Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wT69Kcaf8KKzPaxthrSIulDJ6Ig.cer
File: wT69Kcaf8KKzPaxthrSIulDJ6Ig.cer (raw, json)
Hash identifier: Ehe516+Cul+AKx2GOi0mKfVnY7Z6IcNGYOo8JBijLJc=
Subject key identifier: C1:3E:BD:29:C6:9F:F0:A2:B3:3D:AC:6D:86:B4:88:BA:50:C9:E8:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC793595658CA4D97FAFC2A7A6FB56B93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/868832-9bc8-433c-a54e-cd4d2f163c32/1/wT69Kcaf8KKzPaxthrSIulDJ6Ig.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/868832-9bc8-433c-a54e-cd4d2f163c32/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50344
IP: 193.104.236.0/24
IP: 2001:67c:26fc::/48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 13:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:59:56:58:ca:4d:97:fa:fc:2a:7a:6f:b5:6b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c13ebd29c69ff0a2b33dac6d86b488ba50c9e888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:e7:b7:7f:29:fc:a6:91:e3:26:a0:7c:56:
8f:59:bc:45:43:12:5a:ee:1b:94:9a:85:5c:e1:de:
fd:3c:e1:d0:9e:fa:3a:de:e3:1a:81:21:0c:9d:4f:
9f:6d:aa:43:87:13:9e:20:2f:59:83:8a:40:06:b9:
2a:43:ff:eb:cd:4b:4b:7d:6e:87:6d:09:1b:55:e6:
a4:9a:40:28:10:29:12:41:ea:88:6c:39:93:37:35:
e7:e6:d5:d9:a6:b4:54:71:91:69:99:c0:59:9b:25:
f8:9b:8c:c5:87:6c:88:92:ba:3d:48:62:d0:da:a4:
c0:73:bb:ae:a7:cd:9c:5b:ac:55:3f:68:ed:21:79:
1e:81:c5:06:32:18:7d:4d:57:f7:28:be:d0:0e:de:
79:01:bf:01:72:51:0b:b3:38:f2:8d:c8:9a:e2:6f:
76:6d:b5:c8:f1:7c:04:37:c1:d0:4a:9a:10:73:b9:
fc:f0:2a:c1:61:8c:55:e7:b0:e0:c8:26:c9:a3:34:
72:b0:84:36:1a:41:42:8d:b3:8b:64:c9:81:76:7d:
3c:1c:28:88:42:27:86:8d:f0:9a:46:82:ad:37:c4:
ce:e6:67:72:8f:23:aa:73:64:50:23:f0:72:a6:b0:
75:fe:c7:b4:85:d2:d9:53:7f:57:84:db:de:94:04:
1b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:BD:29:C6:9F:F0:A2:B3:3D:AC:6D:86:B4:88:BA:50:C9:E8:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/868832-9bc8-433c-a54e-cd4d2f163c32/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/868832-9bc8-433c-a54e-cd4d2f163c32/1/wT69Kcaf8KKzPaxthrSIulDJ6Ig.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.236.0/24
IPv6:
2001:67c:26fc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50344
Signature Algorithm: sha256WithRSAEncryption
0c:b3:3e:50:da:ff:2c:c4:5a:73:26:5d:ed:da:79:de:f4:a9:
59:07:d9:5e:e8:4e:a2:91:ad:91:b3:c7:f0:81:c6:54:d5:1b:
13:cc:a3:a3:a1:75:a6:be:9d:3c:6d:11:8e:82:f0:dd:14:91:
eb:98:99:8f:be:a1:be:5b:7d:4e:c5:46:fb:7c:50:84:aa:67:
f5:af:57:5a:ff:48:3f:d3:70:bd:f1:0f:66:08:5f:32:ba:ae:
fa:32:07:5d:25:48:48:81:b5:1d:05:5f:73:97:18:4a:b9:50:
8d:e1:69:53:f3:76:80:5b:99:df:78:52:c2:b8:4d:8c:fb:e5:
13:e6:37:23:b0:46:e0:ee:0d:7d:39:6f:4d:2b:de:72:bd:b5:
e0:9e:9e:ce:a3:b8:a2:6b:b4:35:2c:8e:6b:f8:b3:85:22:89:
ee:f2:96:af:61:eb:78:8f:40:eb:41:ee:1b:bf:bd:cd:71:dc:
20:3b:26:04:25:04:bf:a3:fb:59:ba:5e:86:1e:13:ac:d0:74:
ea:ae:4d:10:70:63:b6:32:35:62:9d:18:42:68:99:c4:a0:08:
b1:09:d6:9e:d9:4a:fa:f3:19:5a:15:a6:84:c0:77:bf:65:2e:
83:62:13:b2:2c:2f:bf:0a:b4:20:ad:2d:97:13:e9:af:9d:d2:
72:50:c3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:51 2024 by rpki-client on console-fra.rpki-client.org