Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wSRFkPbQKsWN_r-RHaGUYaMHuxo.cer
File: wSRFkPbQKsWN_r-RHaGUYaMHuxo.cer (raw, json)
Hash identifier: s24GU6cPOce3fau0sTnc7/EVO1xHf8D3elfV3y8VA8A=
Subject key identifier: C1:24:45:90:F6:D0:2A:C5:8D:FE:BF:91:1D:A1:94:61:A3:07:BB:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018760A36496E6B5874E6E023542D450C37B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/HYSP/14/C1244590F6D02AC58DFEBF911DA19461A307BB1A.mft
caRepository: rsync://rpki.co/repo/HYSP/14
Notify URL: https://rpki.co/rrdp/notification.xml
Certificate not before: Sat 08 Apr 2023 11:32:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 51818
AS: 59486
IP: 185.0.19.0/24
IP: 2001:7f8:2::/48
IP: 2a13:c000::/29
Validation: Failed, certificate revoked on Mon 10 Apr 2023 00:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:a3:64:96:e6:b5:87:4e:6e:02:35:42:d4:50:c3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 11:32:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1244590f6d02ac58dfebf911da19461a307bb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:c1:56:82:14:2c:aa:24:dd:fe:d4:8b:3f:
54:fe:61:b8:c0:c5:02:c2:b3:93:81:6d:ec:c1:db:
55:07:29:ba:88:23:0b:48:72:ae:42:1c:da:c4:dd:
26:5f:c4:2b:c5:e1:dd:39:8e:63:35:2b:c4:20:92:
14:1e:cc:13:f1:cf:00:fb:fe:ac:25:f7:1a:ae:29:
54:d8:dd:b8:25:93:9d:c9:46:bb:cf:ee:03:61:48:
54:46:37:d5:8e:84:f8:ca:6b:72:a3:78:b4:74:f5:
c4:b0:f2:17:2d:7c:1f:63:55:b4:42:bf:ef:4d:cd:
74:92:e6:39:c1:98:60:64:0c:b6:8b:8d:73:d1:fa:
2c:82:5d:b5:10:dd:c6:30:01:ba:b5:65:61:dd:0a:
f8:12:0e:f5:57:c3:fb:f8:1e:3a:e7:4e:0a:f5:a8:
ef:25:95:2d:2a:48:d4:a5:3d:64:83:dd:50:75:40:
68:a9:da:59:9b:be:f0:60:e3:84:f4:00:f6:39:d6:
05:1d:9e:92:3c:58:84:af:dc:e5:6b:1e:4c:7c:76:
1a:3b:46:ab:9a:c5:36:9e:b4:48:ea:7f:92:12:39:
17:ba:99:2d:f9:7c:cb:cd:0a:ee:ed:4f:84:3c:83:
ac:de:05:ed:fd:6b:de:d3:31:83:75:58:10:4b:9e:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:24:45:90:F6:D0:2A:C5:8D:FE:BF:91:1D:A1:94:61:A3:07:BB:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/HYSP/14
RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/14/C1244590F6D02AC58DFEBF911DA19461A307BB1A.mft
RPKI Notify - URI:https://rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.19.0/24
IPv6:
2001:7f8:2::/48
2a13:c000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51818
59486
Signature Algorithm: sha256WithRSAEncryption
1c:e4:7a:52:b9:b0:0c:69:94:08:dc:f9:ea:5a:90:f1:83:a6:
1e:1e:54:5d:c4:81:6e:9f:27:05:35:c6:75:2e:4f:46:98:e8:
c6:4c:c6:8f:e4:67:50:8b:d7:1a:92:35:0a:83:ea:b8:30:66:
8f:84:43:ff:9f:04:73:cb:98:a8:75:d3:85:e8:79:76:4c:84:
c8:b6:43:60:4b:5b:e1:18:fa:6b:84:88:5d:28:5f:fe:9a:7b:
8e:c3:71:e1:ee:03:64:85:69:00:5b:3b:09:9e:e2:d8:aa:35:
d3:34:e6:54:4b:22:9b:5c:8e:8b:c1:f0:fd:84:b7:88:37:a1:
8c:64:6d:b5:e0:5a:fd:4e:f7:d0:5e:95:dd:75:65:17:dc:3d:
63:05:91:d0:96:68:a2:31:98:58:5e:fb:67:90:5b:0f:d1:8e:
9c:df:7a:f7:6a:6d:84:91:c1:a0:d3:4f:48:89:14:1a:e2:c7:
08:75:93:82:43:9b:55:2d:07:f3:a9:0c:5a:b2:8f:71:29:b2:
da:57:b3:8a:c0:16:12:5a:f7:93:fc:1d:dd:cc:da:50:87:62:
65:f8:19:9d:51:07:02:ae:81:28:a9:c9:d9:ba:5c:22:14:64:
5d:37:fb:d8:90:ca:aa:e5:d3:33:69:04:02:a5:39:b9:0e:12:
3b:d5:8a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:46 2024 by rpki-client on console-ams.rpki-client.org