Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
File: l6xHtRJE70nFI3iuzSnFjPtyCJs.cer (raw, json)
Hash identifier: gFBm3tI6jrilOBjsfJ/3PMEXIY01qPxq6lLWHQBo8GM=
Subject key identifier: 97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4244F0A0A12AADD6B0F9483905E2FD7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/l6xHtRJE70nFI3iuzSnFjPtyCJs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34534
IP: 37.44.236.0/24
IP: 37.44.238.0/24
IP: 185.157.246.0/23
IP: 2a09:ca00::/29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4f:0a:0a:12:aa:dd:6b:0f:94:83:90:5e:2f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:e7:43:38:9e:c7:1d:82:4d:74:69:28:22:
b9:d9:73:1a:10:62:0f:ac:3a:89:3d:62:54:60:a6:
bd:c6:92:57:33:26:91:d9:0d:b2:58:bf:9b:85:a0:
2a:44:31:0e:fb:86:ce:7b:c7:05:2c:fe:1b:9a:b8:
cd:b6:5d:4d:b1:07:b0:a1:0d:ec:b9:59:88:ba:23:
43:db:29:40:e4:14:50:f5:e5:1e:02:47:fd:18:5f:
79:15:78:f5:53:18:61:34:6a:23:c8:60:5c:2f:db:
5d:4b:4f:dd:d2:cd:a3:81:5a:d9:a8:0b:cd:b9:97:
2a:b2:8c:ec:48:34:c6:18:07:af:29:5d:0a:58:57:
e0:7c:7a:e8:ef:b9:87:fc:33:24:4f:17:89:42:52:
7f:36:57:28:e2:45:50:e0:9a:68:a6:c2:a1:7c:4b:
04:d6:b3:c4:ec:03:0a:dd:f3:3f:4c:5c:62:44:e0:
4e:6b:ed:6d:f2:fd:8d:5a:ee:80:8c:a8:e6:4f:df:
4d:7f:c3:49:12:2d:a5:d0:83:6b:cd:d5:2d:b7:d4:
1f:71:6a:67:a2:17:27:3e:a1:f4:8c:74:b7:71:f1:
87:9b:7d:a2:ef:2f:dc:ba:28:a5:b3:b0:a2:f8:68:
56:e5:3c:c8:56:96:4e:76:bc:26:c0:2b:63:f1:42:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/l6xHtRJE70nFI3iuzSnFjPtyCJs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.236.0/24
37.44.238.0/24
185.157.246.0/23
IPv6:
2a09:ca00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34534
Signature Algorithm: sha256WithRSAEncryption
7b:b5:ee:53:32:6d:8d:1a:d5:6d:1d:69:b1:b4:92:66:3f:08:
db:f9:11:78:d3:af:7b:72:d0:de:3d:c7:cd:09:3d:bf:2a:3f:
e2:09:e2:c1:b2:95:60:45:11:f6:aa:b7:28:75:2d:52:6c:27:
c2:f8:6b:55:f1:fe:f5:1b:9e:84:55:d7:ee:75:61:02:d6:0e:
c4:eb:e6:f4:fd:7d:11:15:3f:0f:e1:47:5e:10:9d:27:58:12:
98:e2:44:7d:ef:4a:97:8c:14:08:47:95:41:22:51:94:d9:0b:
05:dd:25:26:0e:ea:04:ac:06:0e:9a:df:ec:df:d2:65:ab:d4:
b1:28:e1:c6:30:66:87:9d:57:a9:df:a7:dd:b0:59:49:fc:4a:
24:a0:d4:c3:21:5f:af:02:02:62:9a:35:2a:bf:93:d3:2e:df:
fd:d9:19:8a:2a:e1:74:84:a0:53:5e:2a:51:05:e7:a3:7a:de:
16:82:05:a8:1a:91:4e:ed:8f:30:27:c6:91:2e:c2:ef:a7:1f:
09:cc:a1:3c:64:2a:0d:a8:8a:8e:1c:68:ff:35:b4:bd:6d:56:
ef:fb:44:20:d1:a4:cc:70:1d:e4:9c:cd:92:97:cd:a2:db:18:
47:10:ae:98:70:3e:e0:cd:8d:30:71:e8:8e:8a:13:ed:ec:66:
c0:a0:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:04 2024 by rpki-client on console-fra.rpki-client.org