Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ryA5AAF2U8xODcGxO-oXegZT-y0.cer
File: ryA5AAF2U8xODcGxO-oXegZT-y0.cer (raw, json)
Hash identifier: AyW2FDhajwdDaxnTlp5/HlaNlNb8aGCQAj2V/HvIjEg=
Subject key identifier: AF:20:39:00:01:76:53:CC:4E:0D:C1:B1:3B:EA:17:7A:06:53:FB:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857168EB1B171CA31077E2E5866349B7D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/ryA5AAF2U8xODcGxO-oXegZT-y0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.106.69.0/24
IP: 2a11:8bc0::/29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 07:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:eb:1b:17:1c:a3:10:77:e2:e5:86:63:49:b7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af203900017653cc4e0dc1b13bea177a0653fb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:e9:33:c4:e5:69:74:cc:7e:9c:5c:14:02:
cc:5d:97:60:e9:e0:68:48:91:a8:78:64:41:57:ef:
ef:6c:9b:bf:1c:7b:75:fe:5c:c1:61:57:2e:b5:18:
2e:76:32:7f:5c:59:75:87:75:82:fb:f8:02:8c:2a:
8c:17:d7:65:be:dc:c9:d8:64:56:e9:d0:fc:02:b3:
4d:2a:b2:d5:04:1c:c1:ea:6a:94:8e:91:f9:2e:ef:
54:ed:b7:a3:49:f5:dc:48:32:84:86:eb:23:50:46:
f3:17:70:a4:27:7f:e6:fc:a5:b4:8d:fc:97:fc:d5:
8a:15:0a:c8:e0:5a:8c:2d:4a:7e:df:01:c9:df:a5:
19:8e:4e:fe:4e:4c:2e:09:e6:a2:e1:3b:da:cf:3a:
37:00:8a:54:35:7a:d1:18:b3:1e:b2:07:87:42:6f:
5f:ae:90:e3:20:3c:23:2c:e8:8e:3a:53:e1:91:3f:
fb:fd:3d:70:29:ec:6b:92:0b:bb:be:a7:fd:94:ea:
38:a5:be:8e:5f:98:ec:58:90:15:31:fd:cd:de:f9:
87:0f:84:90:01:47:08:68:db:9f:96:f2:f0:be:cb:
2e:54:26:d7:4d:02:c7:55:ea:8b:0c:33:ac:3e:48:
d4:93:81:0f:56:5d:a4:e6:8c:0b:9f:81:91:1b:ac:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:20:39:00:01:76:53:CC:4E:0D:C1:B1:3B:EA:17:7A:06:53:FB:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/ryA5AAF2U8xODcGxO-oXegZT-y0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.69.0/24
IPv6:
2a11:8bc0::/29
Signature Algorithm: sha256WithRSAEncryption
46:85:d7:36:7d:3d:69:e2:66:3b:32:47:7b:9a:87:ec:ec:f9:
09:cc:4c:72:a4:61:ac:73:e0:19:b9:c3:f1:ac:c7:dd:2d:79:
82:2b:45:fa:ae:c2:b2:b2:38:0f:1d:91:58:9f:01:99:bd:4f:
a8:5b:c5:30:f3:48:bf:fa:a7:e1:a4:44:8f:be:82:31:03:8d:
22:67:5f:0e:04:e3:ff:9b:bf:9b:2c:b0:37:7a:58:f1:88:f2:
01:6f:95:7d:b6:bf:9c:f3:a2:40:54:8e:b4:e0:fd:b6:36:a8:
24:4a:65:47:d4:c0:3f:62:df:bb:cd:a7:5e:53:9d:9d:2b:a7:
4c:58:48:3d:cd:49:25:18:0d:2b:22:0b:e3:60:d8:96:89:fa:
0c:f5:e5:08:66:30:92:d1:d1:11:10:e3:76:2c:af:c0:5d:69:
1a:22:13:4e:89:d1:98:cb:f6:07:22:5d:f3:4f:0b:1f:af:ff:
d8:d0:13:07:2f:d1:a7:b6:0d:c7:f3:8f:dc:a8:3b:36:8f:d1:
14:38:85:ef:33:7e:01:5a:fa:fb:c7:2c:c7:bc:5a:3b:47:b8:
ea:d2:6b:3c:09:60:0b:75:09:15:55:19:e5:06:23:7c:c0:53:
b6:81:84:d7:91:fa:66:e5:44:ce:55:d2:71:3f:a7:e4:e4:31:
ad:0d:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:45 2024 by rpki-client on console-ams.rpki-client.org