Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s8p-VT_C8swfHzyRGuNhufR2ovY.cer
File: s8p-VT_C8swfHzyRGuNhufR2ovY.cer (raw, json)
Hash identifier: yTS1nm/22zoQzUujiRALEldNIDaIRrOw9g979Gy6frU=
Subject key identifier: B3:CA:7E:55:3F:C2:F2:CC:1F:1F:3C:91:1A:E3:61:B9:F4:76:A2:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E654C50649213465C5C30AFA26237FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/6f4796-4d6c-4c31-9317-9b4f26afd100/1/s8p-VT_C8swfHzyRGuNhufR2ovY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/6f4796-4d6c-4c31-9317-9b4f26afd100/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 59607
IP: 91.244.184.0/21
IP: 91.244.208.0/20
Validation: Failed, certificate revoked on Mon 18 Dec 2023 16:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:4c:50:64:92:13:46:5c:5c:30:af:a2:62:37:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3ca7e553fc2f2cc1f1f3c911ae361b9f476a2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:b4:dc:5a:4c:de:fd:77:92:e7:81:7b:49:
59:cc:00:9b:35:dd:cb:58:28:d7:97:c0:71:41:b1:
10:97:f7:5e:06:fc:7d:69:61:27:23:1e:e1:46:62:
2c:3b:a3:48:f0:f6:50:ca:0a:aa:a0:6c:d0:ee:6c:
74:65:97:cb:47:8e:9d:9a:60:02:3f:9a:a5:97:d6:
6d:59:43:71:ed:22:f5:ea:3f:ff:60:64:80:98:ed:
b4:76:dd:71:f0:4e:18:a0:58:36:9a:70:30:9b:21:
52:6c:23:84:7d:87:8b:8b:1e:d5:72:0c:86:b2:aa:
5e:0a:7a:86:a4:b4:46:eb:12:60:d8:a3:e3:1a:00:
54:39:17:1e:95:9a:ef:44:da:f9:13:67:df:77:3f:
18:8d:76:69:1a:35:24:d4:fa:a1:50:5e:10:7f:dd:
4c:e8:61:a4:8e:26:c6:0a:81:05:67:b1:79:8f:f8:
f9:cf:25:79:36:c6:bc:98:c8:b1:0d:4e:f3:1b:3c:
5c:f8:26:7d:21:6c:24:c2:72:e6:52:03:f0:44:8a:
fb:e6:c6:35:f1:46:0f:e0:ec:f2:5d:09:34:f2:c1:
4b:7a:39:85:4b:a5:47:b6:7e:ac:7e:84:2b:44:35:
d2:0b:c3:20:8a:c4:e6:a9:e3:39:af:ab:9f:e6:fe:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CA:7E:55:3F:C2:F2:CC:1F:1F:3C:91:1A:E3:61:B9:F4:76:A2:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6f4796-4d6c-4c31-9317-9b4f26afd100/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6f4796-4d6c-4c31-9317-9b4f26afd100/1/s8p-VT_C8swfHzyRGuNhufR2ovY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.184.0/21
91.244.208.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59607
Signature Algorithm: sha256WithRSAEncryption
a8:62:10:56:78:18:1c:a5:42:17:84:6d:84:1f:1d:0d:e7:46:
a4:56:a6:ea:41:90:f1:26:f1:ec:9f:fb:69:6f:f9:25:11:ff:
14:78:0e:42:a7:03:a7:e8:a5:01:19:e0:3e:88:50:45:bd:63:
56:6e:01:1b:f0:8f:b5:ea:84:dd:17:2b:29:b5:0a:cf:4f:0d:
f1:b7:dc:84:5d:02:05:d4:87:13:0a:43:d5:5a:14:e1:26:98:
4e:86:c8:d4:b1:1c:71:3c:cc:45:e6:d4:09:28:8d:24:2c:3d:
77:db:13:4c:c7:3a:ac:89:d3:ae:62:02:46:c5:97:0d:38:cc:
8b:e8:0d:f1:53:69:31:fd:7e:9b:ed:4d:fc:97:61:24:51:ee:
82:4e:6e:54:c3:cd:1a:de:ee:f9:f6:c9:1b:4e:03:f8:b5:ac:
04:5b:de:91:96:34:bb:6b:8e:89:dc:8d:d7:03:91:9d:71:26:
77:bf:36:83:f6:2d:0c:c4:86:1d:39:47:5c:e2:0a:87:8c:4d:
b6:64:67:94:f5:82:52:a8:d5:b8:cb:a3:53:02:04:70:6e:8b:
b6:e6:25:24:e4:01:8e:32:3e:9f:b8:89:56:60:74:2a:03:36:
c4:e8:51:44:fc:cd:0b:e3:ba:ad:1c:0f:30:d8:dc:ac:38:01:
ca:f6:97:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:10 2024 by rpki-client on console-fra.rpki-client.org