Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g6fIC9JvzSm5BV395oM62wUkVL8.cer
File: g6fIC9JvzSm5BV395oM62wUkVL8.cer (raw, json)
Hash identifier: VpjHYWvgQaNyAKxR2H6N6MlVvZbC9W/WzgETMxITViU=
Subject key identifier: 83:A7:C8:0B:D2:6F:CD:29:B9:05:5D:FD:E6:83:3A:DB:05:24:54:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245078AC8671D4D263EA64B0BF589DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/g6fIC9JvzSm5BV395oM62wUkVL8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:36:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 42849
IP: 193.200.131.0/24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 14:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:07:8a:c8:67:1d:4d:26:3e:a6:4b:0b:f5:89:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:36:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83a7c80bd26fcd29b9055dfde6833adb052454bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:7e:a5:ab:20:44:8a:45:6d:73:96:e4:ff:
5c:65:f7:b5:ac:32:e7:86:51:a5:f9:4e:ce:cc:25:
e2:47:bc:f6:4f:8a:01:f5:83:f0:b5:6e:18:a3:48:
19:e1:37:97:d6:ad:95:b9:41:98:b8:48:f5:6a:00:
08:d7:68:bb:85:6d:c7:23:f1:d2:e7:c0:a0:e2:b6:
f8:d8:2d:09:5f:98:f6:5d:60:5b:cb:f4:97:f9:71:
45:17:53:1e:40:2a:00:37:32:49:b4:b8:7f:ac:51:
c8:8d:35:ab:84:c7:6b:09:98:d1:da:ed:66:3c:35:
fc:1f:29:fe:9e:ef:31:98:9b:b3:90:f2:48:c1:e6:
0b:4c:4d:43:37:48:c0:c4:a2:15:7e:0f:09:4d:33:
9f:48:b1:ed:77:19:97:69:33:2c:3d:a7:23:94:57:
57:05:91:4c:3e:a0:b3:18:df:b3:05:c2:20:2d:2c:
35:c4:bd:03:90:2b:c5:53:c9:fd:07:6b:4d:b1:e9:
24:22:cf:ce:a7:a1:ef:99:9e:13:fc:d5:ce:43:5b:
31:9c:49:ba:8e:ea:f2:08:e3:ac:60:23:9c:94:7c:
b7:9a:ef:be:08:d9:d1:1f:37:4c:67:7d:95:7b:65:
80:7b:6c:97:0f:d3:91:2a:f0:a8:fa:1f:40:5d:33:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:C8:0B:D2:6F:CD:29:B9:05:5D:FD:E6:83:3A:DB:05:24:54:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/g6fIC9JvzSm5BV395oM62wUkVL8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.131.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42849
Signature Algorithm: sha256WithRSAEncryption
14:50:08:d8:30:f3:62:1c:7d:cd:d7:cb:22:3c:1c:a8:9f:23:
ab:6d:08:b8:75:12:9d:95:66:0b:d4:16:2a:30:27:8e:ba:5c:
d7:ab:18:b2:b2:e1:a3:8c:57:2e:19:9e:91:07:00:63:66:e7:
82:7c:18:e0:39:b6:83:b6:ce:50:77:36:de:71:a6:d6:2b:a1:
3a:9b:37:49:4d:ab:45:58:f8:36:c0:18:88:08:a8:aa:68:d8:
bd:09:30:cf:a8:fb:5d:05:c4:48:31:ac:b6:91:63:72:28:6c:
7c:85:b9:c1:fb:0b:26:f1:19:6c:71:4a:83:21:9d:fd:ce:f3:
91:55:6c:d6:f8:89:5b:6f:cd:30:d6:bc:c1:bd:48:bd:db:ae:
9e:e7:d4:8c:b7:ef:f6:6c:3c:5e:ae:f7:bb:8f:6f:09:d5:96:
2f:41:5f:e8:c4:b9:93:c2:07:e3:50:a4:00:00:81:09:6a:ad:
47:b8:dd:9a:67:5a:79:43:89:28:fc:1f:66:e6:55:ef:f5:38:
1d:8f:98:26:1b:ab:d1:b0:5f:1b:6b:1d:e5:af:8d:94:10:e2:
30:76:47:85:e6:3a:96:9c:b0:b1:0d:2d:e4:ab:f9:42:76:8d:
96:93:3b:ac:2f:78:23:be:df:36:72:21:63:f5:10:3e:c1:dd:
be:e7:90:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:59 2024 by rpki-client on console-ams.rpki-client.org