Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ey4nQC2Re69StKPFe3Wk933SNWI.cer
File: ey4nQC2Re69StKPFe3Wk933SNWI.cer (raw, json)
Hash identifier: q4Ygl6u4CPQy5nu7eV/BuzbGP0x+Baa82vD0trHHKr8=
Subject key identifier: 7B:2E:27:40:2D:91:7B:AF:52:B4:A3:C5:7B:75:A4:F7:7D:D2:35:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CB25955806AAB0F40E1C47A188953BCC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11/7B2E27402D917BAF52B4A3C57B75A4F77DD23562.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 28 Dec 2023 21:34:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 203377
AS: 207508
AS: 210981
IP: 2.59.117.0/24
IP: 2.59.119.0/24
IP: 45.80.174.0/23
IP: 185.136.205.0 -- 185.136.206.255
IP: 185.207.39.0/24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 12:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b2:59:55:80:6a:ab:0f:40:e1:c4:7a:18:89:53:bc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 28 21:34:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b2e27402d917baf52b4a3c57b75a4f77dd23562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:93:98:d8:d1:e1:83:0b:95:94:a7:f0:7f:
a2:fb:3a:de:45:4b:6b:c0:25:5e:6a:39:a3:af:0c:
f0:38:58:bf:14:ac:00:31:31:ae:0d:a7:87:27:a4:
de:15:03:cf:6a:97:e4:1f:46:85:c9:d6:ae:95:ee:
66:06:94:95:be:31:3c:66:99:f4:eb:5c:1f:2b:af:
31:61:49:f5:63:38:dd:0b:a6:c8:9a:ba:e4:b3:4c:
e4:e7:e7:b1:79:13:57:59:70:07:b7:d8:7e:e2:3c:
44:97:d2:fc:08:87:25:b3:63:eb:3d:7c:09:59:e2:
74:dd:3d:ce:36:2a:61:f9:bf:61:45:c0:23:cd:02:
e5:51:bc:e2:51:4c:9e:c7:85:c6:97:af:bc:a2:df:
dc:66:e3:6e:db:36:dd:17:d9:fc:0e:c6:7f:6f:50:
b3:63:26:43:0f:76:e7:f9:dd:17:4f:df:5c:5b:93:
80:17:da:ca:06:33:4c:6e:41:8e:b4:f2:0d:96:a5:
da:a2:87:ef:cb:56:c9:2d:8b:ee:90:94:b7:3c:10:
58:45:c1:d3:e2:fa:de:12:e8:39:bc:0c:14:6a:38:
74:0e:d6:36:7d:81:c3:cc:23:4e:1c:e3:0b:92:da:
89:67:69:a8:18:49:8b:4b:f8:5f:a8:12:34:fb:1f:
05:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:27:40:2D:91:7B:AF:52:B4:A3:C5:7B:75:A4:F7:7D:D2:35:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11/7B2E27402D917BAF52B4A3C57B75A4F77DD23562.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.117.0/24
2.59.119.0/24
45.80.174.0/23
185.136.205.0-185.136.206.255
185.207.39.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203377
207508
210981
Signature Algorithm: sha256WithRSAEncryption
7a:18:66:23:6e:9b:6d:e3:00:3c:8c:9c:16:44:fe:cb:d7:47:
8d:33:66:e4:21:48:a1:d6:f9:d8:22:27:ed:2b:d4:a3:47:48:
ed:13:f0:45:84:53:f2:33:76:42:06:0b:97:17:3c:6d:f9:ef:
4c:ad:4f:7a:8e:2f:4c:d7:c4:37:2d:37:fa:a3:00:f7:8e:cb:
0a:67:fe:86:21:5c:1a:c3:a0:32:84:5b:34:41:cb:3b:95:b3:
86:d3:36:b6:9c:6c:f8:a0:3e:23:c5:09:40:90:ef:61:95:94:
9a:c7:1e:cf:05:40:45:61:16:b9:88:6d:85:d9:53:cb:52:f6:
9b:18:9d:3d:c7:46:66:29:89:bf:25:3e:33:0f:1b:a7:17:79:
70:eb:1b:c1:51:60:a8:e7:bb:07:67:8f:45:0c:3a:39:1f:c8:
ec:ed:c4:9a:21:4c:a2:87:ff:a7:41:a6:9a:09:70:d1:50:48:
6c:d0:b9:79:7f:fd:78:13:0b:1a:60:3a:8d:34:bf:96:46:ba:
5f:10:59:9e:94:26:36:3e:14:8b:65:3c:c8:10:d1:5f:1f:4b:
93:28:9e:03:1b:f3:44:37:d1:f9:c1:5e:00:4f:b2:61:80:b8:
10:a3:d8:68:5d:14:57:27:f3:f1:ef:bd:13:4a:9c:a0:80:74:
8b:e5:63:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:49 2024 by rpki-client on console-ams.rpki-client.org