Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ii91G9Xax7fn30PoCabgNpuHi8U.cer
File: ii91G9Xax7fn30PoCabgNpuHi8U.cer (raw, json)
Hash identifier: YOoaX+rY1ZVEkAxdzC/EUkUaRYFMMyw/6CU1iysT97w=
Subject key identifier: 8A:2F:75:1B:D5:DA:C7:B7:E7:DF:43:E8:09:A6:E0:36:9B:87:8B:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B678D6775EFE3C24122E75D21BCC14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/ii91G9Xax7fn30PoCabgNpuHi8U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35485
AS: 60227
IP: 46.254.176.0/21
IP: 93.94.32.0/21
IP: 93.174.64.0/21
IP: 158.58.136.0/21
IP: 185.34.84.0/22
IP: 185.84.176.0/22
IP: 2a02:6a40::/32
IP: 2a05:a440::/29
Validation: Failed, certificate revoked on Wed 10 Apr 2024 09:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:78:d6:77:5e:fe:3c:24:12:2e:75:d2:1b:cc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a2f751bd5dac7b7e7df43e809a6e0369b878bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:af:11:ad:10:31:d6:85:09:81:22:04:ee:
cf:b3:07:46:91:94:1c:0c:b2:a1:e7:a8:34:a8:87:
ac:e3:4e:1d:67:c6:13:bd:38:23:33:97:07:9e:9c:
d3:e6:e2:8e:e8:fe:8c:8b:86:7b:17:54:ee:53:d3:
1e:d3:d3:ae:85:23:9e:04:fd:80:b5:7c:8a:eb:03:
44:8d:f4:bd:11:ff:e9:83:a8:e5:85:1c:de:19:b0:
36:75:fa:95:f5:e6:cd:80:d2:07:4e:b9:43:13:7a:
85:81:b5:95:21:1b:98:fe:7f:be:3b:9d:cf:dc:3c:
92:b6:a1:6d:18:2c:4a:fd:be:ae:2a:bc:60:1e:4f:
bf:a9:61:93:ca:2f:58:2a:29:2d:15:8f:ae:0e:9c:
2d:8d:7d:57:08:d7:3a:ba:ea:7f:4e:d5:44:98:de:
3a:2c:5e:44:45:c7:b1:87:df:27:25:fd:3c:59:c4:
55:39:06:dc:7e:16:64:5d:16:bc:fa:ce:75:cf:4e:
7f:a7:84:5e:e5:0e:d8:41:49:82:34:ac:bb:53:2e:
2c:b6:6b:fd:c1:81:9f:54:58:67:88:11:c5:27:36:
2b:3b:87:32:a5:36:26:c6:a7:9f:72:cb:0e:1c:8c:
c1:db:56:f8:df:c6:39:c0:18:2f:26:66:3e:8e:7f:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2F:75:1B:D5:DA:C7:B7:E7:DF:43:E8:09:A6:E0:36:9B:87:8B:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/ii91G9Xax7fn30PoCabgNpuHi8U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.176.0/21
93.94.32.0/21
93.174.64.0/21
158.58.136.0/21
185.34.84.0/22
185.84.176.0/22
IPv6:
2a02:6a40::/32
2a05:a440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35485
60227
Signature Algorithm: sha256WithRSAEncryption
62:8c:b6:4e:3d:69:e3:05:52:a0:3f:c3:56:9f:59:b6:43:6a:
a1:48:1e:bb:49:50:f1:1b:0b:0f:4a:a6:75:a7:12:75:1b:93:
e2:f9:54:21:2a:3a:b7:48:05:26:33:88:39:5b:72:7c:a9:9a:
c3:9f:64:4b:a2:af:c8:96:23:2b:7a:3e:b6:21:53:68:0c:6e:
22:f3:69:7e:db:29:61:9d:dd:89:82:34:d8:74:fa:ce:1f:df:
43:06:4f:4d:89:dd:2c:94:fe:67:70:c1:af:2c:4c:0a:98:d9:
93:d3:84:01:5d:75:45:60:99:0f:87:26:1d:1c:06:34:51:cc:
08:e3:f7:1c:76:92:0c:da:48:5c:88:62:1d:52:d3:d5:fa:9c:
1f:fc:f6:6e:e4:b9:d5:5a:9f:70:e8:37:41:e4:b9:e3:68:70:
02:a8:d0:a0:19:ce:4c:10:a5:d2:30:3d:8d:c7:af:00:f1:05:
e9:60:0f:65:ab:89:23:3e:48:94:4d:7c:6f:da:13:6f:87:8e:
44:f3:d5:a2:be:0a:ee:3f:88:91:72:9a:37:03:7c:bb:7c:99:
b8:ad:a9:f0:2e:19:77:4c:63:f0:05:8c:3a:0f:5d:5f:21:83:
72:c9:a2:32:2c:55:6a:2f:dc:ac:c6:22:53:16:12:14:ba:ab:
2d:90:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 12:51:01 2024 by rpki-client on console.sobornost.net