ad:9e:ae:5a:ef:94:
41:fc:1e:da:25:d5:e2:e0:c2:de:df:ec:32:0d:85:
f0:89:66:96:a8:1f:d7:c7:49:7b:fa:68:a0:c7:91:
02:6a:8d:b2:f9:1a:53:b0:2b:0d:a2:1e:35:34:c6:
e5:fd:7d:5e:a3:be:54:36:73:ae:bb:9b:44:ba:bd:
be:5e:b8:1f:72:8e:5e:45:db:95:ad:09:57:0a:2f:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:12:FF:AC:DA:F0:8D:DA:98:4C:7E:0B:3D:BC:6C:DE:21:96:17:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/5
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/5/6B12FFACDAF08DDA984C7E0B3DBC6CDE2196176F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.42.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211032
Signature Algorithm: sha256WithRSAEncryption
37:3f:c0:c9:57:67:47:a9:2b:72:e5:25:46:54:a5:25:96:d9:
d1:9b:38:04:32:93:76:d6:01:aa:87:be:01:4a:96:61:41:c7:
5d:61:2c:b1:74:fa:da:3d:a7:24:05:1a:de:2d:03:f6:56:0c:
0b:8d:96:40:7b:bf:cd:d4:6f:91:4d:43:0c:92:c5:9d:3f:bd:
2b:b2:de:64:b3:26:f4:a5:7b:9a:fc:0d:c4:06:f9:17:44:68:
1c:6f:10:c0:a2:3f:24:e5:ca:21:2c:7e:73:89:d0:90:2a:c5:
5f:a9:1b:87:b2:db:e2:9a:da:b1:f4:e4:b0:fa:72:66:4d:f5:
96:ad:29:d9:ed:29:5b:ef:ff:eb:8e:65:09:fa:3c:40:de:f9:
5a:a8:c5:2b:d9:ad:4f:2d:09:37:ab:c1:37:d2:3b:08:f6:3a:
2a:18:a3:90:ce:91:27:01:53:be:88:70:d5:87:33:27:b8:34:
92:f2:b3:a7:cd:06:e0:97:28:88:d2:7d:40:1d:cc:1d:ca:ef:
f6:31:e7:49:87:aa:1f:77:df:69:d3:65:ff:dc:e9:25:19:e2:
b8:c5:68:99:40:d0:23:dd:12:3b:52:fb:1e:b6:72:2b:28:33:
a7:cc:97:70:90:1c:d6:0e:2a:f4:0a:de:03:8e:0c:63:01:9f:
6f:b1:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:59 2024 by rpki-client on console-fra.rpki-client.org