Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/idqtuYH36T2ksZrPQQefm74dZy4.cer
File: idqtuYH36T2ksZrPQQefm74dZy4.cer (raw, json)
Hash identifier: uQbUN1cxhWa8D48gd2IJO23m3FtW703+itTZNIdPn8g=
Subject key identifier: 89:DA:AD:B9:81:F7:E9:3D:A4:B1:9A:CF:41:07:9F:9B:BE:1D:67:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3492BBB843AB25CFF8541A0FD5F650E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/idqtuYH36T2ksZrPQQefm74dZy4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34787
IP: 193.238.152.0/22
Validation: Failed, certificate revoked on Tue 06 Feb 2024 12:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:2b:bb:84:3a:b2:5c:ff:85:41:a0:fd:5f:65:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89daadb981f7e93da4b19acf41079f9bbe1d672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:8a:f8:ba:30:c8:ab:b0:cd:bf:37:68:cb:
e4:25:ed:9f:f8:9c:d1:f2:a9:18:d4:88:31:0c:41:
ff:fa:ae:fb:33:a9:3a:59:70:bb:0f:19:8b:6f:46:
ad:a7:ec:b9:95:b6:d2:04:9d:f2:02:41:5e:14:25:
8f:98:28:b2:dd:b6:a7:68:b8:1f:db:18:bf:e3:05:
26:b2:c6:ef:e7:c5:34:98:bd:69:0d:c3:11:46:3f:
8a:aa:f4:59:cd:0b:ca:d3:bd:eb:31:e6:16:7d:78:
9e:db:a3:47:36:e9:9d:a1:97:d6:fe:d3:33:9f:12:
4b:ed:d1:ca:08:c3:a2:23:a2:90:7b:32:23:3c:a9:
49:d4:3a:76:db:77:f2:c8:50:96:38:d3:8b:dd:d7:
2c:1d:09:a9:5d:f8:aa:9c:87:92:c0:39:e5:c2:20:
31:8c:c3:48:43:59:79:4e:b0:79:59:8a:30:13:c5:
a3:14:82:92:80:94:dc:23:4a:ca:ac:9d:3a:ec:5b:
dc:87:a0:2f:2b:07:43:99:81:0c:81:c7:c3:f9:e1:
5a:c6:f2:de:d6:19:d2:15:a1:68:26:25:6f:e3:30:
b6:75:6d:b7:6a:80:af:59:d6:a0:ed:1e:01:0a:f1:
eb:dd:57:49:2b:62:17:e7:34:a5:b9:6e:78:01:32:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DA:AD:B9:81:F7:E9:3D:A4:B1:9A:CF:41:07:9F:9B:BE:1D:67:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/idqtuYH36T2ksZrPQQefm74dZy4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.152.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34787
Signature Algorithm: sha256WithRSAEncryption
83:c1:e8:34:10:1a:f9:7d:d0:67:f9:61:45:6c:7a:76:b4:ee:
b9:78:f8:03:23:f8:cf:4f:f5:ae:8d:b9:f8:38:4b:51:32:23:
3b:57:c6:7f:6d:9e:6f:ab:d9:e6:1c:14:a4:db:e1:19:a0:f1:
8b:00:67:ca:99:40:d7:93:53:40:6c:d3:13:61:97:09:4e:ff:
11:10:d4:f9:a3:7d:ac:25:ed:5a:73:a0:25:0b:93:0c:ea:63:
38:8f:df:c0:46:4c:0b:a0:7b:d0:da:58:27:0a:e7:62:40:3b:
36:bf:92:79:12:54:1b:ec:a0:a0:25:2b:ea:48:db:81:45:f8:
e8:27:c5:87:0c:ad:90:4d:57:20:83:bd:ad:9f:93:7c:5f:08:
b5:61:d4:1a:6d:01:23:bf:55:38:8e:0a:00:d8:cf:cc:90:ee:
a1:7d:31:76:1c:1e:99:ad:00:c5:0b:1e:fb:f8:7d:d3:15:e0:
e3:d9:72:e9:71:b9:e2:96:bd:ee:56:ed:4c:d4:13:ca:d6:dc:
5f:21:23:55:03:19:6d:c3:a0:ae:74:5f:61:61:46:c5:d6:28:
88:0f:58:a7:c7:ed:fa:73:2f:81:cb:23:94:ca:89:48:8b:18:
46:e0:0b:0a:82:e3:1f:60:e2:3b:02:28:37:7b:63:b4:d4:df:
36:06:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:50 2025 by rpki-client