Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ysjinzVYO1sqlnPddqJZA7NexZM.cer
File: ysjinzVYO1sqlnPddqJZA7NexZM.cer (raw, json)
Hash identifier: ZewWW2Kg2RXtTxy8yk1/PYNAIRcn7wa/XWx1ApDxB9Q=
Subject key identifier: CA:C8:E2:9F:35:58:3B:5B:2A:96:73:DD:76:A2:59:03:B3:5E:C5:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01904BC3B01BD2083697A109E84143D2A45F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/ysjinzVYO1sqlnPddqJZA7NexZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Jun 2024 19:40:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203623
IP: 185.127.108.0/22
IP: 2a06:c8c0::/29
Validation: Failed, certificate revoked on Tue 20 Aug 2024 09:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4b:c3:b0:1b:d2:08:36:97:a1:09:e8:41:43:d2:a4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 24 19:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cac8e29f35583b5b2a9673dd76a25903b35ec593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:a5:1a:53:06:1e:f2:5f:ba:94:24:ca:c6:
ba:b0:bd:c3:61:eb:79:1d:08:0a:bd:f9:6a:55:0a:
c7:17:52:6e:b9:cb:c3:78:aa:ad:fc:48:a9:72:4d:
2d:81:fd:ae:34:51:09:4e:88:4b:fa:55:e4:46:23:
8a:11:d0:54:03:21:97:b5:35:b6:99:bc:f8:53:59:
40:8f:3a:cf:86:d6:16:a8:51:2d:cd:80:dc:84:9e:
0f:ee:f2:bc:55:85:d6:f8:56:9f:38:8a:c4:c2:08:
fc:5f:1a:3c:c4:04:08:28:1d:28:d7:7e:a5:1f:96:
85:e1:a0:7c:8a:d5:54:b7:f7:e3:67:2d:24:19:51:
57:56:21:72:08:ef:e6:da:b5:b2:cf:c1:0a:f2:c9:
df:d9:72:a7:88:fe:af:bc:e7:e3:55:a9:64:85:f3:
7d:0a:44:1b:b8:c7:b6:77:05:72:26:7e:80:ee:e3:
b7:a7:53:6c:09:de:3f:e9:9a:ef:48:7c:3e:6d:03:
c2:16:e6:22:19:4c:1f:36:91:10:d9:f4:b3:a2:c1:
66:65:2d:01:c5:87:e1:20:90:e8:f8:0c:25:98:51:
09:b0:8e:eb:3c:b3:2e:34:51:2b:1a:55:4c:06:fb:
c8:fa:5f:f7:bc:5e:89:b5:2d:5c:be:05:7c:0a:b2:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C8:E2:9F:35:58:3B:5B:2A:96:73:DD:76:A2:59:03:B3:5E:C5:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/ysjinzVYO1sqlnPddqJZA7NexZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.108.0/22
IPv6:
2a06:c8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203623
Signature Algorithm: sha256WithRSAEncryption
10:7c:bd:39:01:56:bc:25:3d:d5:e6:cc:e7:a3:8b:36:ab:56:
52:3d:aa:db:1a:aa:f7:20:97:3c:bf:c5:07:a1:30:58:77:57:
f1:e2:56:d1:6f:c5:e9:cd:d4:f8:f5:4d:b0:fd:d3:d0:86:d4:
b6:22:60:b3:db:20:15:80:e9:c7:4e:3e:7c:30:4c:60:7e:38:
54:02:6b:8c:2a:41:c6:9c:93:e3:38:2e:78:49:06:d2:f2:fd:
c4:b2:62:41:c7:2b:e3:09:f5:87:2c:f9:3d:9c:67:64:20:f0:
da:4c:ea:5c:8d:d0:58:c0:6b:82:25:a2:06:e0:48:34:7b:b7:
c9:58:1f:f2:df:d8:46:75:7a:e0:38:c7:98:b4:09:70:ef:a9:
61:3c:27:42:1e:57:1a:e5:b7:e9:17:27:41:c8:48:57:4e:b8:
59:8d:86:af:00:a2:29:7a:6e:93:1f:96:37:9b:44:9c:4f:fa:
22:91:9c:44:31:98:1b:47:93:40:55:de:97:02:73:4e:94:20:
b3:08:c3:4c:d7:42:77:3c:d2:47:8c:6a:f8:03:71:16:0e:1f:
2a:4b:ee:42:c1:11:13:38:34:22:5b:67:ca:00:63:ef:88:85:
39:af:82:3b:75:93:45:a9:39:9c:1d:97:79:94:f3:36:3f:3c:
83:b3:bd:c1
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 20 12:44:32 2024 by rpki-client on console-fra.rpki-client.org