Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d59pOLk4AlSbrACDNW_znWRdNM0.cer
File: d59pOLk4AlSbrACDNW_znWRdNM0.cer (raw, json)
Hash identifier: gxE5Ne9kuRPjR0e+3njA74xnYTFfMZF7qapZGSeCP3Q=
Subject key identifier: 77:9F:69:38:B9:38:02:54:9B:AC:00:83:35:6F:F3:9D:64:5D:34:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8010D2B6530512611729AE268192732
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/77382b-f9b6-4f9b-a9ee-2ad25f55a4e8/1/d59pOLk4AlSbrACDNW_znWRdNM0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/77382b-f9b6-4f9b-a9ee-2ad25f55a4e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200975
AS: 205848
IP: 2001:67c:129c::/48
Validation: Failed, certificate revoked on Fri 02 Feb 2024 17:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0d:2b:65:30:51:26:11:72:9a:e2:68:19:27:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=779f6938b93802549bac0083356ff39d645d34cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:ca:97:92:7f:28:74:8a:82:01:d7:e8:a4:
99:fc:eb:37:d4:7d:88:f8:b6:17:d2:bd:61:03:9a:
8f:b9:d2:24:04:69:02:80:ed:90:e9:9c:b7:06:e0:
42:cc:64:87:6f:91:54:24:16:77:f1:2c:1c:d4:ad:
33:6c:57:1e:b3:b9:b0:9b:62:eb:73:7f:42:14:40:
a5:10:ad:d9:84:6a:4c:5f:3a:a3:5c:1c:97:ea:56:
a0:45:49:4a:16:6a:9d:6a:c1:74:f1:69:2f:d4:8c:
98:13:cc:a3:24:78:3a:bb:76:f2:9d:fb:5a:0b:45:
ac:cb:e6:07:18:b7:03:4c:1f:1e:30:65:c1:84:ce:
2f:46:1d:0b:63:b4:11:f2:66:c4:e4:b1:67:ca:4b:
ad:f1:99:19:d8:82:5e:4b:b0:00:42:ab:e2:ed:84:
c8:21:9c:59:e7:e9:a0:16:92:7f:08:76:1f:dd:17:
12:e5:b3:43:e4:5e:0d:e2:55:44:c9:63:f5:df:6e:
08:14:e9:18:4a:eb:f2:4c:78:fe:3b:94:76:a2:ed:
5e:e4:41:13:94:8e:df:cf:05:49:6b:ed:a1:c0:b6:
f5:2b:4f:1e:ca:d5:88:c5:6a:88:53:0e:fd:99:1e:
eb:b2:8f:b5:4d:32:0a:ba:81:9c:03:81:a4:ef:86:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9F:69:38:B9:38:02:54:9B:AC:00:83:35:6F:F3:9D:64:5D:34:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/77382b-f9b6-4f9b-a9ee-2ad25f55a4e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/77382b-f9b6-4f9b-a9ee-2ad25f55a4e8/1/d59pOLk4AlSbrACDNW_znWRdNM0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:129c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200975
205848
Signature Algorithm: sha256WithRSAEncryption
8e:30:b8:35:de:d8:c4:cf:7b:55:ce:d8:1d:e6:50:ac:4b:dd:
df:c1:bf:fd:a8:9c:96:2d:91:a5:da:1f:41:8a:07:b5:c6:f5:
58:d7:b8:12:d5:49:c5:2c:f0:1d:9f:b9:f9:97:f4:33:2f:87:
2b:4b:7a:ef:95:e6:3a:de:e1:d3:b1:05:58:ab:13:e4:59:fa:
86:ce:c8:8d:71:37:ec:75:55:0e:60:31:bf:2f:c1:06:69:a1:
b4:da:49:cc:b1:e0:5e:a0:11:55:a1:41:44:7b:2c:98:d0:13:
38:06:d5:25:4f:10:aa:d5:ab:21:8f:2a:24:de:09:60:73:08:
a8:93:22:96:ce:59:f8:ea:f5:fe:11:bb:89:e5:b4:28:4d:2d:
73:a1:d0:72:25:60:b6:81:97:f4:dd:ac:bc:59:b7:42:8f:e1:
59:94:e0:72:29:1d:93:2c:e0:57:0b:05:12:df:38:b5:8d:2a:
b7:1f:91:95:1f:f0:e4:7b:b3:c0:c7:c3:77:28:4b:18:47:8d:
2f:89:98:75:29:ad:d4:2f:70:37:5a:70:f7:73:93:4b:5e:41:
53:9b:4a:15:dc:5e:58:a9:a3:1a:c4:57:7f:46:22:b6:c3:75:
26:73:6b:82:2e:94:ed:c8:67:86:91:3f:c3:35:0e:08:76:67:
64:88:19:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:31 2024 by rpki-client on console-fra.rpki-client.org