Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fJxduoPgaBb-asZhO0HNe24vWsk.cer
File: fJxduoPgaBb-asZhO0HNe24vWsk.cer (raw, json)
Hash identifier: PFhxvT++n+FhOoeEthOBgdEc3xUPrxmBCxriGE2FoJU=
Subject key identifier: 7C:9C:5D:BA:83:E0:68:16:FE:6A:C6:61:3B:41:CD:7B:6E:2F:5A:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D187682A13FD0663AEF32FF12E425
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/eb6dd2-c3ad-4c9c-b765-9b881db8e94e/1/fJxduoPgaBb-asZhO0HNe24vWsk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/eb6dd2-c3ad-4c9c-b765-9b881db8e94e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44275
AS: 60690
IP: 93.95.72.0/21
IP: 178.248.16.0/21
IP: 185.27.36.0/22
IP: 185.67.84.0/22
IP: 185.109.100.0/22
IP: 185.123.196.0/22
IP: 185.219.148.0/22
IP: 2a00:4ea0::/32
IP: 2a00:9260::/29
IP: 2a01:b9c0::/32
IP: 2a02:1300::/32
Validation: Failed, certificate revoked on Thu 21 Mar 2024 11:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:18:76:82:a1:3f:d0:66:3a:ef:32:ff:12:e4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c9c5dba83e06816fe6ac6613b41cd7b6e2f5ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:81:ee:e8:c1:a6:07:3a:15:54:ac:46:ad:
1f:6a:a5:17:ca:e4:a4:84:1d:de:e1:b4:3f:58:c8:
6d:a5:b2:f8:8c:d6:c5:a9:12:16:09:0d:48:bc:49:
d4:34:d4:38:0b:be:8d:68:21:e9:09:46:24:ee:c1:
7c:33:4e:29:72:a3:c4:2a:5d:40:1b:21:31:b6:f8:
23:22:50:04:b9:1b:a4:53:83:f2:e7:f1:ca:c3:c3:
e3:86:90:1e:71:8d:3b:89:07:f9:81:d9:37:77:a2:
78:ff:58:b7:e4:87:fc:a4:ab:78:8e:2d:00:39:8c:
c6:0a:cc:29:fb:a7:f1:c8:b8:56:9d:bd:65:b1:bd:
2a:38:e7:0e:4d:a9:46:87:80:52:cc:05:76:70:ad:
6b:36:98:aa:2e:90:e7:fe:54:66:cc:a1:5e:38:b0:
70:da:60:a7:b2:14:ff:a4:ef:b7:d0:27:7c:80:60:
1e:ab:74:c3:6a:d5:90:fe:5f:f8:ca:6c:0c:e7:0f:
a2:4e:6a:6b:c5:d8:c5:b4:4e:ff:72:97:69:d1:3e:
6d:e3:30:f7:67:8e:49:6c:a2:57:f8:2d:d8:2b:7b:
51:59:bb:29:39:04:1c:5d:d4:87:ba:24:51:ed:3f:
ef:b0:88:97:aa:01:76:0b:63:c7:60:a1:a8:0e:53:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9C:5D:BA:83:E0:68:16:FE:6A:C6:61:3B:41:CD:7B:6E:2F:5A:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb6dd2-c3ad-4c9c-b765-9b881db8e94e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb6dd2-c3ad-4c9c-b765-9b881db8e94e/1/fJxduoPgaBb-asZhO0HNe24vWsk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.72.0/21
178.248.16.0/21
185.27.36.0/22
185.67.84.0/22
185.109.100.0/22
185.123.196.0/22
185.219.148.0/22
IPv6:
2a00:4ea0::/32
2a00:9260::/29
2a01:b9c0::/32
2a02:1300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44275
60690
Signature Algorithm: sha256WithRSAEncryption
63:65:a8:36:3b:a8:3f:72:2a:2d:67:8d:4b:49:81:44:74:61:
9a:94:dd:0e:fb:93:f7:f5:21:86:7e:ad:3b:47:f9:76:63:a3:
38:01:2f:5b:75:b4:d1:84:c6:06:3b:e4:29:63:c8:3f:3a:b0:
99:43:a0:d2:1f:13:2a:1c:5a:e2:9b:be:7d:ca:32:6c:7a:f9:
00:da:f1:38:ed:53:00:53:42:2b:e9:48:da:87:51:aa:09:a7:
c1:32:d0:a3:44:2f:76:c7:66:c8:c8:6a:d1:f9:fa:fe:e5:1c:
5c:7f:48:af:ff:0a:6e:9a:ef:11:97:0a:3d:fc:4e:7a:b9:ee:
49:bc:46:d6:9e:c1:1d:06:c4:6b:15:5c:ca:1b:e5:e0:2f:fa:
11:e6:f3:5c:e8:cb:e3:63:31:59:2e:09:cb:1a:78:57:66:50:
df:af:95:d0:ce:bc:1e:3f:d1:66:2e:21:2f:c5:97:57:da:c1:
8d:2d:e8:d1:f4:9a:0c:a3:98:b8:47:28:39:20:fd:2d:1b:bf:
50:5f:d3:57:be:e7:85:f3:25:5a:c8:ee:87:37:4f:06:70:48:
d5:01:42:8d:ed:55:83:a0:32:88:59:84:32:e7:06:4e:58:77:
bc:12:18:84:d0:78:93:9b:2d:61:28:93:71:c1:48:b6:3b:dd:
5d:c1:a9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:25 2024 by rpki-client on console-fra.rpki-client.org