Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
File: ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer (raw, json)
Hash identifier: X2SkE69xmJoWwOaCpjL5VvQ6vm07GihoLbI0z4CI2Z0=
Subject key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD08240187021F29E28D0FF0FA3F758
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:31:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 5464
IP: 62.112.128.0/19
IP: 109.95.240.0/21
IP: 185.2.160.0/22
IP: 193.37.236.0/24
IP: 194.0.229.0/24
IP: 195.184.92.0/23
IP: 2001:67c:33c::/48
IP: 2a00:1df0::/32
IP: 2a02:d000::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:82:40:18:70:21:f2:9e:28:d0:ff:0f:a3:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:31:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:1c:d5:a8:91:ce:42:4c:4b:92:8c:a8:43:
26:8f:f8:93:c8:e6:d5:c8:f3:e0:4e:3f:49:4f:ef:
e9:56:f7:f0:f8:ea:71:4c:3f:b7:4d:54:e8:3c:fc:
7b:f7:c6:c2:d3:de:68:93:d8:8b:17:de:40:76:3e:
f4:9c:3f:30:47:99:27:88:a8:7d:37:34:e7:91:97:
35:18:a1:7f:38:b4:7e:53:da:b1:1b:de:25:5c:4a:
b4:2e:08:c3:03:93:e1:47:cb:c9:7a:aa:4c:3f:54:
03:f8:4e:30:d7:4a:99:57:58:37:bc:22:b3:3d:28:
6d:c6:08:c5:c5:97:e8:04:bc:c8:28:6e:31:3b:65:
4e:d9:0c:8d:d6:cb:07:8e:eb:3a:93:4d:c3:fe:dc:
03:6d:74:39:7c:c6:6c:db:35:c1:45:2c:71:25:9b:
eb:d1:57:03:95:91:69:f6:45:1d:cb:c2:a2:ed:2a:
58:9b:45:80:d6:5b:f8:26:94:31:2a:4d:e7:d9:45:
c2:7e:e9:c4:a4:6f:cc:10:41:12:de:e3:52:e0:33:
92:9b:dd:4f:6a:0f:0d:d2:b6:e2:ee:b5:f8:61:d7:
55:c0:72:68:8e:72:55:19:92:1b:a0:1d:17:79:ab:
60:e6:17:29:11:15:f7:96:e4:42:0f:e5:f6:34:a8:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/19
109.95.240.0/21
185.2.160.0/22
193.37.236.0/24
194.0.229.0/24
195.184.92.0/23
IPv6:
2001:67c:33c::/48
2a00:1df0::/32
2a02:d000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5464
Signature Algorithm: sha256WithRSAEncryption
96:0b:a9:5f:00:d0:2d:7e:52:5b:59:67:36:f3:a2:7f:d7:e4:
8d:0d:b3:1d:f9:83:98:32:d7:4f:34:38:35:19:a3:f7:39:9e:
b2:56:ed:be:ce:6d:85:78:2a:d5:0f:39:78:bf:bd:a5:47:53:
8f:2c:9f:ef:3a:49:d5:df:0e:33:02:8f:23:13:6e:d1:4b:d4:
02:55:78:c7:3a:56:ea:ac:8f:ad:82:03:c9:fa:14:9e:e7:e3:
e9:ad:7d:1d:94:fb:2f:6d:f1:96:58:24:c9:9f:a4:64:a9:27:
69:51:0e:08:97:d9:91:31:93:e8:ed:37:fc:99:55:31:ca:b1:
6f:d5:05:8d:f9:21:78:80:22:7d:5e:b5:ab:31:cc:71:2b:01:
af:ff:a9:4d:39:d3:11:45:63:80:9f:60:14:8c:50:75:cf:54:
fe:1e:a6:ff:a4:bb:36:7a:14:74:db:39:57:0e:dc:69:9c:4d:
ba:26:6f:be:b7:c3:5e:92:82:e3:3a:70:df:ef:75:d7:5a:92:
ef:67:d7:d1:d8:6b:c8:77:21:40:c4:e1:9c:86:f3:94:d7:b6:
54:37:b6:fe:53:e3:92:20:58:a3:64:13:9d:b1:66:5b:ac:01:
b2:c4:6b:1c:be:7f:73:93:73:1f:07:1f:b4:1a:d6:f7:bf:5e:
5e:2b:89:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:02 2023 by rpki-client on console-ams.rpki-client.org