Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/crcI-ECnVEotfLjNB-IlaDc60DQ.cer
File: crcI-ECnVEotfLjNB-IlaDc60DQ.cer (raw, json)
Hash identifier: LM0WLNipzRCmA/TsKsmt+Lvonz90kV6qG8YOAVEgbGA=
Subject key identifier: 72:B7:08:F8:40:A7:54:4A:2D:7C:B8:CD:07:E2:25:68:37:3A:D0:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6345A4846E551FD81FB766E8328D61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/crcI-ECnVEotfLjNB-IlaDc60DQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 51254
IP: 185.133.124.0/22
IP: 2a05:25c0::/29
Validation: Failed, certificate revoked on Thu 13 Jul 2023 11:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:45:a4:84:6e:55:1f:d8:1f:b7:66:e8:32:8d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72b708f840a7544a2d7cb8cd07e22568373ad034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:04:3b:4c:bf:f9:49:f1:ed:cb:7d:2d:fd:
7b:d1:a8:eb:85:07:ce:ff:5a:87:4d:e6:ef:63:99:
ed:c1:16:83:be:8c:ab:87:f9:e9:53:5f:1a:84:97:
cc:5f:8c:0b:98:c5:b7:dc:21:c5:e1:d9:2d:5b:34:
8d:f3:d5:de:ba:bd:fc:ad:54:e7:3e:1e:21:a8:69:
a8:cc:e1:24:21:e7:64:33:eb:db:ae:e9:fd:21:19:
0f:9c:e4:77:08:e8:09:95:60:9b:57:23:ab:92:e2:
81:14:61:85:3d:b9:83:69:c1:ed:3a:22:73:3c:f1:
3b:b4:09:8c:f9:c2:88:59:e0:35:14:eb:58:d9:ec:
ab:30:73:26:37:31:a5:91:77:78:c5:0b:48:ab:28:
da:80:26:9a:ea:5d:b9:6a:24:0f:8d:ae:30:5c:ed:
97:06:cc:dd:b4:d3:3d:c8:cf:72:94:d8:33:51:a1:
d2:e6:65:c8:08:24:98:f2:0a:70:87:21:e3:4a:f9:
33:7b:74:62:4e:26:95:e4:e8:ac:0c:ac:e5:6b:60:
f2:be:5f:e0:e1:fc:c7:47:f1:bf:db:f6:ea:52:28:
eb:c2:b0:f2:a2:48:f0:42:ec:f1:67:5a:9c:9b:7f:
74:68:00:71:04:19:5d:3d:c0:a2:0a:ae:2a:77:dd:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B7:08:F8:40:A7:54:4A:2D:7C:B8:CD:07:E2:25:68:37:3A:D0:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/crcI-ECnVEotfLjNB-IlaDc60DQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.124.0/22
IPv6:
2a05:25c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51254
Signature Algorithm: sha256WithRSAEncryption
8f:90:f1:9e:bc:84:97:0f:b7:3f:70:c9:69:2a:aa:df:1c:44:
2c:cc:10:bf:0c:8f:0a:9c:ba:1f:9a:f9:9f:e0:6f:8c:d3:f2:
1e:ee:eb:8e:65:1f:c6:04:88:95:5c:4a:8a:34:18:d3:47:51:
21:7a:98:d4:56:b2:74:67:4f:20:c5:80:12:be:f1:d1:ed:d9:
8f:ab:8f:4e:78:af:36:6a:0e:99:e6:54:91:38:c2:7e:be:c0:
3d:a2:91:81:e9:9f:51:b4:85:28:b3:b0:68:64:bd:89:a2:56:
32:1a:d2:33:03:ee:9b:3c:4f:9e:c4:e0:ab:8b:7d:16:f7:6b:
70:85:e4:3f:27:6d:ac:35:1f:5c:07:4f:ab:db:60:8f:f4:d2:
d6:41:aa:9d:9a:05:d9:85:53:88:34:36:76:9b:60:01:c3:b6:
e4:54:bc:df:26:b4:80:c3:3b:7d:7a:53:b9:dc:9f:cc:28:f5:
e7:56:33:4b:d5:42:6f:9b:ad:e2:d0:e2:b6:f4:3d:aa:2a:76:
45:c9:91:b5:f7:93:bc:19:f0:a0:c2:8c:1d:de:b8:3e:b5:de:
1c:91:19:97:d1:6f:2c:ce:a4:37:e8:72:04:ee:1e:20:b2:f7:
45:61:33:26:6b:6d:f9:05:49:53:52:05:eb:d5:2a:a5:ac:6a:
e5:c5:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:15 2024 by rpki-client on console-ams.rpki-client.org