Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
File: z2QLAjETdtyW7r_sp1XDsAYRQOw.cer (raw, json)
Hash identifier: tcv8VJlmAU68h9PmH8IJwwaZWs8xQ0L2nhlgsY+tWI4=
Subject key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3EB626C44E8DCA7D0CBDFF6CFAB44C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 8315
AS: 16278
AS: 25525
AS: 28836
AS: 34012
AS: 42158
AS: 44253
AS: 47632
IP: 5.100.224.0/21
IP: 79.99.184.0/21
IP: 83.98.128.0 -- 83.98.203.255
IP: 83.98.208.0/20
IP: 85.92.128.0/19
IP: 85.158.160.0/21
IP: 85.222.192.0/21
IP: 89.18.160.0/19
IP: 89.30.128.0 -- 89.30.231.255
IP: 89.30.240.0/20
IP: 91.200.48.0/23
IP: 91.200.51.0/24
IP: 91.216.113.0/24
IP: 91.216.141.0/24
IP: 93.175.176.0/20
IP: 94.198.24.0/21
IP: 134.0.88.0/21
IP: 162.248.196.0/22
IP: 162.251.32.0/21
IP: 176.62.192.0/21
IP: 178.251.192.0/21
IP: 185.4.112.0/22
IP: 185.12.132.0/22
IP: 185.30.236.0/22
IP: 185.38.156.0/22
IP: 185.74.76.0/22
IP: 185.77.120.0/22
IP: 185.113.52.0/22
IP: 185.113.196.0/22
IP: 185.113.224.0/22
IP: 193.34.150.0/23
IP: 193.47.188.0/24
IP: 194.105.128.0/23
IP: 194.153.78.0/24
IP: 194.165.34.0/24
IP: 195.234.173.0/24
IP: 213.171.128.0/19
IP: 213.189.0.0/19
IP: 213.214.96.0/19
IP: 213.247.32.0/19
IP: 217.195.112.0/20
IP: 2001:67c:261c::/48
IP: 2001:16f8::/32
IP: 2001:4198::/32
IP: 2a00:1290::/32
IP: 2a00:1bd8::/32
IP: 2a01:40e0::/32
IP: 2a02:20b0::/29
IP: 2a02:2858::/29
IP: 2a02:c880::/29
IP: 2a03:5500::/31
IP: 2a03:bf80::/32
Validation: Failed, certificate revoked on Fri 21 Apr 2023 08:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3e:b6:26:c4:4e:8d:ca:7d:0c:bd:ff:6c:fa:b4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:f0:ba:90:0d:fd:58:fc:7a:c2:14:18:09:
4f:23:62:a1:e8:d9:ad:0d:e4:a0:0d:64:f1:18:6f:
73:49:f0:c5:9b:39:e8:f4:96:47:64:1a:39:65:30:
cb:d3:8e:c8:1e:f3:14:57:6d:fd:16:4b:22:1c:db:
7e:5b:e0:b0:ae:2e:92:7a:a7:a2:0f:12:cb:21:d8:
f6:e1:e0:f6:58:d8:31:8a:ef:61:41:4e:c0:24:54:
d8:3b:ea:17:61:b6:46:03:f4:ca:8c:c4:f6:d6:d2:
40:91:3b:73:ba:bc:e4:61:7c:c1:2e:91:1f:0c:f9:
ca:b2:d2:2f:60:0c:c3:eb:b8:51:eb:76:12:3c:04:
f4:8b:5b:f8:20:d1:11:16:99:3f:3d:bf:96:c0:c2:
d4:6e:f4:fc:40:09:e3:df:db:e9:bd:aa:93:76:fd:
ec:b8:1b:4e:25:c2:c8:77:98:d6:f0:b7:bd:d1:26:
de:37:94:5d:75:18:21:e4:a9:56:18:ee:dc:79:bd:
50:16:1d:8f:62:05:a3:06:23:e5:ec:85:a5:34:19:
77:f7:16:e4:68:bd:84:13:00:17:9c:ad:5f:97:d6:
2f:1e:3d:80:a4:2e:10:6f:9c:72:e7:5b:48:75:f5:
4d:f0:8e:e3:db:45:92:07:e6:05:70:b7:79:cd:08:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.224.0/21
79.99.184.0/21
83.98.128.0-83.98.203.255
83.98.208.0/20
85.92.128.0/19
85.158.160.0/21
85.222.192.0/21
89.18.160.0/19
89.30.128.0-89.30.231.255
89.30.240.0/20
91.200.48.0/23
91.200.51.0/24
91.216.113.0/24
91.216.141.0/24
93.175.176.0/20
94.198.24.0/21
134.0.88.0/21
162.248.196.0/22
162.251.32.0/21
176.62.192.0/21
178.251.192.0/21
185.4.112.0/22
185.12.132.0/22
185.30.236.0/22
185.38.156.0/22
185.74.76.0/22
185.77.120.0/22
185.113.52.0/22
185.113.196.0/22
185.113.224.0/22
193.34.150.0/23
193.47.188.0/24
194.105.128.0/23
194.153.78.0/24
194.165.34.0/24
195.234.173.0/24
213.171.128.0/19
213.189.0.0/19
213.214.96.0/19
213.247.32.0/19
217.195.112.0/20
IPv6:
2001:67c:261c::/48
2001:16f8::/32
2001:4198::/32
2a00:1290::/32
2a00:1bd8::/32
2a01:40e0::/32
2a02:20b0::/29
2a02:2858::/29
2a02:c880::/29
2a03:5500::/31
2a03:bf80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8315
16278
25525
28836
34012
42158
44253
47632
Signature Algorithm: sha256WithRSAEncryption
15:13:91:e9:b1:07:ba:57:72:b0:c5:df:7c:cc:e8:ad:c7:a7:
15:d4:33:dc:8a:a3:ac:84:94:b6:cc:4d:64:49:16:7b:ab:d6:
a5:a1:57:6e:92:de:e2:fa:64:c3:df:5f:b2:7d:75:4b:73:de:
3d:a2:1e:16:46:7b:44:64:57:2c:f3:81:4a:05:73:32:b1:6a:
7a:f9:66:c6:07:f6:1e:5d:95:6b:48:75:75:73:8e:ef:60:a1:
f8:7b:3e:ae:91:b9:1d:1c:89:8d:02:f2:e1:9d:60:b1:63:e3:
f6:37:bf:bf:28:60:10:38:5c:26:b9:f9:28:26:b2:42:f8:b0:
ce:f5:79:54:3f:e3:0c:d2:05:c1:0d:2e:26:cc:17:39:a4:bb:
a8:0d:84:20:7c:2c:8f:38:0f:66:70:6a:0d:62:c6:24:c2:53:
39:41:b1:d3:e4:d6:03:ee:22:77:77:8b:e2:48:a7:e1:ae:90:
78:4a:32:26:ab:27:db:bc:3d:59:fd:52:e3:f9:ae:b0:c5:72:
68:cc:85:a3:29:e0:26:d7:d0:2e:6a:21:74:3f:b2:e2:c2:2d:
b4:d0:8f:49:64:d4:8c:b5:3e:2a:d1:5d:70:1c:30:b7:68:fc:
fc:51:f0:e5:79:9f:ba:cb:b4:d1:c5:e8:25:c9:64:26:6f:c4:
db:f1:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:14 2024 by rpki-client on console-fra.rpki-client.org