Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pErhJVhekKZn5UQirIVaeVzeGWs.cer
File: pErhJVhekKZn5UQirIVaeVzeGWs.cer (raw, json)
Hash identifier: nWBFbNmgL8h1cZiCCPxXNk6Gf9xhPnXc3IsCFECgEWk=
Subject key identifier: A4:4A:E1:25:58:5E:90:A6:67:E5:44:22:AC:85:5A:79:5C:DE:19:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8015A74340B0290E82D51503D863F56
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/db88cd-1f2d-45b7-8a2a-4e5ec0f4d2cf/1/pErhJVhekKZn5UQirIVaeVzeGWs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/db88cd-1f2d-45b7-8a2a-4e5ec0f4d2cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209147
IP: 185.88.20.0/22
IP: 2a05:c840::/29
Validation: Failed, certificate revoked on Mon 19 Feb 2024 14:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5a:74:34:0b:02:90:e8:2d:51:50:3d:86:3f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a44ae125585e90a667e54422ac855a795cde196b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:82:8d:a2:f2:e4:62:55:89:d4:ad:a0:8e:
6f:11:a4:c3:03:59:9a:5f:11:13:63:64:0a:05:c7:
b7:dd:49:79:20:cb:0d:1e:d3:cc:bd:ee:31:aa:2a:
af:9f:08:be:d1:4c:b3:be:b2:93:62:c6:51:bb:e6:
00:33:a0:50:21:99:84:b6:7b:1c:b8:af:b8:76:5f:
14:77:da:3c:02:ee:1b:d4:19:17:6a:0d:18:b1:66:
d4:b7:c8:f3:70:95:3c:f6:bb:55:c9:55:12:ef:20:
9f:a0:ec:f4:e3:c7:90:a4:34:e7:a7:4a:ae:4b:5a:
e5:d1:7b:bf:18:56:34:c9:28:b2:ce:a5:a0:44:99:
69:bc:3e:b0:68:4b:94:35:20:c0:18:fe:d3:cc:71:
ad:ad:2b:e1:41:66:c8:90:cd:28:29:ed:1d:d2:14:
d9:0a:7b:a9:c6:3c:a0:55:88:c4:06:d5:05:1c:86:
98:e3:1e:85:dd:da:da:36:d5:b7:5e:3a:25:1a:b5:
8d:e5:20:d6:23:54:e6:77:b1:ab:a7:20:dc:87:6e:
db:6b:54:34:56:94:2d:2a:a3:3c:b2:b7:55:60:c6:
06:c9:43:94:51:02:a2:44:e7:53:a2:44:a3:a8:ca:
91:2c:58:b9:55:89:12:a9:8c:0c:ee:a4:cf:af:33:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4A:E1:25:58:5E:90:A6:67:E5:44:22:AC:85:5A:79:5C:DE:19:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db88cd-1f2d-45b7-8a2a-4e5ec0f4d2cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db88cd-1f2d-45b7-8a2a-4e5ec0f4d2cf/1/pErhJVhekKZn5UQirIVaeVzeGWs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.20.0/22
IPv6:
2a05:c840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209147
Signature Algorithm: sha256WithRSAEncryption
3b:aa:ca:5a:bc:e1:5f:8d:10:5d:05:29:c5:a6:e8:6e:a3:cb:
95:0a:8c:47:ef:14:85:0e:43:39:2e:f5:c0:dd:a3:6d:69:90:
32:df:d7:eb:fa:31:b5:d0:49:55:af:02:48:8d:ce:0f:9e:74:
6d:9e:47:3f:18:c6:3c:3c:c5:8c:79:0a:bb:5e:3d:43:bb:63:
4b:47:45:a0:25:86:10:f6:90:d9:c9:25:53:21:6f:61:d9:82:
a5:2c:09:a7:d6:1e:06:3c:3f:59:f2:1c:57:b2:b4:99:5b:76:
fa:96:8a:f8:9c:e8:63:18:c1:0a:43:60:e1:51:57:e2:94:50:
33:ab:2b:1a:12:3a:3d:a7:06:ea:03:1a:26:1e:2b:7e:87:88:
16:94:13:fc:0f:06:1b:e5:ec:59:99:b2:a3:95:68:5d:98:0f:
71:37:9f:24:94:82:82:9a:07:d6:e9:bb:52:92:d9:a9:6f:7b:
38:10:70:79:7d:2a:ab:00:a0:3c:15:e8:b3:f7:1b:90:a5:9d:
0b:28:25:f3:b0:e3:74:55:14:96:4a:54:4b:f4:2a:67:1c:9e:
42:af:0a:50:95:e9:a8:26:d7:02:2c:b2:02:e4:87:00:72:92:
42:5d:b8:18:9f:db:4d:92:dd:bc:47:1d:ad:d5:af:6c:99:60:
67:6b:dc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:44 2024 by rpki-client on console.sobornost.net