Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
File: rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer (raw, json)
Hash identifier: nn0hNQ7dUaRSfZ/XdQl5ncl83NQy0KQo5uWvjK10c/o=
Subject key identifier: AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0189632F279CE98C06E6F0A1C708E209DFE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/rIDr0ZpiboFuGNE-6zvCGuhpFsU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Jul 2023 09:29:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 24700
AS: 42865
AS: 61316
AS: 62160
IP: 46.174.184.0/21
IP: 78.108.176.0/20
IP: 94.198.224.0/21
IP: 94.198.240.0/21
IP: 185.10.208.0/22
IP: 185.41.52.0/22
IP: 193.33.212.0/23
IP: 2a03:6540::/32
IP: 2a04:a380::/29
Validation: Failed, certificate revoked on Thu 03 Aug 2023 10:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:2f:27:9c:e9:8c:06:e6:f0:a1:c7:08:e2:09:df:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 09:29:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:1e:01:c5:1c:b9:ed:f3:4b:63:c1:1d:0e:
e9:7e:d1:2c:90:c1:e0:8d:cc:48:d9:9e:bd:82:e4:
40:a6:7f:8d:24:00:e2:a2:6c:3b:ac:f1:01:07:26:
3c:91:ac:26:f8:32:b5:aa:e6:ad:1f:28:b5:64:ef:
17:bc:26:8c:0b:71:b0:00:9a:a5:0f:65:92:ab:37:
52:da:5f:b3:c8:92:32:8b:37:fc:df:ce:ba:8f:5d:
77:9e:1f:b3:72:88:0a:94:db:a2:7c:96:00:63:f4:
93:8c:73:9d:90:97:4b:19:e5:7c:68:7e:52:f1:02:
37:d0:02:f9:1e:bd:b6:32:09:b0:c4:6f:3d:b5:dc:
96:26:9e:e6:30:c8:31:1a:4a:f5:a0:3c:c1:c3:02:
28:61:bc:16:f6:0b:9b:8d:bb:e9:cc:87:cf:5a:43:
70:84:a9:20:ae:17:5f:ef:44:cb:e7:4e:18:83:65:
00:8c:6a:83:f6:82:ff:6b:23:ee:f9:88:05:71:40:
58:07:41:cf:70:8b:fd:9a:9a:cc:d0:8c:b2:5e:87:
a8:37:54:b5:5f:4a:92:70:75:56:87:89:52:c5:dd:
9e:65:5c:02:2d:3b:61:be:8e:e9:82:6b:72:5a:58:
88:92:af:c3:83:67:5c:5a:db:6f:ca:56:9e:c3:98:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/rIDr0ZpiboFuGNE-6zvCGuhpFsU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.184.0/21
78.108.176.0/20
94.198.224.0/21
94.198.240.0/21
185.10.208.0/22
185.41.52.0/22
193.33.212.0/23
IPv6:
2a03:6540::/32
2a04:a380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24700
42865
61316
62160
Signature Algorithm: sha256WithRSAEncryption
37:db:f7:45:8e:15:05:0f:d5:61:0f:19:09:0d:28:3e:1e:18:
80:ce:95:45:93:b2:43:54:9c:2f:ff:1b:90:35:30:60:a7:79:
41:d3:05:12:ce:37:1c:5b:bf:81:81:90:e1:16:99:98:db:6b:
dc:02:37:cd:05:26:23:90:0f:ed:6b:5c:3b:c2:03:52:52:da:
ac:15:40:e6:9c:3f:2a:0e:77:85:aa:75:ba:a8:0d:e0:6b:06:
4f:e5:81:f5:cb:4d:74:4b:8e:c1:af:93:d2:61:72:98:87:ec:
52:17:37:95:b5:7a:58:25:9e:12:3f:60:ba:61:4a:90:de:d4:
97:64:ff:bc:2b:1e:62:bb:68:64:2b:ea:bd:73:84:3e:07:c7:
bc:72:74:a7:53:fc:1c:4e:08:1c:ae:19:43:c3:4e:39:ba:67:
96:9f:eb:dc:89:10:45:d4:fc:2f:be:b2:cc:9f:62:60:7f:04:
98:04:82:7d:8f:62:88:7b:9a:3a:0b:54:07:93:2e:aa:b7:de:
1b:fc:da:65:ac:2f:29:33:49:a7:8f:f3:69:53:7e:5a:9b:4d:
bb:8e:ed:df:79:29:d9:13:85:3e:ee:ef:ac:91:79:63:ff:c6:
9a:b0:bf:cc:59:ed:30:85:2c:d7:8f:9c:74:e6:f6:54:2a:e6:
22:aa:80:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:02 2024 by rpki-client on console-fra.rpki-client.org