Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Iwfnl0-4MSouaqqZb174R0pTEHw.cer
File: Iwfnl0-4MSouaqqZb174R0pTEHw.cer (raw, json)
Hash identifier: PrQyGlvpW/JFW+M04+hudNzfOZUm1MWKYE1ZCADlmC4=
Subject key identifier: 23:07:E7:97:4F:B8:31:2A:2E:6A:AA:99:6F:5E:F8:47:4A:53:10:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701DD6F9FA696232A70E873B00AB36E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/Iwfnl0-4MSouaqqZb174R0pTEHw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.189.0/24
IP: 2a12:f700::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 10:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1d:d6:f9:fa:69:62:32:a7:0e:87:3b:00:ab:36:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2307e7974fb8312a2e6aaa996f5ef8474a53107c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:f3:a2:67:7d:1a:9d:98:7c:f7:13:6a:93:
23:bf:c0:f4:88:54:f9:60:8c:36:27:9d:9d:74:d9:
e3:b6:2c:86:04:9f:e4:39:38:31:ed:07:04:65:f5:
36:04:3a:e6:07:bc:a5:39:7b:98:50:44:b4:ad:46:
2a:e4:ef:b2:9f:a6:13:c4:63:ee:e2:2b:67:ce:bd:
75:7e:5c:17:1e:2b:ca:32:08:24:2d:50:79:56:e2:
e8:10:dd:1f:97:bf:28:f2:b7:cb:ff:ed:db:09:39:
bb:cb:15:9a:f8:d4:07:8c:8d:5e:ec:9f:71:62:a7:
41:91:41:23:23:1d:d8:7f:56:0a:33:21:0b:94:57:
20:a0:a8:17:46:7b:75:ec:55:5d:99:31:9e:7b:d8:
69:b1:fd:d4:77:c5:fd:6e:48:a5:81:2a:0f:a4:07:
7d:ae:26:bd:86:82:35:79:08:58:7b:52:b6:66:51:
a3:46:ba:5e:7a:31:e9:15:4b:aa:4b:41:bc:20:1f:
c2:6e:df:99:51:9c:41:51:fa:86:78:19:da:70:8c:
e4:aa:76:c2:c9:34:4a:5f:a3:94:aa:b5:b2:95:3c:
00:1b:0c:ce:5f:e9:00:18:fc:e1:35:ea:20:2d:fa:
f2:5b:c0:b0:32:dd:9f:18:fe:85:8f:7d:2f:52:f5:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:07:E7:97:4F:B8:31:2A:2E:6A:AA:99:6F:5E:F8:47:4A:53:10:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/Iwfnl0-4MSouaqqZb174R0pTEHw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.189.0/24
IPv6:
2a12:f700::/29
Signature Algorithm: sha256WithRSAEncryption
69:e2:61:0f:1c:80:cc:6f:5b:cf:56:16:ee:79:ea:17:5c:3f:
61:a4:a7:42:3b:57:54:e6:63:d1:57:63:f0:e6:04:f4:e1:ed:
43:b3:95:8f:36:5b:f4:47:26:64:13:ef:c9:e8:79:d4:13:59:
ee:8e:0a:6a:06:a0:60:bb:a2:bc:10:ff:ee:ed:fa:05:e6:4d:
de:01:45:da:86:05:1e:cc:11:f6:41:74:40:f3:18:15:68:ee:
7c:f7:80:2e:0d:f6:91:02:85:b9:93:a0:59:e2:08:d1:0d:ff:
fe:a0:f2:b9:5f:a4:5f:9e:45:41:f3:d2:d7:66:16:61:2e:8f:
09:c8:85:ba:e7:40:92:a9:ca:8d:c4:b1:84:61:29:35:8f:1b:
9d:65:83:2e:fd:35:b7:e1:a6:82:8c:ff:3b:b8:61:68:15:dc:
b5:42:c7:a3:94:57:d6:54:5c:96:f8:84:95:ce:7c:18:68:60:
2d:f9:f2:0c:9f:6d:0f:e7:e4:99:fa:77:a6:b0:6b:7d:21:17:
40:41:48:45:be:04:53:3c:10:74:8d:67:b5:f7:25:fb:02:46:
02:1d:a0:73:8c:c3:c6:c6:d8:49:f3:07:e8:25:63:2c:db:c3:
ff:5c:b4:51:26:83:49:89:c0:4a:8c:a2:14:a7:f2:a4:2d:70:
b4:e8:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:27 2024 by rpki-client on console-fra.rpki-client.org