Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5sra_asxVjtyLxA-JwnK0xZQ74U.cer
File: 5sra_asxVjtyLxA-JwnK0xZQ74U.cer (raw, json)
Hash identifier: DY7xfia5OEreVInIc8HSAfNyBqhn2bPN/kzXKDwiEZI=
Subject key identifier: E6:CA:DA:FD:AB:31:56:3B:72:2F:10:3E:27:09:CA:D3:16:50:EF:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191B2CD3DCB80335518DAFDD18A8D9820E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/5sra_asxVjtyLxA-JwnK0xZQ74U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Sep 2024 12:54:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43157
IP: 79.99.88.0/22
IP: 79.173.128.0/18
IP: 83.143.224.0/21
IP: 2a00:5840::/32
Validation: Failed, certificate revoked on Tue 10 Sep 2024 11:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:cd:3d:cb:80:33:55:18:da:fd:d1:8a:8d:98:20:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 2 12:54:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6cadafdab31563b722f103e2709cad31650ef85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:fc:d4:81:1d:8c:5d:d2:d7:ea:21:6f:0f:
d1:18:07:ee:74:ca:52:d0:92:cd:36:de:80:19:47:
03:c0:fd:bb:30:f5:99:18:b8:1b:f4:8d:53:93:1a:
d6:4b:5b:ce:c4:60:08:1e:df:21:23:87:93:df:3d:
29:c4:0e:d3:e4:74:d0:22:ae:de:71:92:7c:fb:96:
7a:a9:c7:09:7a:7e:de:3c:01:6f:7a:db:af:32:b1:
cd:b2:ce:6c:fc:e7:fe:38:da:6b:73:f9:82:58:2b:
95:11:65:c4:00:8d:1c:b3:de:33:bd:dd:2a:44:be:
5f:ef:0c:4c:aa:81:3f:28:98:e6:01:f0:04:ac:81:
74:0b:28:f9:7e:c2:06:9a:a4:02:bc:15:b6:00:fb:
ae:c6:b8:2f:42:a4:43:e8:1c:69:35:59:b7:c1:21:
f6:a6:f1:8e:11:b9:11:49:fb:71:5d:c1:39:00:b6:
88:94:c9:22:bf:fc:76:01:06:8f:8a:a5:69:a8:2a:
33:42:2a:dc:c9:cd:8d:be:48:1a:db:7d:b8:c5:31:
ee:03:16:fd:05:98:c3:fb:a9:16:8c:cf:7c:64:ad:
5c:04:53:1b:c0:e1:a4:34:6f:3e:66:5f:82:a4:eb:
b0:73:03:b2:c0:82:5d:9b:9d:d9:43:89:14:01:bd:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CA:DA:FD:AB:31:56:3B:72:2F:10:3E:27:09:CA:D3:16:50:EF:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/5sra_asxVjtyLxA-JwnK0xZQ74U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.88.0/22
79.173.128.0/18
83.143.224.0/21
IPv6:
2a00:5840::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43157
Signature Algorithm: sha256WithRSAEncryption
63:a8:e9:95:4f:5e:2a:fe:19:41:2b:fe:2b:38:eb:86:bc:20:
5e:d1:af:21:45:3e:bc:5a:f5:7d:ce:59:1d:34:b8:60:02:86:
1a:41:42:1e:08:ce:f4:70:38:05:3a:f5:ce:52:33:48:59:b5:
1e:b1:4c:00:d0:d0:3b:c0:1f:b4:4b:b8:ad:16:f7:28:5d:ea:
9d:bf:d4:f3:91:fb:1a:4e:15:fc:5f:e4:dc:e6:6e:2f:cb:77:
1d:72:78:2e:63:d2:af:91:f5:81:70:db:2a:89:4b:16:50:7d:
26:3b:4b:86:38:40:54:c5:94:44:9a:e2:07:91:db:e9:f2:1c:
15:44:9e:0e:fe:67:87:1c:5e:9a:da:33:55:e7:71:8e:90:75:
db:8e:b9:29:f1:5a:3c:7c:37:8a:5b:e8:fc:d0:90:2a:a3:15:
02:74:30:e2:b8:36:33:c9:3f:20:7c:3e:55:d7:e6:f6:c6:e1:
51:dc:4d:cc:89:cf:bb:72:4c:0e:0f:37:0d:db:f4:83:6e:ce:
cf:39:e0:35:9d:3d:f5:3f:56:71:d7:ec:d5:69:6d:f1:18:f0:
7d:ee:e8:6d:59:18:01:96:13:28:1a:68:f6:8f:0b:c3:25:7f:
e8:0d:a7:83:4f:99:af:07:b0:c7:93:b7:ab:c6:99:55:16:27:
cb:e7:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 17:02:36 2025 by rpki-client