Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xzveH4rbIxfNv0wMGMz72jEJBvo.cer
File: xzveH4rbIxfNv0wMGMz72jEJBvo.cer (raw, json)
Hash identifier: i3N0reeiGYMi8fvW3Kl9uITaClWSCSB2Opo41gz4Wn8=
Subject key identifier: C7:3B:DE:1F:8A:DB:23:17:CD:BF:4C:0C:18:CC:FB:DA:31:09:06:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C63074739DCBF15E2EB663D817669DDDF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/xzveH4rbIxfNv0wMGMz72jEJBvo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 13 Dec 2023 11:54:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 206097
IP: 2a04:9e80::/29
Validation: Failed, certificate revoked on Fri 15 Dec 2023 07:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:07:47:39:dc:bf:15:e2:eb:66:3d:81:76:69:dd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 13 11:54:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c73bde1f8adb2317cdbf4c0c18ccfbda310906fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:ec:c5:f5:1a:f2:0b:35:97:46:d2:21:16:
26:07:4f:32:c7:71:88:04:2d:88:92:75:9e:6e:c2:
82:3e:fe:bf:96:eb:2c:2c:82:89:cc:73:cc:06:18:
5a:89:97:eb:63:df:25:3d:4f:b4:17:c7:ee:1b:99:
69:e2:71:71:7b:82:c3:0a:17:6c:d7:78:ba:9e:1c:
8e:53:b1:31:d3:11:09:81:d8:70:5c:14:9b:9c:7d:
6c:0a:ca:22:96:9b:ac:8a:6f:91:5b:47:a8:68:25:
4c:dc:2a:dd:e1:34:aa:7b:61:b2:39:1d:e2:2a:92:
92:b7:ac:92:89:c8:2e:82:fb:be:e3:e9:52:b9:6f:
e2:73:cf:bb:15:25:b9:b8:bf:68:0f:5c:ac:ee:e7:
76:ce:dc:c5:47:c4:55:57:d6:e5:ff:86:69:17:de:
33:ba:fd:dd:35:ae:40:d7:06:b7:5e:01:e5:81:1b:
bf:30:bc:99:04:8b:14:b9:bd:31:d2:2c:89:33:32:
ad:a3:b2:a4:af:64:6f:64:b8:01:e6:b1:e2:f0:f5:
fa:96:7d:af:aa:a0:b4:f9:87:f8:d2:59:37:e8:63:
3c:a2:84:b1:38:ae:46:3e:00:b1:23:94:e8:66:ec:
95:0e:47:74:92:99:08:20:55:83:64:1a:79:a0:10:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:DE:1F:8A:DB:23:17:CD:BF:4C:0C:18:CC:FB:DA:31:09:06:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/xzveH4rbIxfNv0wMGMz72jEJBvo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206097
Signature Algorithm: sha256WithRSAEncryption
8f:f8:52:2e:57:54:a9:f5:02:c8:1b:6b:69:7c:87:6c:49:7b:
38:c4:a9:c8:83:f3:57:0b:f3:19:2c:0a:18:4c:ee:6b:07:4c:
70:bc:0a:96:c7:c8:01:27:fe:90:87:39:1c:ea:1f:af:98:bb:
0f:a5:d9:3d:fc:e4:07:38:a7:88:bc:80:a0:b9:dc:88:d4:a3:
e0:00:2f:38:b4:b8:88:95:38:02:e5:ff:04:7e:af:e8:b9:86:
4c:78:07:0d:77:52:a1:5a:4f:f8:15:22:ac:24:41:09:ee:e4:
98:b8:07:32:ab:af:50:47:93:b9:1c:b6:78:e4:32:4b:21:8f:
08:a2:60:20:a5:cc:c8:58:61:eb:ef:0d:17:e9:f9:f1:34:5e:
12:03:ae:5a:4b:5e:cb:27:ae:0b:58:3e:b2:27:99:34:a4:12:
62:02:4b:54:07:cc:be:00:9b:c5:ff:6d:fb:78:0d:1b:a3:64:
e9:34:0c:7e:00:57:9d:72:79:22:73:e4:c7:6d:8b:29:2e:57:
3a:b2:f2:87:c5:18:4c:58:07:61:36:26:98:ee:87:39:21:c7:
f1:6c:02:d2:32:89:58:f1:6f:b2:ef:29:2d:74:6d:11:a1:6e:
90:28:81:f9:11:75:1b:cf:f3:41:72:ba:d4:ac:73:48:0a:32:
31:c5:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:04 2024 by rpki-client on console-fra.rpki-client.org