Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vpsCu4H3tbD7YqGko9xaiNHL5P8.cer
File: vpsCu4H3tbD7YqGko9xaiNHL5P8.cer (raw, json)
Hash identifier: jegpOc3CX4eMn3sLcTmsGpwSgsxR38TrZ+z1xaNPrhM=
Subject key identifier: BE:9B:02:BB:81:F7:B5:B0:FB:62:A1:A4:A3:DC:5A:88:D1:CB:E4:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FACB4D475FFE43580305232FD7955A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/vpsCu4H3tbD7YqGko9xaiNHL5P8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 201508
IP: 46.36.192.0/21
IP: 185.4.24.0/22
IP: 185.42.0.0/22
IP: 185.65.164.0/22
IP: 185.182.52.0/22
IP: 185.199.56.0/22
IP: 185.208.240.0/22
IP: 185.245.212.0/22
IP: 194.126.152.0/22
IP: 2a02:66c0::/32
IP: 2a04:8d80::/29
IP: 2a05:1c0::/29
IP: 2a09:1580::/29
IP: 2a0a:e480::/29
Validation: Failed, certificate revoked on Wed 05 Apr 2023 13:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:cb:4d:47:5f:fe:43:58:03:05:23:2f:d7:95:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be9b02bb81f7b5b0fb62a1a4a3dc5a88d1cbe4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:d6:30:88:f6:54:3c:7d:83:48:c7:17:99:
4a:9a:63:ab:8d:0d:a4:99:5e:47:48:df:19:7e:b4:
8a:0a:2c:50:22:81:83:0f:aa:9a:4c:ec:2e:df:1c:
4e:10:1c:3a:ea:13:53:6d:94:1c:cf:ee:a8:13:75:
6a:97:fe:4a:e5:a6:04:96:08:09:3d:c8:89:95:0f:
34:eb:b5:98:fc:bf:b3:cb:23:cf:7d:e0:6f:e2:8e:
8e:fa:20:f3:4d:c1:e7:b2:6b:6e:05:9e:e4:20:f4:
de:8c:5d:3f:c6:17:ad:7e:f5:b0:bd:7c:16:12:47:
3f:f3:15:18:a6:9c:82:81:8f:eb:d7:31:f7:21:4b:
e0:2e:ab:8a:37:98:0f:dc:d5:08:79:5a:82:45:0e:
c8:9a:4e:af:b2:98:b1:72:64:3d:30:ff:02:f7:52:
ee:e4:40:ec:13:3b:83:d7:0f:12:3c:e7:bc:7f:b2:
34:a6:ad:8d:8d:38:2c:56:d5:76:90:8d:f5:48:01:
7d:4f:12:04:c9:e4:4d:9d:ae:b8:c9:90:e6:08:1e:
a7:9c:54:0e:cf:4b:73:1f:0c:05:79:03:4f:01:75:
e7:2a:fd:29:3f:07:82:05:19:0a:fd:c1:11:e3:85:
1a:6b:d3:20:87:79:42:b4:38:32:f3:c1:6f:89:c8:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9B:02:BB:81:F7:B5:B0:FB:62:A1:A4:A3:DC:5A:88:D1:CB:E4:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f9de18-c8c1-48fd-99ab-cfacb83fe8ed/1/vpsCu4H3tbD7YqGko9xaiNHL5P8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.192.0/21
185.4.24.0/22
185.42.0.0/22
185.65.164.0/22
185.182.52.0/22
185.199.56.0/22
185.208.240.0/22
185.245.212.0/22
194.126.152.0/22
IPv6:
2a02:66c0::/32
2a04:8d80::/29
2a05:1c0::/29
2a09:1580::/29
2a0a:e480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201508
Signature Algorithm: sha256WithRSAEncryption
09:e7:fb:a5:0c:89:f2:9f:71:b6:b6:24:e0:ff:34:d5:b2:ee:
03:b9:f7:64:41:df:7b:a4:61:eb:7b:f3:87:fe:b8:42:fb:60:
2a:72:1c:fd:a0:70:ad:a4:82:35:e6:35:48:32:8b:0e:c1:bf:
9a:e6:d5:5c:f3:4b:71:6b:92:dc:f0:6f:fe:0c:1c:2a:da:26:
f6:9e:1b:ea:1a:d0:81:78:09:fc:b5:44:6d:a7:fd:5e:aa:11:
27:9c:b1:1c:ae:d3:a7:cd:f3:e6:91:56:79:51:3b:1f:2b:23:
d5:07:b9:76:e7:59:d2:47:83:2c:f8:90:42:f9:99:01:6a:1c:
db:5c:b2:00:21:09:22:79:34:39:65:d7:cf:98:e5:8b:9f:6f:
59:aa:c7:ef:ad:11:17:26:f8:d7:89:1c:d4:c0:2b:a5:5d:d2:
4a:f7:0e:f2:3a:a0:a5:5f:b5:33:21:eb:ea:53:ff:ad:22:6e:
7c:b8:2f:c1:b4:48:16:ce:b5:9f:fa:12:93:48:91:5d:fb:69:
ed:c6:72:de:7c:c5:b7:84:b1:ef:6b:f1:8d:e7:6c:32:67:9e:
2a:37:95:2e:4f:f9:a7:02:89:f3:07:69:b5:68:47:d0:82:0d:
c6:62:63:69:a3:d3:3f:4c:d6:ea:96:fa:9e:47:59:ea:d6:1e:
67:ac:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:36 2024 by rpki-client on console-ams.rpki-client.org