Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xvRusYdtYVEfN1hj5NtTZ7TaPBU.cer
File: xvRusYdtYVEfN1hj5NtTZ7TaPBU.cer (raw, json)
Hash identifier: nAydSEKO4ytMWPjj+x+sO5i8LwO3vpyBTrYfyVgxlv8=
Subject key identifier: C6:F4:6E:B1:87:6D:61:51:1F:37:58:63:E4:DB:53:67:B4:DA:3C:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D545AABF9674CE563E48EF2847D54688D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/f1c8ba-91ae-4eb3-9ee1-e972b71009ec/1/xvRusYdtYVEfN1hj5NtTZ7TaPBU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/f1c8ba-91ae-4eb3-9ee1-e972b71009ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Jan 2024 08:34:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215726
IP: 185.31.202.0/24
IP: 2a13:1780::/29
Validation: Failed, certificate revoked on Tue 30 Jan 2024 08:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:54:5a:ab:f9:67:4c:e5:63:e4:8e:f2:84:7d:54:68:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 29 08:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6f46eb1876d61511f375863e4db5367b4da3c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:a2:05:72:b8:12:34:80:74:09:ce:20:e8:
68:71:2e:1c:ba:89:38:40:a7:34:f0:0e:6d:c9:3d:
a2:8f:cd:50:d5:ec:d0:cf:73:46:00:5a:f4:32:62:
ba:4f:7f:fa:0a:45:90:01:5c:fa:58:f7:6c:70:f8:
82:44:cf:83:94:c1:44:16:f2:e4:55:a5:fd:10:8b:
5a:b8:7d:80:c5:2a:1f:00:73:e8:05:52:21:ea:f4:
60:3d:2d:08:dc:b9:48:d0:7d:62:c7:22:b1:93:ee:
50:21:ef:18:a0:a7:4b:fc:b7:83:6a:b9:ed:23:72:
8a:bf:71:d2:f7:e5:4a:26:85:72:75:99:d5:57:97:
be:20:dd:fd:08:e7:28:2f:2f:05:4c:8b:20:ba:e3:
2a:13:0b:13:a6:4a:b3:3f:5b:e5:c6:0a:22:01:8a:
5a:04:79:d2:4c:5d:04:80:a1:0d:42:59:df:85:10:
d2:77:92:81:bc:36:b7:0f:27:cf:32:17:6b:8c:82:
1b:ac:e5:56:89:3e:b6:ef:07:b5:ae:b9:14:bc:21:
f9:2e:9c:61:ac:e4:49:06:79:70:64:6c:79:4a:16:
ea:9f:e6:1f:73:9b:74:04:79:ee:a7:69:ac:1e:64:
09:46:d7:90:db:65:23:cc:c9:6f:47:74:b8:82:37:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F4:6E:B1:87:6D:61:51:1F:37:58:63:E4:DB:53:67:B4:DA:3C:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f1c8ba-91ae-4eb3-9ee1-e972b71009ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f1c8ba-91ae-4eb3-9ee1-e972b71009ec/1/xvRusYdtYVEfN1hj5NtTZ7TaPBU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.202.0/24
IPv6:
2a13:1780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215726
Signature Algorithm: sha256WithRSAEncryption
6f:5b:2e:88:b3:9c:8f:b4:4f:0a:dc:a2:f0:73:37:d9:8b:f3:
3d:ab:fc:02:85:73:5c:b2:f0:da:f7:41:b5:a8:23:75:76:c3:
39:64:f0:e0:0d:51:45:f8:58:c3:11:4c:fa:58:43:fe:fd:e0:
21:b9:2b:f3:6c:70:57:7a:11:00:17:b2:60:58:69:78:ef:1e:
58:1b:6c:e2:ad:e1:8d:26:f1:0a:a7:a4:58:c3:ca:08:49:1b:
3c:55:17:84:a7:02:55:db:fa:db:14:18:04:95:6b:a9:da:97:
ca:0a:a7:e5:e1:87:c2:35:55:3a:29:5f:79:bb:e8:ad:f4:cf:
64:88:05:eb:30:4e:4f:b2:70:97:ba:6c:2e:81:43:40:90:e9:
40:8c:ce:98:d1:c6:b1:3c:3a:33:d2:23:ff:cb:3b:9d:e3:a3:
04:8a:1d:cc:71:76:58:5e:89:0a:9e:ce:5b:c3:9f:03:d5:65:
ec:4d:5d:bd:04:63:99:21:bf:1d:9a:f0:02:12:e1:01:69:9c:
ec:6d:ad:ff:87:72:5a:48:76:f7:0d:f1:30:9d:4f:0f:9e:93:
27:8a:b9:84:74:a8:78:08:2e:f7:6d:42:67:cd:dc:59:a8:78:
d6:4e:c6:25:73:81:90:86:4b:d9:f1:cd:37:52:5a:c9:60:5d:
d8:67:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:04 2024 by rpki-client on console-fra.rpki-client.org