Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k2UZsukNzG82YhAUQUABF4b3rC4.cer
File: k2UZsukNzG82YhAUQUABF4b3rC4.cer (raw, json)
Hash identifier: vR3Rhfrln39ZI8Acf1QBLaw5NtkdCAUdoJgSmTNfa7I=
Subject key identifier: 93:65:19:B2:E9:0D:CC:6F:36:62:10:14:41:40:01:17:86:F7:AC:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D65F2AFECD75B08425090290D58126
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/k2UZsukNzG82YhAUQUABF4b3rC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 47730
IP: 45.148.160.0/22
IP: 2a0f:200::/29
Validation: Failed, certificate revoked on Thu 30 Nov 2023 14:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:5f:2a:fe:cd:75:b0:84:25:09:02:90:d5:81:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=936519b2e90dcc6f366210144140011786f7ac2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:2f:f5:72:b8:16:81:ef:be:50:87:0c:f5:
66:c8:8f:1b:1e:f4:9a:56:f4:ae:56:88:5d:f0:22:
ba:0d:4a:b8:9a:82:81:93:22:ed:d1:79:15:4c:d4:
98:8e:56:a4:8d:12:49:d3:f0:a1:3d:d4:df:60:a2:
8a:04:0f:c3:f1:a1:70:bc:65:8e:05:c3:2d:e7:18:
7d:a8:20:b3:ca:f4:63:59:8b:a2:91:65:b5:98:21:
94:6b:e5:3c:cc:43:33:b2:94:c0:bd:a3:23:c8:6b:
3b:9b:d4:ef:4e:82:76:cb:fb:28:fe:5d:fa:df:c9:
02:b7:09:5c:a3:3a:12:c7:7e:02:6e:cb:bc:e4:b0:
6b:99:ac:a2:3f:7c:64:cc:c5:f3:45:a4:8b:c4:4e:
5f:37:04:92:44:52:44:2e:aa:21:4a:92:ed:22:42:
60:66:a0:d6:4a:b9:55:6f:1d:68:35:cf:da:0e:6c:
6e:b5:37:22:2b:cb:14:7d:d2:d0:e3:32:f0:27:48:
e6:09:8c:01:f4:49:f9:30:20:77:4b:94:80:d5:db:
73:ef:6b:69:b0:24:b4:74:fe:8d:aa:51:90:4a:fa:
74:39:4d:bb:58:11:b3:4c:56:3a:d4:c3:36:83:dc:
bf:c4:dd:4e:98:e4:2d:e0:ec:ef:3d:41:57:7b:52:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:19:B2:E9:0D:CC:6F:36:62:10:14:41:40:01:17:86:F7:AC:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/k2UZsukNzG82YhAUQUABF4b3rC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.160.0/22
IPv6:
2a0f:200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47730
Signature Algorithm: sha256WithRSAEncryption
84:ac:2c:45:f5:c2:3d:2e:70:3e:67:0e:8f:ad:9d:84:73:70:
37:ec:57:0f:4b:84:f5:85:79:8c:4b:0c:dd:5c:e5:99:91:e5:
4e:3a:78:44:eb:b7:f8:b7:70:80:86:f4:df:94:41:3d:34:bd:
d6:14:bc:45:56:65:cb:77:be:ee:be:e7:6f:e1:40:b2:b8:4a:
bf:7b:c9:98:df:d4:79:d1:94:35:63:13:ec:91:e4:51:10:49:
79:c5:b1:2c:55:e3:6c:39:df:b0:ff:00:41:fa:98:0c:5a:eb:
db:9a:7f:35:81:ba:14:94:ff:5a:b5:fd:bd:c6:3b:fb:dc:b8:
13:4a:82:c9:e7:6e:9c:9d:6c:a9:b8:51:5b:55:bf:29:6a:35:
13:24:ef:c3:54:27:cd:11:fd:7a:0f:39:78:e3:15:dd:36:e6:
29:c9:00:ff:49:34:bc:fb:49:31:33:fe:71:03:2c:e0:e3:ac:
98:1c:04:76:01:ec:5a:08:11:07:d1:61:70:f5:16:0c:55:d8:
7c:26:90:56:af:6f:9f:bb:08:a4:55:c0:bb:5d:b6:28:f6:12:
1c:12:ef:f7:d6:a2:b7:c5:24:5d:d9:c5:96:22:c5:e2:2a:3e:
0d:3b:28:26:ca:3f:56:b5:cb:78:50:cb:67:35:02:aa:72:3e:
0d:09:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:47 2024 by rpki-client on console-ams.rpki-client.org