Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.cer
File: gv1s6F6Rmrm_rT8y3ZgI9hQAncA.cer (raw, json)
Hash identifier: aEyxmEHoV7N1V8n1DgYCmXDMuvlWSTQCm2QQQeOLFuE=
Subject key identifier: 82:FD:6C:E8:5E:91:9A:B9:BF:AD:3F:32:DD:98:08:F6:14:00:9D:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAC80E2B2441E583EF0712DF19F877
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211270
IP: 91.216.98.0/24
IP: 185.84.156.0/22
IP: 2a12:fac0::/29
Validation: Failed, certificate revoked on Wed 10 Jul 2024 09:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c8:0e:2b:24:41:e5:83:ef:07:12:df:19:f8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82fd6ce85e919ab9bfad3f32dd9808f614009dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:a7:67:85:47:ed:91:09:b2:33:76:82:11:
1b:ec:b5:25:77:16:6a:e4:99:18:fd:10:60:d5:ef:
cb:fb:71:0e:f7:e5:01:8f:58:9f:df:74:67:e6:15:
1f:6f:c3:b3:8d:1f:ab:66:ea:ba:04:d8:ba:e7:55:
67:d0:62:7b:16:ac:62:a1:b7:ab:3c:44:6d:72:8c:
62:f2:12:bf:7e:85:1d:0b:15:55:ea:89:86:0d:99:
e7:14:0f:7a:a3:ee:5b:b0:31:2c:4c:a7:34:6c:1f:
08:a7:f2:17:73:6b:00:e7:28:8e:1f:68:58:57:cc:
a6:be:6a:c8:23:cb:44:33:78:5b:b6:cb:08:c3:f1:
4b:46:6b:5f:ad:7d:e0:50:c2:94:e2:28:b8:03:0c:
00:71:fd:d7:65:6d:e4:7e:ff:1d:9b:39:29:bb:f4:
8f:6d:c4:e2:db:b8:e4:7b:83:8c:c6:b1:13:de:b1:
c0:9a:7c:e6:ba:2b:33:8c:9c:0c:02:bf:1b:1a:b3:
14:8e:74:96:98:17:94:35:63:57:c4:64:96:0d:92:
1b:62:02:9b:2f:13:bc:c9:a8:be:1c:e6:4e:a2:9e:
7b:b9:6b:be:08:ff:e0:fa:a8:7a:df:43:73:f1:34:
95:e2:85:e0:d1:3e:17:15:f0:1b:26:ec:6d:21:a7:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FD:6C:E8:5E:91:9A:B9:BF:AD:3F:32:DD:98:08:F6:14:00:9D:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.98.0/24
185.84.156.0/22
IPv6:
2a12:fac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211270
Signature Algorithm: sha256WithRSAEncryption
23:57:7c:dc:99:b6:22:b3:24:04:0d:a6:59:f2:c0:48:c4:d6:
4d:a2:5e:da:59:10:6d:a3:9e:f3:fc:0c:f8:3d:52:8a:8b:07:
f9:b5:d6:be:59:cf:67:0d:e5:f1:c3:25:2b:3b:9a:48:e9:f8:
8e:92:f9:ed:83:d4:c8:c8:55:7b:c2:cc:e7:75:ef:d0:39:c9:
50:e6:29:22:ac:47:80:d3:ef:7d:00:09:0e:b8:97:18:cc:79:
18:f2:5e:d5:3a:41:ed:26:f8:1e:33:5b:9a:b0:e7:1d:1f:db:
e3:f7:94:01:aa:35:32:e3:fe:8c:bc:d0:43:15:5a:02:68:79:
75:a6:25:d5:ec:73:20:82:45:39:6d:4b:24:65:15:a4:42:36:
dd:84:3c:47:5e:1b:78:b0:47:6e:af:73:6b:08:ed:9f:4f:5e:
db:0b:5d:ae:de:a9:70:80:5c:90:ab:cb:3d:5b:c8:7c:bb:cb:
6d:a0:f5:a6:2f:1f:3b:42:a1:4c:c1:e0:a5:d6:b1:c6:63:b8:
3f:2e:10:17:87:32:14:77:06:92:06:f7:31:a0:f8:39:89:34:
b3:da:c6:71:f6:f4:e3:5d:90:9a:a6:e5:10:50:ba:56:0e:a5:
2b:9c:56:36:6b:76:c4:6f:6e:24:eb:f2:6d:1b:b1:d8:1a:62:
36:1f:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:12:24 2025 by rpki-client