Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.cer
File: xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.cer (raw, json)
Hash identifier: H56jTWb9JnWW2wVtO5d30G4nrNBn6gmhywRAHZ9mAe0=
Subject key identifier: C5:55:E8:05:33:44:3D:4E:FF:1E:DF:98:99:BB:3F:9C:5B:8A:1B:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649EBEEACD1A22BA53069B91AF899AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210306
IP: 185.3.156.0/22
IP: 193.35.92.0/22
IP: 2a02:53c0::/32
Validation: Failed, certificate revoked on Tue 26 Mar 2024 15:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:eb:ee:ac:d1:a2:2b:a5:30:69:b9:1a:f8:99:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c555e80533443d4eff1edf9899bb3f9c5b8a1bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:8e:7d:4b:46:ad:3e:4a:22:1c:32:d6:67:
aa:ff:c5:32:74:9d:f3:1b:dc:9d:cb:f6:74:cc:e1:
bd:00:08:20:62:2f:48:f6:2d:0a:9d:29:9f:28:18:
be:59:bc:a8:c0:92:7f:1e:75:76:c7:fc:fd:69:3f:
86:9a:76:38:bf:64:00:8c:f8:dc:7f:70:dc:b1:67:
b7:e8:62:86:a8:a0:62:20:23:28:63:ba:f1:74:69:
29:49:bc:ef:02:c6:ea:4d:c6:b3:3a:26:dd:2a:92:
d0:50:23:16:c1:32:27:dc:14:d4:bd:72:2c:8c:80:
61:e9:c2:7e:f3:5d:4f:f9:ed:45:d5:98:10:48:b2:
80:4f:c7:88:4a:5f:e5:50:f6:c5:3a:e0:30:fc:d5:
2a:8b:38:bc:2f:22:bc:b8:83:d9:3f:26:58:43:c9:
63:c5:eb:30:52:c8:ee:2c:ee:d7:f8:78:86:ee:7c:
de:3d:90:77:62:81:57:32:fa:b7:b6:b4:f2:e1:ac:
2d:b5:fd:aa:2c:f3:b8:92:9b:c2:ce:9b:95:89:45:
5d:43:d0:e5:05:66:b9:ae:7f:33:7d:2e:62:6b:12:
a7:5a:0d:b6:79:28:1a:9a:46:d8:48:21:2d:23:5b:
49:98:58:7a:29:42:7e:ff:6c:e1:f8:69:c1:80:21:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:55:E8:05:33:44:3D:4E:FF:1E:DF:98:99:BB:3F:9C:5B:8A:1B:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.156.0/22
193.35.92.0/22
IPv6:
2a02:53c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210306
Signature Algorithm: sha256WithRSAEncryption
4e:d8:48:4d:8b:05:66:54:30:dd:cc:d4:5f:ca:29:cd:65:59:
ea:48:03:99:09:51:ca:d6:f2:d5:4b:9a:f9:1c:97:e6:0c:38:
bb:6a:f6:34:e7:90:fd:22:88:b2:68:c6:1c:4d:88:84:a0:1f:
e0:5a:ee:83:83:f0:0f:e2:73:64:2d:b9:43:b4:06:2c:8a:96:
7f:79:71:02:e0:78:6b:0a:07:dc:44:3d:99:21:a9:03:f2:9d:
0f:1c:c3:91:e5:35:db:83:0e:33:b0:a1:5d:f8:aa:11:c1:25:
89:26:60:ba:23:41:da:1b:68:60:b6:6e:fd:77:26:a3:f5:20:
52:69:a6:d6:33:39:76:a3:8d:51:a8:da:57:ce:e4:15:11:25:
a9:b0:74:7d:cb:8f:ff:3d:5b:69:43:cc:bb:f9:dd:7d:1e:e7:
27:f4:4a:fb:89:0f:3b:88:68:44:5e:ad:3e:ec:0a:51:45:2b:
c5:fc:6e:b6:28:18:bf:29:4d:e4:6c:d8:f6:ea:38:67:b3:d4:
86:0c:58:d5:a6:0c:c9:ab:ce:d6:49:cb:aa:fb:5e:ab:0e:05:
a3:b2:81:d3:b4:df:1c:b1:c3:4b:e0:ad:b3:fe:22:4a:20:13:
93:47:30:ce:26:9c:18:f5:72:06:6e:0f:18:4b:46:b0:34:98:
00:5e:2d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:01 2024 by rpki-client on console-fra.rpki-client.org