Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
File: wsO16XxGqTvDo1zHEFXE8N_GxFE.cer (raw, json)
Hash identifier: vxIYgmH5u7XUF7ovhNBAQjMYevAhMz6xlqmZDG+XfQU=
Subject key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887163F781C84627FDB65E125C582D9038
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 31 May 2023 10:39:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 9125
AS: 48164
AS: 50781
AS: 52021
AS: 56681
IP: 5.172.32.0/21
IP: 89.23.64.0/19
IP: 91.193.75.0/24
IP: 92.42.248.0/21
IP: 93.93.192.0/21
IP: 95.140.112.0/20
IP: 109.111.224.0/19
IP: 178.254.128.0/18
IP: 185.157.44.0/22
IP: 193.104.68.0/24
IP: 217.169.208.0/20
IP: 2a02:b58::/32
Validation: Failed, certificate revoked on Tue 06 Jun 2023 07:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:63:f7:81:c8:46:27:fd:b6:5e:12:5c:58:2d:90:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 31 10:39:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:dc:00:63:d9:de:47:62:90:a8:27:3a:6d:98:
83:2e:c7:dc:90:5c:b8:83:97:00:a2:f7:0a:8c:76:
7f:11:06:79:8d:b9:2a:0d:b0:71:14:5b:ed:00:34:
1d:4d:52:4e:79:df:0b:f7:99:3b:cf:84:02:00:4b:
b2:12:65:e6:51:41:b3:33:24:e5:82:55:b4:e4:ce:
7d:f8:7b:d4:cb:e8:7b:f1:33:26:32:fa:be:1c:50:
fd:e3:bc:ab:0c:a6:f6:35:fa:d7:0d:4b:a1:db:18:
13:dc:62:b4:e9:c6:88:49:56:55:be:59:16:2e:2a:
7f:37:0e:36:7e:b6:42:3c:0b:fa:80:ec:c6:c5:f1:
69:ac:8d:08:af:51:05:74:3f:10:fc:55:4d:70:f1:
7b:98:06:c3:df:74:a1:f3:f9:71:b3:8e:56:a4:ed:
dc:69:cd:0d:3a:c2:27:39:9a:d1:a0:92:06:7a:86:
13:54:34:73:6b:6d:b9:ab:94:14:d2:35:35:2d:06:
45:46:3f:f7:c3:35:2b:69:78:71:2c:4e:9f:a7:f4:
87:96:cc:be:a2:f7:bf:f4:66:b0:7a:f3:a1:03:66:
43:20:ce:6b:37:61:52:73:59:59:35:80:43:61:67:
08:4f:98:89:8e:ff:eb:44:62:e9:fb:44:75:86:83:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.32.0/21
89.23.64.0/19
91.193.75.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0/20
109.111.224.0/19
178.254.128.0/18
185.157.44.0/22
193.104.68.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9125
48164
50781
52021
56681
Signature Algorithm: sha256WithRSAEncryption
35:67:a4:27:65:4f:32:b1:e5:89:2d:44:22:fa:26:bf:2c:0e:
6e:c0:ca:e9:ba:c5:03:a9:d4:e9:c5:8e:06:95:20:23:9a:f7:
d2:b8:8d:1c:50:d3:36:e4:73:88:a0:06:24:88:e2:47:b5:84:
0c:74:a2:6d:01:61:1a:96:2f:01:9f:4c:8b:be:12:84:61:80:
e1:33:90:d9:47:fb:ec:af:7d:16:a5:de:db:4c:8c:34:df:08:
1a:58:0d:93:25:ba:b6:32:7b:af:e0:a8:64:ef:c7:13:7d:68:
4a:7f:b0:70:06:59:20:00:ff:ae:c9:94:43:5d:40:5d:26:a8:
eb:3a:6c:59:83:84:5a:e0:c9:9b:80:bf:36:97:a7:7c:26:ca:
f9:a2:ab:8e:77:95:e9:28:8d:ad:c4:6b:49:0c:85:e4:6a:a1:
c3:f8:84:2e:18:a3:dc:39:2c:5a:40:76:f6:82:24:d7:89:e3:
a8:e5:a4:fc:03:27:9f:98:6f:f3:1a:b9:a7:6e:17:3e:96:b3:
ba:58:39:22:3d:db:90:3b:19:5e:cc:ae:39:f7:bd:78:fb:ac:
a4:6e:f0:dc:89:63:0e:2b:aa:ce:09:30:20:c0:72:67:92:67:
51:16:0e:87:89:2d:db:96:e5:5a:80:4a:7d:3b:eb:f0:dd:cb:
a9:18:bc:f0
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgISAYhxY/eByEYn/bZeElxYLZA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNTMxMTAzOTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmMzYjVlOTdjNDZhOTNiYzNhMzVjYzcxMDU1YzRmMGRmYzZjNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/NwAY9neR2KQqCc6bZiDLsfckFy4
g5cAovcKjHZ/EQZ5jbkqDbBxFFvtADQdTVJOed8L95k7z4QCAEuyEmXmUUGzMyTl
glW05M59+HvUy+h78TMmMvq+HFD947yrDKb2NfrXDUuh2xgT3GK06caISVZVvlkW
Lip/Nw42frZCPAv6gOzGxfFprI0Ir1EFdD8Q/FVNcPF7mAbD33Sh8/lxs45WpO3c
ac0NOsInOZrRoJIGeoYTVDRza225q5QU0jU1LQZFRj/3wzUraXhxLE6fp/SHlsy+
ove/9GawevOhA2ZDIM5rN2FSc1lZNYBDYWcIT5iJjv/rRGLp+0R1hoNMnQIDAQAB
o4IC/jCCAvowHQYDVR0OBBYEFMLDtel8Rqk7w6NcxxBVxPDfxsRRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzE2NTFi
NS1jZGU1LTRjZGYtYTI5Zi00MmI0ZmI4MzRmMTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMTY1MWI1
LWNkZTUtNGNkZi1hMjlmLTQyYjRmYjgzNGYxNS8xL3dzTzE2WHhHcVR2RG8xekhF
RlhFOE5fR3hGRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF
BwEHAQH/BFswWTBIBAIAATBCAwQDBawgAwQFWRdAAwQAW8FLAwQDXCr4AwQDXV3A
AwQEX4xwAwQFbW/gAwQGsv6AAwQCuZ0sAwQAwWhEAwQE2anQMA0EAgACMAcDBQAq
AgtYMC0GCCsGAQUFBwEIAQH/BB4wHKAaMBgCAiOlAgMAvCQCAwDGXQIDAMs1AgMA
3WkwDQYJKoZIhvcNAQELBQADggEBADVnpCdlTzKx5YktRCL6Jr8sDm7Ayum6xQOp
1OnFjgaVICOa99K4jRxQ0zbkc4igBiSI4ke1hAx0om0BYRqWLwGfTIu+EoRhgOEz
kNlH++yvfRal3ttMjDTfCBpYDZMlurYye6/gqGTvxxN9aEp/sHAGWSAA/67JlENd
QF0mqOs6bFmDhFrgyZuAvzaXp3wmyvmiq453lekoja3Ea0kMheRqocP4hC4Yo9w5
LFpAdvaCJNeJ46jlpPwDJ5+Yb/MauaduFz6Ws7pYOSI925A7GV7Mrjn3vXj7rKRu
8NyJYw4rqs4JMCDAcmeSZ1EWDoeJLduW5VqASn076/Ddy6kYvPA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:53 2024 by rpki-client on console-ams.rpki-client.org