Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
File: 7BG20O5rnsz-NOxQaidQeMOezLM.cer (raw, json)
Hash identifier: K35A4IvIfaN/wpN8mFq/hpjVSqJeB6sYcvZ6itqbFyA=
Subject key identifier: EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B874F476D57B59D66CA885D35545A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208172
IP: 45.156.60.0/22
IP: 2a0f:1680::/29
Validation: Failed, certificate revoked on Tue 20 Feb 2024 09:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:74:f4:76:d5:7b:59:d6:6c:a8:85:d3:55:45:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:a9:d6:17:6c:39:77:ea:81:71:bf:be:15:
53:8c:b0:26:47:bf:a1:9b:64:8f:db:4b:d1:1c:29:
f5:44:23:cc:a3:7c:49:79:12:a6:52:a7:c3:6f:2d:
4b:7c:23:8c:7f:b6:0b:96:f5:c8:77:68:59:42:dd:
85:eb:00:8b:39:c5:4d:22:77:c4:9c:67:bb:f2:68:
d8:57:1b:d4:d0:59:bf:39:36:a3:08:22:bb:dd:94:
db:9b:c9:ae:fa:ee:f9:7e:9e:bd:db:25:09:7a:42:
a5:cc:94:62:ea:73:6c:d5:64:73:bb:3e:3a:6b:d1:
7b:15:f3:7c:84:f8:d3:ce:14:c3:97:fd:cf:e8:ef:
7e:1e:b5:27:99:b3:6d:2e:c1:b1:64:e7:97:76:a6:
7f:f8:9a:d2:16:d8:b2:b8:f0:00:be:bd:b5:69:4e:
4e:f9:5a:9a:7a:36:b9:f2:9b:7e:ad:6f:b3:8c:23:
db:f4:89:80:3a:ff:26:bf:fe:84:6b:3e:13:b0:cd:
6f:bc:41:c4:e2:45:0b:ae:06:6f:74:1b:c8:92:53:
b3:7d:d6:fc:0e:95:38:ae:23:20:4c:6c:93:19:da:
67:e5:ad:38:7c:f6:c5:81:fa:ef:4a:a5:1c:f0:26:
f0:f4:c7:43:3e:10:7a:0e:19:ab:83:d5:43:a3:05:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.60.0/22
IPv6:
2a0f:1680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208172
Signature Algorithm: sha256WithRSAEncryption
82:f1:96:b6:9d:25:5f:15:72:fc:8e:8c:08:f4:ec:f6:10:5f:
bc:d7:9a:83:69:b0:fc:82:b6:0e:95:72:9a:4c:99:1c:3b:8d:
0b:a6:fe:6f:a3:c3:00:65:26:fb:50:f3:4b:93:1f:f2:07:8c:
7f:af:2f:a3:0e:fa:7c:3f:23:cc:c9:3e:5a:e6:d9:11:41:90:
a4:4d:0b:cb:c5:2a:c2:b6:19:9e:7b:76:7a:dc:7c:15:af:f5:
9d:b2:60:be:21:08:5a:7b:35:1e:83:22:60:9f:32:ca:fc:4b:
c9:86:12:a4:e8:1c:7f:7d:30:0b:76:12:a2:9b:8e:7b:1e:ab:
7f:51:40:5a:f5:97:26:00:09:b5:e8:19:ff:a9:78:74:13:fc:
46:d8:4a:7d:e8:c2:79:c4:7e:3d:66:f3:e8:e2:50:1e:a6:ac:
3f:a3:0f:f8:c3:e8:f6:c0:1a:80:9f:33:de:f7:e3:94:24:49:
bb:f6:3b:ab:80:bd:d2:1a:bf:68:1f:30:d9:c7:4f:58:d7:8b:
0e:91:ac:53:bd:de:2b:3f:60:e2:29:c4:17:af:d2:0b:3e:ba:
bc:7a:a1:24:e7:c4:bc:fb:3d:b2:0a:11:ce:8f:71:db:ce:43:
39:e8:be:15:ef:24:78:28:55:e9:6c:9a:0f:cc:46:e5:d1:94:
25:5c:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:44 2024 by rpki-client on console.sobornost.net