Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fdG1tC3D2EbCrSVJZk409y0ctKY.cer
File: fdG1tC3D2EbCrSVJZk409y0ctKY.cer (raw, json)
Hash identifier: OLa0D5gTp+0EUiZfxnveVq5BBmyZGPPqyVI8+BBAS8w=
Subject key identifier: 7D:D1:B5:B4:2D:C3:D8:46:C2:AD:25:49:66:4E:34:F7:2D:1C:B4:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A6A86EA5F076AFCF9CA91A9BCB18F7CA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/fdG1tC3D2EbCrSVJZk409y0ctKY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Sep 2023 12:45:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 42336
AS: 212381
IP: 87.239.224.0/21
IP: 89.46.116.0/22
IP: 91.245.160.0/20
IP: 94.177.100.0/22
IP: 94.177.140.0/22
IP: 176.121.24.0/21
IP: 185.203.40.0/22
IP: 193.33.118.0/23
IP: 195.128.164.0/23
Validation: Failed, certificate revoked on Wed 13 Sep 2023 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:86:ea:5f:07:6a:fc:f9:ca:91:a9:bc:b1:8f:7c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 6 12:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dd1b5b42dc3d846c2ad2549664e34f72d1cb4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:ff:b4:d9:92:c2:8e:5f:65:b8:a9:7e:88:
f0:64:d8:47:f1:2e:a6:d0:ba:1e:50:b0:1f:25:c3:
23:29:54:a7:8e:7c:9d:57:3b:05:41:3a:fe:55:4a:
90:fa:d3:48:4d:8b:aa:ee:ac:7b:39:0d:ab:85:ae:
03:65:7b:97:d0:8d:1a:fa:78:e9:2a:d0:80:2d:b1:
9c:4d:ec:25:13:40:3a:ef:85:48:12:cc:66:4f:11:
bd:4d:ab:28:34:26:b9:8e:35:9e:82:a4:2b:2e:67:
e2:cf:63:aa:85:9b:04:62:af:4e:2e:0a:5d:9c:e7:
0f:ef:45:69:2b:fa:b0:05:59:e5:b0:3f:0f:fa:1e:
04:f5:e6:7f:42:b2:b9:aa:12:94:ae:7e:ea:14:01:
49:9e:2e:d0:a5:d0:23:81:57:eb:aa:25:81:da:5f:
f0:d7:c1:9a:a3:5e:2e:bb:5c:d6:48:e5:69:7b:77:
c7:d1:88:6d:08:2d:2e:40:40:ad:c3:5b:be:bc:50:
af:40:e1:db:0d:86:a9:65:7f:bf:3a:d7:cb:40:dc:
a9:7a:bf:55:dd:b8:c2:3d:41:77:09:31:c5:cb:48:
e4:1f:5a:0d:ba:33:5e:54:c6:cb:f4:bb:e8:2a:06:
14:2b:ee:2d:82:ca:10:89:78:2f:d5:87:b6:82:93:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D1:B5:B4:2D:C3:D8:46:C2:AD:25:49:66:4E:34:F7:2D:1C:B4:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/fdG1tC3D2EbCrSVJZk409y0ctKY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.224.0/21
89.46.116.0/22
91.245.160.0/20
94.177.100.0/22
94.177.140.0/22
176.121.24.0/21
185.203.40.0/22
193.33.118.0/23
195.128.164.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42336
212381
Signature Algorithm: sha256WithRSAEncryption
7e:f8:dd:03:01:47:e3:c4:21:da:8e:4b:ba:41:12:a1:02:a0:
75:cc:c1:04:b2:5d:41:1a:75:2e:95:2b:5d:be:6b:1b:36:b8:
b7:b1:48:71:d6:7c:57:be:4d:9f:55:df:3c:94:16:d8:11:03:
fe:fb:49:52:14:a9:10:f2:d1:0f:e5:fc:d9:55:94:23:25:2d:
6a:b3:c4:18:c2:88:5f:42:d6:f9:f3:76:fa:72:d0:76:1b:76:
1c:f3:93:66:ee:c0:7c:e8:c5:49:76:3f:d6:5e:ad:ce:4b:80:
bd:9c:48:3a:a7:e7:7c:cf:2d:7c:08:d3:97:4f:e4:c3:9e:61:
4b:90:72:5c:fb:97:2c:3d:3c:7a:db:a9:5a:21:a3:45:16:10:
9d:a1:50:a4:d5:7d:da:14:d9:cc:0b:8d:f3:9a:99:6d:de:05:
1a:43:38:75:86:ba:49:f4:7b:1c:fb:5a:c1:1d:34:f1:57:c4:
74:2a:36:a1:78:01:2b:74:d6:8d:ca:7f:33:b1:58:70:57:28:
3d:e6:83:f3:f8:ed:51:df:4b:1d:2e:c0:0e:72:39:e7:49:10:
36:85:5f:c7:32:4e:97:e2:a7:73:3b:fa:01:53:69:62:72:31:
4a:8d:58:71:99:b7:52:5b:20:ff:fd:b2:f5:47:b0:74:b4:c1:
d6:ef:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org