Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pDXQQ8q45QkfQVRuhIAG6ug8za0.cer
File: pDXQQ8q45QkfQVRuhIAG6ug8za0.cer (raw, json)
Hash identifier: 6eau+uexPieXdEUYWmTaF2g05XNT4wHyno3nlMZJLx4=
Subject key identifier: A4:35:D0:43:CA:B8:E5:09:1F:41:54:6E:84:80:06:EA:E8:3C:CD:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01876138199BAB33D76B4F7137D8F5D2399B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/pDXQQ8q45QkfQVRuhIAG6ug8za0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 08 Apr 2023 14:14:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210695
IP: 185.235.230.0/24
IP: 2a0a:2e80::/29
Validation: Failed, certificate revoked on Tue 26 Sep 2023 07:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:61:38:19:9b:ab:33:d7:6b:4f:71:37:d8:f5:d2:39:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 14:14:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a435d043cab8e5091f41546e848006eae83ccdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:e7:ab:76:97:41:f0:c2:41:55:3a:bc:d8:
a6:d6:ca:56:42:73:cb:94:e9:8b:29:64:9b:6d:f1:
ff:4a:c8:ae:de:c4:de:de:50:d4:60:b5:a1:eb:1a:
a9:96:d4:65:40:fe:d8:8a:b4:34:80:72:8e:99:64:
67:68:89:0a:30:82:a9:9c:16:dc:22:ee:19:22:bc:
79:96:8b:54:40:96:4c:30:2f:ea:8c:a6:a1:28:1f:
af:39:1c:51:5a:24:5e:79:0e:b0:60:3f:3e:9c:48:
12:17:0a:b4:39:cb:b0:08:66:1f:c0:9c:b8:45:17:
8b:b8:f9:88:95:fd:77:ed:fa:d5:76:bf:56:3e:f9:
67:70:a3:58:2a:e9:8a:b8:b3:2f:be:ce:7d:af:e0:
f4:0a:c5:d9:bc:17:45:b9:a0:ac:c6:66:c9:30:2c:
b8:6b:95:85:79:9d:c4:19:1e:aa:74:51:c3:22:11:
19:f8:b4:30:87:d7:a5:85:4c:c4:22:6a:e6:39:bf:
4d:6c:4f:15:ec:4e:1a:d5:af:eb:ce:d6:2d:68:dd:
ee:76:df:01:e1:cd:9b:2d:06:6a:b9:04:83:40:89:
d5:ff:3e:64:ae:16:0a:35:48:6e:f4:f6:3f:69:aa:
28:93:c3:27:c5:3e:4a:37:48:3e:91:94:3c:d4:ac:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:35:D0:43:CA:B8:E5:09:1F:41:54:6E:84:80:06:EA:E8:3C:CD:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/pDXQQ8q45QkfQVRuhIAG6ug8za0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.230.0/24
IPv6:
2a0a:2e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210695
Signature Algorithm: sha256WithRSAEncryption
7c:a6:29:b6:f5:ef:5d:67:3a:6d:e2:57:50:89:0e:cc:cc:87:
27:80:46:98:26:55:0d:3d:1b:11:be:77:ef:c2:52:46:77:f3:
b6:9b:7c:83:1b:3a:b1:a4:06:7f:27:a5:0c:b3:f3:ec:9b:8e:
27:cb:b2:ba:3a:30:b4:26:54:51:e5:5f:1c:64:c6:94:9b:f7:
97:ed:48:d1:40:50:34:2e:e4:b2:ac:e8:1c:83:8d:8c:fa:3e:
cc:14:8f:c9:76:c1:56:5f:54:8e:ee:93:ef:f1:ba:cc:13:2b:
74:68:bc:dd:8f:c9:e8:61:87:2f:dd:dc:a1:5b:26:9a:07:38:
47:ac:a7:0d:35:a6:1a:dd:f1:7f:0d:23:e2:3a:34:bd:b9:fa:
42:0b:30:5b:c6:98:34:7b:0b:a3:1a:fb:24:30:ef:1a:77:14:
d9:6a:e9:df:56:e3:d9:2b:ae:93:c3:2a:86:2c:c0:1e:60:4f:
58:14:be:02:cd:5c:f0:00:9f:cb:93:1a:a3:3c:a1:4b:43:f0:
66:15:c3:b9:8c:9c:23:bf:27:2e:9b:b7:19:a6:b5:1d:23:44:
e6:5e:20:d9:bf:83:b5:b4:89:a7:a5:6a:61:f9:a3:66:79:e9:
a3:05:98:91:19:07:11:46:12:5a:43:7b:0b:f9:38:2a:f2:7e:
b7:83:17:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:42 2024 by rpki-client on console-fra.rpki-client.org