Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
File: pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer (raw, json)
Hash identifier: fDfx2wrvm+IISmyqym2yM7CcTbvE/NXv5YA+mMNrI60=
Subject key identifier: A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7955B62E17565F90874C1AC3ABDE150
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/pZFbyKmC_mHrSu1UGDIyiDKVBNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50102
IP: 195.225.58.0/23
Validation: Failed, certificate revoked on Wed 06 Mar 2024 16:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5b:62:e1:75:65:f9:08:74:c1:ac:3a:bd:e1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5915bc8a982fe61eb4aed5418323288329504d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:85:09:ca:9f:95:30:f5:78:b2:6b:e0:c3:
b3:8d:29:c4:c8:3f:e1:63:71:94:89:21:5c:47:3a:
81:f5:14:2a:4b:90:67:81:7a:9d:44:a2:0f:bf:6a:
19:8a:6e:8e:bb:2c:58:11:d9:e2:34:75:eb:1c:fb:
fb:5b:0e:83:2a:cd:8e:39:d5:80:87:4f:82:5f:21:
5b:fe:48:a1:0a:08:64:66:39:62:00:fa:58:91:ce:
dd:14:34:3f:26:73:af:67:18:cd:e0:b8:fe:5d:0b:
ad:62:21:34:81:6d:0c:f1:cc:fd:c7:d0:cf:c0:4b:
3c:cf:c1:b4:ff:7b:8a:93:48:eb:f0:2e:d0:3d:13:
ea:72:b8:bf:df:34:93:7a:64:db:87:2d:30:dd:56:
10:4c:eb:6f:51:cb:0b:2a:cd:64:75:a5:65:03:9d:
76:2f:c5:df:ff:95:16:31:69:6d:13:7d:8e:71:25:
98:b5:1d:b3:88:e2:05:c5:a0:8a:bc:5b:a4:09:62:
ab:f8:93:61:50:ce:b4:7a:c9:e0:62:57:3d:2f:8e:
97:8d:d9:a0:28:41:dc:9b:48:0e:43:e9:ce:dd:cf:
bc:50:37:08:0c:ad:6c:76:78:ca:da:fa:c9:87:1d:
2e:c4:70:4c:36:5e:67:9b:89:c7:f4:ba:e0:c6:48:
9e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/pZFbyKmC_mHrSu1UGDIyiDKVBNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.58.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50102
Signature Algorithm: sha256WithRSAEncryption
63:51:bb:77:a4:de:0b:49:a4:6d:48:17:f8:33:c7:91:1a:73:
1a:ce:46:1a:a4:45:d7:2d:06:88:57:a9:f2:b6:c0:c4:31:bf:
f2:48:c5:c2:05:61:15:9a:19:c9:c2:1e:9c:98:5e:1c:75:55:
fa:65:78:b1:5f:df:44:97:df:e1:fa:d3:fa:45:7a:78:ba:0b:
41:b3:da:30:9c:f4:ee:31:ad:2a:75:7d:36:0f:4d:9e:39:b5:
b5:98:b8:cc:6c:31:f1:4d:2e:6b:ed:19:8e:44:ee:c4:e8:dc:
8b:ae:0c:9b:9d:45:02:a9:21:39:95:81:60:d5:f5:28:ef:3d:
c0:56:b3:49:af:87:3e:68:97:29:36:eb:39:05:7c:66:6a:03:
47:3c:ca:60:01:51:62:9e:5a:4a:9b:13:4f:67:4a:7e:73:fe:
41:d5:32:eb:09:a7:70:ab:80:a1:3a:ca:d8:36:1d:81:8e:41:
6b:37:68:5a:0f:7e:2b:19:e1:4d:59:5f:f1:6c:9b:6f:ed:ff:
e8:c2:ff:d1:48:52:06:8a:5d:b1:30:28:8f:66:27:df:65:70:
f9:18:35:f4:a4:26:f3:f4:d4:13:71:b7:25:eb:d5:ea:a2:11:
54:5a:9b:a8:65:0f:16:c0:ec:3e:ba:82:59:4c:23:87:81:84:
c2:b3:b0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:01 2024 by rpki-client on console-ams.rpki-client.org