Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.cer
File: jlwYv7mlOV3Oq4zdWL8aa5k7G9A.cer (raw, json)
Hash identifier: LuYGDSdRM9sbPYgNrBKgJUSE0C9tHEuTVcstLM06phw=
Subject key identifier: 8E:5C:18:BF:B9:A5:39:5D:CE:AB:8C:DD:58:BF:1A:6B:99:3B:1B:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED40992C2C5DFF80000084E0440B8C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 43581
IP: 193.17.92.0/24
IP: 2a11:1940::/29
Validation: Failed, certificate revoked on Mon 25 Sep 2023 10:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:09:92:c2:c5:df:f8:00:00:08:4e:04:40:b8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e5c18bfb9a5395dceab8cdd58bf1a6b993b1bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d8:a9:62:c8:24:97:80:65:f5:2c:cf:f7:af:
45:d0:cf:30:21:58:b4:b3:ed:d1:07:62:67:f3:6f:
41:50:b4:da:27:a8:ca:b5:3c:92:fb:f7:dd:10:a1:
47:65:22:d3:59:d4:98:10:5d:db:03:15:5f:ec:15:
34:45:df:fb:37:99:ff:0c:04:24:00:0b:34:5d:8c:
66:ef:8b:02:ce:f6:48:9a:37:aa:4b:7e:85:d2:93:
f9:a4:41:94:aa:ff:68:16:6e:2e:a7:66:8e:a5:01:
a1:f6:0b:43:2e:41:bf:35:43:e2:61:a1:f9:55:e7:
12:dc:c7:95:eb:14:6c:3f:98:16:53:4f:46:be:b1:
70:b5:4a:ca:15:65:72:e9:57:fb:64:84:4e:8c:57:
01:7e:06:76:7b:c8:d2:f7:b3:36:c4:4b:90:aa:77:
7f:12:1c:ca:25:b8:51:17:93:da:e8:c4:4e:bf:c6:
69:37:d3:9f:d3:0c:65:4c:3a:ec:42:38:bf:15:e3:
24:55:54:e9:b1:4f:11:a5:e9:76:fd:36:24:83:51:
63:47:98:de:48:6f:2c:d0:42:32:2f:92:7e:66:ad:
70:a3:34:cb:cc:0b:cd:43:44:7f:1d:00:be:b2:f2:
24:0c:72:5a:84:c8:8b:9d:03:7b:dd:a7:91:99:4f:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5C:18:BF:B9:A5:39:5D:CE:AB:8C:DD:58:BF:1A:6B:99:3B:1B:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.92.0/24
IPv6:
2a11:1940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43581
Signature Algorithm: sha256WithRSAEncryption
38:3c:a1:26:fa:a0:79:36:e2:e6:97:8b:94:68:62:3a:6d:95:
ae:89:3f:df:ad:52:03:8c:1a:3c:b8:21:e8:35:79:5e:ef:4c:
46:0e:1a:5b:19:b3:6e:0a:8d:38:98:0c:d6:dd:4a:3f:be:7c:
91:fd:0b:88:d2:c1:77:e5:a7:ab:70:ee:ff:e2:0a:a9:c9:63:
d8:4e:75:47:f5:6a:15:7c:14:fa:33:4f:29:1c:23:0c:e1:12:
6f:b7:1e:1c:96:6b:82:f3:25:b9:0d:38:98:4b:f8:7d:90:99:
08:18:76:80:41:ec:ed:77:57:b9:89:fe:77:f6:27:24:0b:cf:
ba:01:6b:26:71:93:5a:d9:0d:f1:5b:19:ef:45:f6:0c:9d:ae:
8c:f7:74:1c:4b:af:55:9e:cb:43:9b:0a:14:60:bc:c1:64:95:
06:94:43:eb:0a:0a:b2:59:1a:d4:4f:e1:5b:1f:d3:c0:c8:58:
78:9b:89:e5:70:cf:a5:01:83:ed:04:1f:d9:29:60:42:24:4c:
67:91:e9:58:8c:5e:6a:df:79:7d:c9:a7:e8:75:a5:db:61:64:
e2:17:85:ca:90:c6:cf:e2:81:a4:da:a4:0f:86:e9:b3:f2:1f:
cd:c9:6a:da:87:44:f1:6b:25:85:a5:5e:1d:59:08:5b:f5:39:
c6:bc:e7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:43 2024 by rpki-client on console-ams.rpki-client.org