Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/srDs1Dw7wdjOQ6p7vKyFwhYNqZs.cer
File: srDs1Dw7wdjOQ6p7vKyFwhYNqZs.cer (raw, json)
Hash identifier: BTMWa5bkTNG5sYRhMYRih3B0S0Q1uoFpDWMoEdykZuY=
Subject key identifier: B2:B0:EC:D4:3C:3B:C1:D8:CE:43:AA:7B:BC:AC:85:C2:16:0D:A9:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD697B81DC462F46521A20FB981C40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/2fd031-da16-4cbd-8c8c-9043feba7ee4/1/srDs1Dw7wdjOQ6p7vKyFwhYNqZs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/2fd031-da16-4cbd-8c8c-9043feba7ee4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:33:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 60180
IP: 31.222.241.0/24
IP: 2a11:83c0::/29
Validation: Failed, certificate revoked on Wed 13 Dec 2023 14:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:69:7b:81:dc:46:2f:46:52:1a:20:fb:98:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:33:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2b0ecd43c3bc1d8ce43aa7bbcac85c2160da99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:98:ba:8d:67:ad:c7:25:73:f4:20:54:ea:
d6:b1:cf:63:a0:76:0a:27:5a:91:7e:6d:12:73:05:
1f:ca:9d:d4:34:01:e2:45:1b:07:4f:47:bf:b6:af:
f2:ab:53:7a:f7:3b:60:6d:33:06:3e:74:11:c2:8e:
ff:db:9c:bd:4c:8b:a3:e3:e2:f0:40:9a:f4:f6:2d:
d7:ba:4e:a4:fb:ca:c5:52:01:32:64:5c:f2:db:a0:
c6:d2:e1:d3:ed:0c:a4:93:aa:64:9a:e9:95:51:f6:
a9:5f:c7:a2:fb:40:47:9c:b4:80:40:dc:fd:81:44:
05:4a:69:d8:56:79:15:d0:dd:10:64:d2:71:1e:c4:
7c:0d:e8:46:97:96:76:10:b7:ec:3b:cc:f2:83:10:
fd:a5:b4:01:67:0b:be:5a:fe:f2:c1:f4:e3:d5:e2:
e7:0c:1f:48:e0:2e:30:dd:e3:89:f1:bf:d8:c5:ea:
4b:a9:00:21:4a:20:b1:ef:2f:24:83:46:a9:f2:06:
cc:ff:08:e5:ba:ea:5a:d5:8a:b0:5c:4c:0b:af:84:
32:79:a4:b0:77:ee:84:5c:6f:8f:ca:65:37:97:62:
07:34:c5:27:14:af:5b:52:81:00:78:03:25:5c:3c:
ac:7c:1e:84:39:67:00:79:38:a1:dd:3d:33:06:82:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B0:EC:D4:3C:3B:C1:D8:CE:43:AA:7B:BC:AC:85:C2:16:0D:A9:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/2fd031-da16-4cbd-8c8c-9043feba7ee4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/2fd031-da16-4cbd-8c8c-9043feba7ee4/1/srDs1Dw7wdjOQ6p7vKyFwhYNqZs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.241.0/24
IPv6:
2a11:83c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60180
Signature Algorithm: sha256WithRSAEncryption
61:81:e0:43:fc:e1:df:06:c4:b7:87:58:d6:01:22:14:ef:9c:
67:14:77:ed:b2:08:a1:3d:21:7d:79:e3:29:e6:92:a0:bf:17:
22:d2:21:ea:5f:5f:c7:70:6b:b8:47:12:81:6b:ad:23:a9:51:
8e:cd:b1:d1:72:60:8b:d8:27:96:04:4a:f7:d2:ee:6d:0b:46:
f2:b9:38:db:31:6b:39:9f:36:64:50:57:e5:e8:da:46:e9:ab:
fd:d9:2b:83:a6:26:a4:f5:97:92:88:48:d6:a5:1b:ea:1f:96:
62:bc:29:2d:3d:06:63:60:43:26:29:c3:3f:8d:7c:68:ef:a1:
aa:e8:f4:38:7d:94:55:6a:76:54:96:0a:a2:95:b6:c6:0b:44:
6e:20:ab:d0:61:68:38:7b:8b:f9:ec:75:d9:db:45:44:05:9f:
03:a2:37:5f:0b:69:f2:6b:45:e5:4f:55:24:dd:a8:f3:5b:34:
95:70:52:ab:eb:28:c1:92:da:21:12:22:4c:ed:57:b8:51:22:
84:f4:16:14:28:93:2f:d8:8c:14:cd:a9:e1:09:8a:d6:29:65:
04:84:fe:bc:38:3a:0e:02:2f:96:b8:c7:6b:8f:9e:98:23:7e:
45:16:ff:f3:e2:6b:14:0d:75:fe:6b:2a:09:6d:57:e1:3a:5e:
ca:08:a6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:57 2024 by rpki-client on console-ams.rpki-client.org