Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cDQ9_wCyroWh3kzbZV1ZHK1w9cY.cer
File: cDQ9_wCyroWh3kzbZV1ZHK1w9cY.cer (raw, json)
Hash identifier: kgPUTPGUUjb8mX9Nqu6J7A3NXAoLe702yY3JXRq2FAg=
Subject key identifier: 70:34:3D:FF:00:B2:AE:85:A1:DE:4C:DB:65:5D:59:1C:AD:70:F5:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF4F536C49B16A64930989B45B9B6D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a9b77-b05f-4eff-b934-530b12c437b6/1/cDQ9_wCyroWh3kzbZV1ZHK1w9cY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a9b77-b05f-4eff-b934-530b12c437b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 15781
IP: 91.213.104.0/24
Validation: Failed, certificate revoked on Wed 18 Jan 2023 08:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f4:f5:36:c4:9b:16:a6:49:30:98:9b:45:b9:b6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70343dff00b2ae85a1de4cdb655d591cad70f5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:dc:9e:10:e8:76:8e:38:7c:19:12:63:2a:
61:9b:b3:e7:6f:81:89:6f:fa:d3:8c:e1:04:a3:bf:
76:3c:f5:4b:b7:7a:e9:79:be:66:a8:88:34:a1:1f:
ac:86:4d:1c:f2:c7:ae:1d:e3:5d:95:55:a9:32:e2:
70:e0:7f:80:8e:76:61:71:f0:dd:28:98:78:d5:5e:
02:93:2d:63:fc:8d:98:c8:e4:29:7a:51:5e:e0:01:
b9:0a:90:4e:aa:d3:60:64:34:54:ea:51:67:fa:38:
2b:6b:da:41:3c:46:c2:87:17:93:c8:ba:b7:a7:37:
79:da:e6:c1:04:14:0c:45:3f:5f:5f:bf:ad:ab:5b:
03:99:64:34:b4:df:d0:a4:a3:ae:02:dc:21:e7:aa:
71:8d:1c:ec:d6:1f:81:49:97:c8:fb:9a:09:81:96:
67:d3:a6:57:f3:2e:96:b2:b6:7f:78:8c:35:83:a8:
eb:9d:5b:28:6f:2c:34:8f:4b:2b:96:ef:82:98:82:
a7:fa:ba:68:f7:14:55:dc:b9:cd:41:d0:71:17:99:
2c:ea:c9:16:cb:53:bd:14:03:49:e1:5e:5c:5a:a1:
03:0d:3c:f9:bd:b6:ca:16:05:e1:b7:d9:c2:eb:d3:
1d:42:a1:20:12:bd:97:27:fd:fc:ce:2b:c5:95:b1:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:34:3D:FF:00:B2:AE:85:A1:DE:4C:DB:65:5D:59:1C:AD:70:F5:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a9b77-b05f-4eff-b934-530b12c437b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a9b77-b05f-4eff-b934-530b12c437b6/1/cDQ9_wCyroWh3kzbZV1ZHK1w9cY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.104.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15781
Signature Algorithm: sha256WithRSAEncryption
2b:62:a9:0f:f9:50:63:8f:f0:3f:a9:0e:f3:49:ec:80:90:d7:
93:44:26:ba:ac:7c:ac:44:2f:21:2e:ea:01:b1:73:00:2f:07:
c9:c0:c6:93:66:73:29:29:0e:39:10:7d:4c:52:d6:33:68:8e:
e3:d7:34:73:67:c5:89:ed:d3:0a:e6:5b:52:2a:eb:18:c7:b6:
04:a1:ef:b0:fe:3a:7a:3a:77:b4:6f:c1:b0:cb:83:5d:b7:ef:
0d:44:01:f0:06:60:92:76:cb:db:6d:4c:48:ad:c3:21:20:9c:
a0:89:25:76:bb:9f:2d:b1:52:55:f3:7d:ee:d2:43:b1:60:97:
ed:d0:37:6b:08:3e:58:24:10:81:df:43:5e:42:1f:94:66:ef:
1b:9c:6f:c7:a9:44:ce:9f:27:dc:8a:6f:97:0e:21:bc:eb:97:
53:6d:87:a7:77:e1:57:9c:55:de:2b:c2:d2:fa:29:86:31:dd:
bc:05:4d:77:67:1e:77:83:de:ce:81:b6:57:56:2f:20:2f:0e:
82:d2:9d:eb:ef:14:50:ba:1c:44:04:91:2d:97:2d:b6:2f:12:
af:31:20:ad:6f:bf:ea:cd:63:ac:17:36:74:a1:79:bc:54:15:
69:f0:5d:43:f4:0d:cd:9f:9d:fa:5b:8c:0a:1f:61:c6:44:d4:
04:1e:54:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:50 2024 by rpki-client on console-fra.rpki-client.org