Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48fBn42bUOpgzOdJivD9jDkIEZ4.cer
File: 48fBn42bUOpgzOdJivD9jDkIEZ4.cer (raw, json)
Hash identifier: 5d5NUeRjjYBhl8Ut6BL99LewVirvp7OHSrQIbb2/j58=
Subject key identifier: E3:C7:C1:9F:8D:9B:50:EA:60:CC:E7:49:8A:F0:FD:8C:39:08:11:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01888B9DB1D75FC5703A334EE81DE105C8DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/48fBn42bUOpgzOdJivD9jDkIEZ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Jun 2023 12:52:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 205227
IP: 185.234.219.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:9d:b1:d7:5f:c5:70:3a:33:4e:e8:1d:e1:05:c8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 5 12:52:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3c7c19f8d9b50ea60cce7498af0fd8c3908119e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ed:96:14:ea:b9:4b:87:f4:9e:76:bd:ca:8c:
19:26:72:94:d0:c4:e6:9c:d5:a5:50:1a:d1:6f:43:
8c:69:da:3b:cb:d5:5b:06:8e:a7:45:f3:0d:95:7c:
55:00:e9:7e:2e:f1:73:7d:ae:dd:be:09:71:f1:52:
b9:ab:29:cc:b4:0f:94:84:38:3b:d1:3b:3f:5b:0c:
27:5b:e9:63:2d:14:52:a4:26:e8:01:9c:4b:ba:09:
4d:85:87:9c:8f:b4:9b:94:d0:ec:31:bb:30:0d:8f:
7e:1f:0a:ec:86:7f:32:f8:ec:1f:58:29:bb:c1:1f:
7b:13:18:bd:30:a2:b2:cd:2c:37:71:58:94:57:3f:
9e:af:0f:01:7c:4e:7d:98:19:a2:a1:36:bf:a3:75:
99:45:51:90:2a:5e:ae:91:84:ba:81:79:31:85:77:
ed:82:0e:c6:f3:68:7b:2b:53:27:1b:f9:2d:a1:a5:
ed:03:c6:a8:82:47:68:b4:12:01:7c:8c:79:1b:19:
92:4b:f5:0a:dd:f8:de:91:28:e9:6a:7c:9e:c0:98:
03:f7:25:1c:97:33:a3:7d:82:ad:ec:74:ef:0c:90:
e5:b4:97:5e:72:be:ba:c9:12:a1:3c:71:61:0f:8d:
4e:91:22:52:95:80:03:fb:21:aa:64:a8:9e:1c:14:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:C1:9F:8D:9B:50:EA:60:CC:E7:49:8A:F0:FD:8C:39:08:11:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/48fBn42bUOpgzOdJivD9jDkIEZ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.219.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205227
Signature Algorithm: sha256WithRSAEncryption
8e:79:44:69:af:72:48:0d:b1:5c:97:b2:49:71:2e:c6:21:d9:
1f:d6:0e:21:6a:6a:80:f8:b2:05:cf:8e:9e:85:db:db:81:92:
c9:99:49:ec:11:40:e1:e3:ec:cf:99:b9:6d:ce:4f:c8:10:91:
30:cc:b3:06:32:91:b5:82:63:07:6c:39:87:0e:e6:93:0f:23:
f5:cb:1b:cf:b4:83:26:5e:64:43:66:80:18:2c:3c:e2:6b:e2:
71:6c:77:3e:31:fd:4f:7a:63:0d:8f:8a:85:fa:7a:33:0c:1c:
46:da:a1:e5:93:81:25:bb:47:ca:88:c8:fc:03:c3:b5:7e:59:
35:fa:20:27:e9:5d:07:b0:ad:68:ba:39:1f:3b:f0:c2:26:2c:
dc:65:09:6f:63:1e:4f:cc:8c:1f:f7:fd:a9:b8:d9:24:c7:3e:
44:92:dd:36:41:c5:26:82:f8:f1:de:3d:7d:97:6d:b2:67:45:
19:75:2f:e5:d7:db:5c:d2:4a:a0:71:2c:3f:1c:e4:a6:eb:89:
81:f5:c3:11:9d:b9:85:40:ae:17:1f:b8:38:6c:a6:00:e4:be:
8d:db:88:c4:ee:b4:f1:d1:02:0d:b2:be:4a:16:0e:d1:05:46:
c2:5d:7a:3a:de:ad:ee:ea:25:48:19:46:ca:4a:62:e8:5e:72:
c0:3c:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:57 2023 by rpki-client on console.sobornost.net