Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8LyZKJXdzam5itEn_WmTbOVPEc.cer
File: e8LyZKJXdzam5itEn_WmTbOVPEc.cer (raw, json)
Hash identifier: 7t8bSNK5KM5+byLW+ngVX39gMRZT73nW/DaNnSMV6Gg=
Subject key identifier: 7B:C2:F2:64:A2:57:77:36:A6:E6:2B:44:9F:F5:A6:4D:B3:95:3C:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185724602DEAD94B4BE9E7EAE3CF10A9B42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/3a2f1f-58b1-46d1-b043-4373a73440cb/1/e8LyZKJXdzam5itEn_WmTbOVPEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/3a2f1f-58b1-46d1-b043-4373a73440cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210457
IP: 2a11:1f80::/29
Validation: Failed, certificate revoked on Thu 13 Jul 2023 11:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:02:de:ad:94:b4:be:9e:7e:ae:3c:f1:0a:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bc2f264a2577736a6e62b449ff5a64db3953c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:32:11:56:6e:a7:64:36:1a:0f:d5:04:c9:
b4:37:f0:e4:0b:ab:de:d4:52:54:ee:e8:25:61:4a:
d2:ca:85:cc:b8:ad:ed:9e:9e:73:c0:26:05:9e:b1:
8f:7c:e3:d0:e6:2a:c8:cc:f9:82:ac:5f:2a:08:be:
98:3f:fa:c0:81:34:df:14:b1:30:e6:9d:3b:ea:65:
c1:d9:2d:9f:87:56:ed:23:68:c9:21:d0:5c:67:4d:
1f:00:2a:47:46:70:b5:77:97:db:d6:ec:65:c2:6d:
b0:45:f5:6b:de:b3:9e:f0:ee:99:c2:12:25:6f:5e:
52:21:d8:51:01:ad:4b:56:fc:d9:7f:8b:8e:93:f8:
8c:f4:6e:3a:75:b7:0f:76:f6:33:3f:50:09:40:a1:
0a:58:00:a8:49:9b:5c:e0:87:bd:ca:7c:8e:2d:49:
4d:88:49:56:5f:fb:03:75:87:c8:04:3c:70:0d:ff:
26:cb:43:42:87:8a:a9:57:e9:ec:d3:4f:b7:b5:dd:
5f:05:a4:54:2e:8c:06:29:b0:3c:32:79:0f:1d:5c:
7a:dd:78:1b:10:f9:4f:46:cd:e5:5d:0f:34:7e:a7:
6f:af:93:96:1e:8e:f9:ba:5d:6a:28:9b:07:39:88:
37:4c:73:80:09:c7:3b:20:4e:f8:8c:dd:9b:a6:4c:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C2:F2:64:A2:57:77:36:A6:E6:2B:44:9F:F5:A6:4D:B3:95:3C:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3a2f1f-58b1-46d1-b043-4373a73440cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3a2f1f-58b1-46d1-b043-4373a73440cb/1/e8LyZKJXdzam5itEn_WmTbOVPEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210457
Signature Algorithm: sha256WithRSAEncryption
41:fb:c7:72:2a:28:10:12:88:5b:76:3a:ae:d8:69:a4:be:0a:
13:9c:24:1a:fc:50:33:9e:94:1a:77:c3:77:7a:3a:e4:d3:3c:
36:22:8b:6c:e1:74:98:6b:d8:2e:db:80:09:25:70:f4:43:68:
8a:6a:be:e6:11:de:e4:e2:69:77:0a:4c:33:75:17:4d:26:33:
b2:7b:e4:d5:74:7d:f2:d0:d7:68:21:0f:1e:e6:d8:7a:7b:a5:
ad:0f:5f:1a:62:0d:c3:06:41:c3:92:be:d3:7f:92:94:47:b5:
0b:f1:ef:ac:c1:7c:0a:cb:f7:30:db:c5:75:8c:ad:13:fe:e7:
f1:6e:c4:df:80:36:b4:77:42:80:1a:4b:0f:90:47:bd:e1:da:
dc:94:7c:33:77:56:8a:1f:7a:03:16:8f:d4:67:25:8b:a0:58:
31:2b:40:40:56:38:47:54:95:b5:d8:e7:ed:ec:5a:5e:f2:d6:
e2:f9:63:f3:c8:18:bd:c4:c0:2f:87:e1:1d:98:70:90:93:61:
12:05:cd:42:39:bf:05:d1:8c:a1:17:0c:1b:bc:92:29:90:e0:
dc:b9:fd:3e:18:0b:df:b4:bf:73:08:55:4e:80:cc:46:77:e5:
7e:29:8f:26:46:6a:d7:2b:21:c7:be:75:ed:bf:f4:87:2c:b1:
47:48:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:20 2024 by rpki-client on console-ams.rpki-client.org