Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1dsJVtJHAKbIwjv0WO2mxhj8-rM.cer
File: 1dsJVtJHAKbIwjv0WO2mxhj8-rM.cer (raw, json)
Hash identifier: KpnqLngoyyH67jwJdVrIrwGmGXfq4TGuQD2JT5M7KTI=
Subject key identifier: D5:DB:09:56:D2:47:00:A6:C8:C2:3B:F4:58:ED:A6:C6:18:FC:FA:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185724370FD4CC932E59941DD3829ACFC44
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/1dsJVtJHAKbIwjv0WO2mxhj8-rM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:35:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.178.0/24
IP: 2a12:e300::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 08:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:43:70:fd:4c:c9:32:e5:99:41:dd:38:29:ac:fc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5db0956d24700a6c8c23bf458eda6c618fcfab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:91:a1:cd:cc:f7:d9:c5:fe:6f:c0:e3:db:
90:99:23:d7:70:23:1c:7d:94:39:6d:91:f4:7f:8a:
17:ad:a0:87:22:49:d4:10:54:1c:b0:b1:17:11:f9:
b9:e0:71:d9:45:f2:f4:55:93:9b:6d:39:aa:91:de:
ae:f4:02:ce:17:13:bf:6e:5b:d6:e8:9b:41:a7:07:
f1:73:22:82:63:60:b4:a8:c7:e7:d6:8f:f0:9f:75:
9f:11:04:01:60:c4:9c:17:24:37:30:eb:16:09:cf:
9b:09:04:6b:d7:3e:c0:08:b7:36:cd:27:36:d1:c6:
86:62:e1:ea:68:68:5b:09:8c:b5:af:a7:7d:8a:d1:
f3:ce:61:0b:cf:64:3e:9d:c8:f4:de:bc:83:02:f2:
6b:fd:33:25:8a:a9:c7:72:3a:c4:35:93:0c:ed:97:
b9:55:14:69:2e:43:62:42:31:26:ac:d9:65:60:0d:
a8:a3:7c:ac:e9:77:ca:2b:c7:a0:5c:e3:d4:ea:1b:
f7:44:bd:05:77:58:0d:d3:40:de:8a:b6:1c:5f:48:
3a:76:2a:83:7d:44:36:4f:7f:da:4e:68:cb:ba:0f:
bb:d5:03:8f:64:88:78:b9:0b:f7:50:25:4d:2b:54:
04:95:54:eb:86:ee:5a:87:cc:5d:25:88:6a:86:71:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DB:09:56:D2:47:00:A6:C8:C2:3B:F4:58:ED:A6:C6:18:FC:FA:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/1dsJVtJHAKbIwjv0WO2mxhj8-rM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.178.0/24
IPv6:
2a12:e300::/29
Signature Algorithm: sha256WithRSAEncryption
2d:43:9f:c7:07:ae:84:65:16:7f:66:09:33:40:73:11:7c:3d:
9b:1b:e2:84:bd:83:99:e0:48:99:c8:65:65:5e:ba:d7:09:56:
6f:d8:b2:fc:c5:63:85:c8:94:0f:a3:ee:d8:95:1b:d0:a0:9e:
6b:35:e0:e9:59:fe:89:4c:14:79:0d:ae:59:f0:26:6c:2c:ba:
a6:31:4a:a4:9d:a5:4b:c8:9a:e7:ab:d2:c4:61:c3:98:bf:2b:
9b:79:09:a9:c3:03:ab:34:bb:83:37:b6:eb:dc:84:42:78:58:
74:98:a1:05:35:05:86:26:d6:06:8e:b8:79:0a:3f:58:bf:96:
6f:af:b8:ee:6c:9d:25:bf:86:4a:4d:1f:33:9d:a1:39:d3:3f:
91:13:3c:53:27:26:c0:66:30:a6:2f:ac:c0:b7:12:11:8b:18:
e5:db:c9:d0:5e:e5:99:62:55:5b:ac:ef:2a:2e:cf:a2:3f:7a:
e0:64:a0:86:6d:3e:61:71:75:df:de:75:ae:62:ff:76:53:0f:
de:10:60:b5:f3:71:46:9a:2d:06:75:0b:fc:cf:d4:61:9d:cc:
eb:88:42:fa:bd:1b:5b:7f:ce:c8:18:72:be:43:28:bb:1c:6d:
50:81:aa:95:1f:64:a3:38:eb:fc:64:3e:7d:97:75:28:fa:3e:
67:62:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:16 2024 by rpki-client on console-ams.rpki-client.org