Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.cer
File: vMNrOgpVvrUp5AcyhYiWPYZ4bL8.cer (raw, json)
Hash identifier: iELNSAOPoDEKuNNBKpkSCpN/V/PnLx/uVYh4c0X0A04=
Subject key identifier: BC:C3:6B:3A:0A:55:BE:B5:29:E4:07:32:85:88:96:3D:86:78:6C:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F1A6FC2E23F13F2E539902598A959
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 205836
IP: 185.157.128.0/22
IP: 2a07:a4c0::/29
Validation: Failed, certificate revoked on Thu 30 Nov 2023 10:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:1a:6f:c2:e2:3f:13:f2:e5:39:90:25:98:a9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcc36b3a0a55beb529e407328588963d86786cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:d5:95:52:05:d0:8a:40:55:0d:0c:30:b2:
56:4e:98:37:38:7e:91:b5:b1:07:35:b7:9b:13:38:
09:47:b1:01:07:b1:b0:99:12:e8:51:3f:89:ed:be:
47:b3:ba:9d:a3:57:7f:cc:a9:8a:7e:8a:ba:7d:f9:
e3:83:f9:16:b6:9e:f1:7e:6b:4f:be:8a:e4:43:7f:
a0:64:ea:5b:98:8b:3d:f8:b4:c9:70:90:20:26:29:
14:11:83:0c:2a:55:53:b5:b3:0b:1c:7c:bb:9c:2e:
bc:f8:96:9e:8a:9c:49:a5:6f:c9:c4:7d:98:2a:64:
c5:cb:40:2c:a2:14:ba:76:06:e8:0a:0e:89:0d:fe:
56:0e:ec:80:89:40:7f:76:79:91:cb:59:3c:27:15:
85:14:5a:c1:24:43:7c:07:5f:65:59:0e:57:70:08:
bc:92:77:5b:fd:34:5b:d7:ad:84:aa:74:bc:4a:e8:
0a:c6:10:aa:48:05:6b:db:e1:1d:2c:45:d3:7e:15:
4e:84:50:5d:12:4c:c3:ae:06:16:a8:7f:5e:06:8c:
54:6d:c2:5d:b8:96:b2:55:87:11:8c:3e:8e:e4:16:
37:a2:97:57:5d:d3:b6:82:1b:4f:f8:b6:4f:d3:aa:
a3:4a:32:1b:53:db:71:ac:2b:9a:9a:83:bb:78:63:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:6B:3A:0A:55:BE:B5:29:E4:07:32:85:88:96:3D:86:78:6C:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.128.0/22
IPv6:
2a07:a4c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205836
Signature Algorithm: sha256WithRSAEncryption
0a:2d:79:30:2f:f3:10:4d:13:cc:05:39:3a:8c:58:14:c7:f1:
f1:a7:b4:4f:c3:9e:c8:5f:a5:78:54:96:c6:e1:de:08:20:21:
e9:91:9b:e7:4e:5c:fd:d2:5c:4c:d2:5d:4c:a2:c6:97:b1:ed:
65:25:c9:f3:a3:24:8e:9b:09:e6:f5:59:82:7b:04:7a:07:9b:
aa:0d:9c:18:d0:ef:f3:05:14:6d:0c:f9:ae:82:10:17:8a:c7:
ea:8a:0b:f3:56:8b:1d:b1:79:4e:07:c8:64:85:34:37:87:00:
77:d1:7a:0b:5b:46:2b:41:0b:2c:a0:d5:2e:14:25:45:98:68:
7e:a8:f7:23:36:e6:2e:7c:49:97:df:da:9d:a5:01:4c:16:37:
ac:95:b2:c5:6e:2d:9d:96:2d:af:49:7e:cb:e9:cb:a8:e5:8d:
b8:df:a1:d5:32:6c:0a:84:53:a2:e2:e2:d5:9d:88:e8:72:55:
81:20:b8:e7:d2:e5:05:1c:0c:36:2d:86:9c:c1:89:f9:da:83:
f2:22:cc:3d:0d:dc:70:7a:18:35:c0:92:7c:a3:d6:12:62:e2:
22:a3:03:55:0a:a4:7b:3f:55:f2:66:24:bf:b7:76:bf:7b:fe:
0d:f8:15:49:d1:25:d2:36:d0:d3:86:e7:39:58:be:76:09:c8:
65:27:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:40 2024 by rpki-client on console-fra.rpki-client.org