Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/clUvPoe9QRNWViJE8vtQ76Um0gM.cer
File: clUvPoe9QRNWViJE8vtQ76Um0gM.cer (raw, json)
Hash identifier: A1TwYOkLkmGMQtUCFG0Z1H4AsVIGGgcf9genNve0i8Q=
Subject key identifier: 72:55:2F:3E:87:BD:41:13:56:56:22:44:F2:FB:50:EF:A5:26:D2:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857CC74AAF4875EE48C64684135CAF095D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/clUvPoe9QRNWViJE8vtQ76Um0gM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Jan 2023 12:35:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 211912
IP: 185.235.142.0/24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 08:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:c7:4a:af:48:75:ee:48:c6:46:84:13:5c:af:09:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 4 12:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72552f3e87bd411356562244f2fb50efa526d203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:43:69:cf:a0:c9:73:17:f7:f8:02:80:b0:
f2:c8:20:7b:fd:46:f1:16:a1:05:9a:50:b1:e4:f9:
44:82:1c:fe:21:af:79:eb:6e:37:d9:cc:5a:63:dd:
76:a9:e8:a6:01:01:a2:58:d6:a2:f5:6e:de:82:0f:
25:2b:89:96:1e:f7:a5:07:aa:c7:11:75:ee:25:60:
19:0d:d1:f0:7a:74:b8:ba:44:f2:a9:32:75:6f:d7:
ca:e8:10:71:02:2f:1f:74:69:37:31:bd:ff:7c:8d:
53:15:a7:88:9a:48:7c:fa:74:91:a1:3d:ae:ee:9a:
f0:68:c4:fc:3e:71:ad:d0:9e:8f:2c:6b:1a:41:4d:
9d:1e:59:41:4b:60:95:ad:2c:55:85:de:85:de:ce:
4d:03:20:b9:d6:fe:01:f6:8e:bc:75:46:15:72:93:
f0:da:76:9e:ae:8e:bc:bb:29:eb:3e:f4:af:cc:24:
47:df:18:5b:bd:4f:ec:c8:56:21:2d:f7:c3:01:04:
22:a4:96:79:0b:cc:c8:09:09:01:05:50:06:ba:23:
30:72:ce:76:af:bd:91:7b:fd:3c:00:64:3a:a6:83:
ee:ab:ba:5a:cd:50:1a:88:e4:aa:b9:7a:93:ae:b2:
f7:0e:01:42:c9:6b:f1:9b:0e:7f:07:39:4e:31:9d:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:55:2F:3E:87:BD:41:13:56:56:22:44:F2:FB:50:EF:A5:26:D2:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/clUvPoe9QRNWViJE8vtQ76Um0gM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.142.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211912
Signature Algorithm: sha256WithRSAEncryption
1a:b5:a7:5d:6d:6c:e0:aa:f1:c6:a4:bc:d3:e8:b1:19:25:ed:
71:23:96:40:2f:e2:37:d6:9a:f7:18:fb:d9:ff:cb:bd:da:14:
31:82:46:37:7a:b5:ba:3b:89:93:1a:07:4a:25:aa:8d:ca:ce:
62:44:cc:56:32:d1:31:af:cf:ef:cf:b4:ef:e9:1b:4b:d3:63:
15:bf:a8:83:cb:e8:5d:0c:ea:1e:8b:b6:23:f5:78:ca:cd:66:
7c:a1:5b:5c:85:73:6d:de:f5:d0:3a:eb:ff:3a:75:76:50:f1:
2c:67:42:a7:be:2c:82:15:47:b4:c4:d7:87:34:d0:1a:67:fe:
96:33:fa:1b:ca:25:76:28:18:40:ca:9c:16:4b:5a:a0:de:d0:
e7:20:be:b3:79:26:cb:2f:a5:b1:d7:79:fa:f6:71:35:4a:d3:
2c:39:ac:2d:26:db:03:fc:d2:26:49:8e:0f:ea:fa:7d:13:f0:
aa:e1:33:dd:b8:29:b7:9b:95:f9:93:d0:9c:9a:24:57:14:56:
e7:0c:45:7e:0e:46:7d:16:e8:37:88:00:ef:83:ec:5c:9d:db:
a8:3c:e0:de:86:73:45:58:be:ef:ba:ce:0d:43:c1:15:76:f8:
64:71:be:0c:f8:87:56:07:8e:eb:31:cb:02:77:88:57:9a:02:
35:43:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:14 2024 by rpki-client on console-ams.rpki-client.org