Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
File: n2YrPPqLkFkGjCnUa5kmO6LeUME.cer (raw, json)
Hash identifier: GoS8CEsEVpTgzJrimCBVVTC7WOmVDsQOCtTAo1+4IJU=
Subject key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187E041A2B8B72D6BC89B2EBD67C9A31E48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 May 2023 06:16:50 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 15517
IP: 45.85.92.0/22
IP: 62.65.128.0/19
IP: 94.78.0.0/18
IP: 2a01:330::/29
Validation: Failed, certificate revoked on Mon 05 Jun 2023 13:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:41:a2:b8:b7:2d:6b:c8:9b:2e:bd:67:c9:a3:1e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 3 06:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:04:ed:40:d4:a2:f7:30:2c:5d:71:1b:f8:
0f:c9:52:6e:d7:10:19:f7:8c:42:63:de:87:56:96:
66:54:e4:f1:95:76:38:61:b7:1f:4d:ef:12:34:12:
3d:cb:12:52:5a:17:8f:8e:b9:99:57:d7:1f:a5:cc:
6d:c0:be:98:09:ad:d2:d1:e0:c1:42:72:7a:42:fa:
6e:85:6e:10:44:08:e6:6f:9c:32:84:3c:cc:bf:6f:
2f:dc:54:33:15:c9:72:42:6c:62:00:30:8a:d4:4f:
db:6c:df:10:c3:81:69:b5:25:8e:e5:93:63:b1:2a:
76:9d:13:e4:c8:58:2f:82:4a:7d:65:8a:b4:19:43:
44:4a:48:c5:cf:bd:99:b2:b1:40:bc:9f:f2:33:49:
82:61:61:fd:37:eb:5c:c6:09:2f:7d:6b:c8:f5:52:
80:8c:d9:76:ea:64:6f:02:b1:45:12:89:3a:ac:0e:
b6:12:f9:e4:5b:40:ca:21:2d:f7:8e:5c:c3:dd:b0:
92:1a:65:a2:90:84:a2:24:95:dc:75:ea:66:23:d9:
41:50:40:e6:29:ec:bc:1d:6f:44:11:4e:d0:a7:c0:
97:e7:9d:82:ba:31:8e:95:0c:77:b9:fc:b2:45:56:
e7:76:a5:8f:77:c6:62:3d:dd:02:fa:53:e2:28:9f:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.92.0/22
62.65.128.0/19
94.78.0.0/18
IPv6:
2a01:330::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15517
Signature Algorithm: sha256WithRSAEncryption
10:88:15:cf:c9:c0:e5:25:7c:1a:31:85:8e:f8:d6:34:cc:c9:
aa:96:5d:6c:66:02:67:93:ad:96:e6:ba:0c:bb:dc:7b:20:b7:
3d:5c:31:48:a4:e4:b5:f8:30:16:53:41:69:19:a3:68:a8:58:
cd:42:6e:91:27:bb:86:d6:a3:3c:9d:57:bd:53:80:17:23:00:
c7:dc:02:4e:19:f9:b0:2c:52:08:b5:0e:c7:2d:d8:36:50:80:
1c:d8:fe:6b:5a:b8:11:5a:1e:3b:66:6f:34:50:84:d6:75:92:
e7:bc:75:e4:3c:f2:a4:7a:58:78:ea:8f:ee:7b:79:8a:49:6d:
5b:cc:06:6e:08:77:73:b5:f4:38:e8:3b:61:d4:8d:98:07:8d:
1c:b3:77:46:49:1d:51:1d:31:64:b0:19:65:53:24:1c:c8:f7:
ed:74:7f:f0:51:4a:63:b7:5d:02:f4:bc:2a:ee:07:0b:5c:2f:
73:1d:1b:73:19:42:0e:b1:9c:95:b8:5a:59:13:8f:81:33:9b:
da:01:40:13:af:68:d5:b2:2d:8b:3f:8b:be:89:96:a9:b4:d9:
c9:31:f9:50:27:b7:a6:ba:a2:63:40:b1:84:d3:aa:40:c7:24:
e1:46:da:00:5f:6f:32:29:67:9a:cc:d2:b8:c4:8c:51:ad:52:
31:0e:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:27 2024 by rpki-client on console-ams.rpki-client.org