Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Bq2aKDIC07uQmzi9BPxCQTwrCk.cer
File: _Bq2aKDIC07uQmzi9BPxCQTwrCk.cer (raw, json)
Hash identifier: rn/PtWUVdrv6iPMnNPev8XQZeHWlX8UZwu9HOjV3wv8=
Subject key identifier: FC:1A:B6:68:A0:C8:0B:4E:EE:42:6C:E2:F4:13:F1:09:04:F0:AC:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187043BC097AEF6765CBC4E8A036864C14B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.august.tw/repo/HYSP/14/FC1AB668A0C80B4EEE426CE2F413F10904F0AC29.mft
caRepository: rsync://rpki.august.tw/repo/HYSP/14
Notify URL: https://rpki.august.tw/rrdp/notification.xml
Certificate not before: Tue 21 Mar 2023 12:53:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 51818
AS: 59486
IP: 185.0.19.0/24
IP: 2001:7f8:2::/48
IP: 2a13:c000::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:3b:c0:97:ae:f6:76:5c:bc:4e:8a:03:68:64:c1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 21 12:53:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc1ab668a0c80b4eee426ce2f413f10904f0ac29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:84:0a:2d:23:2f:63:98:3f:e0:97:90:ca:
10:ae:d1:53:55:b7:eb:be:52:4f:a5:85:52:0a:37:
51:df:22:af:13:26:30:41:6b:5a:aa:9a:29:65:db:
a4:90:8d:cc:c6:5f:7c:93:35:a9:9d:f5:2e:6b:09:
b4:6e:4e:c2:c6:c1:1e:9a:84:22:c1:d0:37:53:0e:
ef:84:3b:fb:f1:bc:20:e2:e0:b7:6f:c7:f2:b5:7a:
8b:c7:53:2e:3e:5f:51:8c:d7:a0:ee:ff:c1:b0:8f:
7f:10:92:a7:0f:d8:f3:94:1b:6b:22:57:72:72:5c:
18:d9:eb:4f:3b:48:1e:d4:d2:ec:f2:5a:1c:0f:17:
12:45:8f:67:61:a3:9b:2e:59:e3:ac:2f:20:8c:0a:
d5:f9:74:c7:59:33:7a:2f:0d:ed:78:fa:fe:9d:f0:
12:c7:a2:d5:7c:21:d4:e3:e9:46:35:03:73:ca:cd:
44:f4:02:01:c7:24:d1:6e:23:f7:db:a0:71:0a:9f:
89:b7:48:bb:7b:1a:aa:b0:60:0e:7d:a4:5e:46:de:
84:65:e9:22:14:ae:00:7e:93:72:57:20:9d:14:38:
fe:85:17:1d:8b:b9:e6:9a:cb:21:9a:52:1f:6f:ac:
20:76:69:6c:0a:1a:9e:7a:e0:ec:31:ee:c1:05:f5:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1A:B6:68:A0:C8:0B:4E:EE:42:6C:E2:F4:13:F1:09:04:F0:AC:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.august.tw/repo/HYSP/14
RPKI Manifest - URI:rsync://rpki.august.tw/repo/HYSP/14/FC1AB668A0C80B4EEE426CE2F413F10904F0AC29.mft
RPKI Notify - URI:https://rpki.august.tw/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.19.0/24
IPv6:
2001:7f8:2::/48
2a13:c000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51818
59486
Signature Algorithm: sha256WithRSAEncryption
43:4d:ec:35:bd:15:4f:c1:f4:da:eb:08:82:7f:16:4a:81:ce:
70:03:cf:a2:3c:8a:c4:9f:87:1c:72:58:82:aa:7f:3c:81:ee:
b5:95:49:d6:1b:25:27:a8:7c:cb:02:56:a0:9a:7e:c4:a9:71:
50:4f:80:2a:6e:62:6e:46:97:a9:28:a5:17:46:46:40:6d:41:
a2:3f:03:30:f8:b7:80:37:08:51:3e:a3:92:d3:11:18:e1:99:
5a:f6:94:f6:f3:86:65:61:53:28:e2:c9:5e:5a:cf:44:f5:39:
f4:45:e5:3b:ac:0f:b0:19:a7:73:58:c0:82:3f:91:47:98:7f:
e7:03:b5:ad:97:ea:ea:f8:5b:90:b7:25:19:4b:c5:1e:38:7a:
65:52:32:33:bc:fa:3d:f7:15:ff:6e:28:be:06:a8:7a:bd:2d:
2a:ff:a5:88:fb:f1:6b:fe:9f:2b:cc:36:8e:ce:6e:05:5f:3e:
8f:6f:fc:ad:aa:bc:c5:e1:20:c0:4c:87:73:16:b7:50:19:97:
56:63:5f:7a:fe:70:b6:ae:a0:f1:13:f1:99:de:ea:47:2f:a6:
1b:69:f3:1d:fb:24:4e:61:4d:fc:db:57:6e:64:71:ac:8f:81:
52:b5:c6:12:e2:36:c9:0e:eb:e5:f9:2f:7c:3c:19:bf:a8:da:
63:f1:76:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:27 2023 by rpki-client on console.sobornost.net