Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3-qz7Xpf9u_R3N4uBpFid3_48TU.cer
File: 3-qz7Xpf9u_R3N4uBpFid3_48TU.cer (raw, json)
Hash identifier: YRELJFOKbNYt8tw028H+7dvIWwZ/XjWx77n3ISMeNQ0=
Subject key identifier: DF:EA:B3:ED:7A:5F:F6:EF:D1:DC:DE:2E:06:91:62:77:7F:F8:F1:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01896474D29C496CC86A4869666E0CB0188F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/224547-4b0b-4e92-9f93-838f8a76fb97/1/3-qz7Xpf9u_R3N4uBpFid3_48TU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/224547-4b0b-4e92-9f93-838f8a76fb97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Jul 2023 15:25:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.107.22.0/24
IP: 2a11:4480::/29
Validation: Failed, certificate revoked on Mon 21 Aug 2023 06:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:74:d2:9c:49:6c:c8:6a:48:69:66:6e:0c:b0:18:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 15:25:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfeab3ed7a5ff6efd1dcde2e069162777ff8f135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:83:4f:05:3e:2e:65:40:af:4c:b2:29:bb:
6c:7f:15:b5:9b:44:6f:2e:ab:c4:72:08:00:04:84:
c1:3b:20:bc:e5:bb:fd:9e:6e:47:a5:49:34:c9:50:
85:af:e5:1d:44:87:d9:23:c3:3b:b2:23:62:8e:97:
f6:4a:d5:9f:c8:8a:d9:cb:3f:a8:e0:a9:0f:92:37:
ad:df:7c:b9:a3:2d:ac:1e:bf:41:2e:55:f8:c7:67:
9c:5d:b6:b9:57:30:84:8b:93:2e:b3:93:97:d7:c5:
46:3c:20:21:4a:b0:e6:8e:eb:3d:b0:88:ad:82:a1:
2c:92:f6:7c:31:73:82:a7:18:ca:0d:33:fc:f5:1f:
71:0a:b6:8e:c4:f7:3d:a4:8f:61:62:80:33:d0:f7:
94:8b:c5:13:c2:b9:13:fa:1d:37:07:a8:02:e1:dc:
94:b1:b4:b8:52:9f:16:93:28:78:9d:a3:78:a7:ca:
f1:9f:f0:32:bb:86:ce:00:8a:b6:93:32:0f:39:41:
df:df:a9:74:e9:5c:8b:71:dd:c7:d8:8a:7c:23:97:
48:cf:9d:f5:ab:71:e2:9a:23:2d:4a:92:c9:80:7a:
01:1b:ce:0f:c0:e5:8c:8c:64:72:d5:98:57:44:9a:
f4:55:0f:3e:3a:36:41:00:3f:dd:68:03:31:43:3e:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EA:B3:ED:7A:5F:F6:EF:D1:DC:DE:2E:06:91:62:77:7F:F8:F1:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/224547-4b0b-4e92-9f93-838f8a76fb97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/224547-4b0b-4e92-9f93-838f8a76fb97/1/3-qz7Xpf9u_R3N4uBpFid3_48TU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.22.0/24
IPv6:
2a11:4480::/29
Signature Algorithm: sha256WithRSAEncryption
07:85:f0:cc:35:c2:ae:32:d1:79:60:e3:4f:8e:00:7e:d6:de:
69:97:a6:92:cb:85:bb:6c:d5:96:b0:bb:62:eb:db:3f:21:85:
d4:43:2c:ad:dd:94:e0:0d:92:47:16:45:a2:6d:0e:62:4a:eb:
69:3a:ec:b4:6e:82:93:13:37:42:28:52:ff:ae:a9:31:46:ac:
fa:23:ee:54:04:15:e6:4d:09:be:af:19:07:8b:f6:99:44:a4:
3d:b8:19:d1:8f:9b:d5:f0:44:d2:7e:39:91:6f:81:76:53:f8:
9e:85:b8:51:a7:69:dd:22:88:27:bf:34:93:bf:fc:15:c3:df:
25:c6:87:f1:24:10:5d:3e:9b:1a:1c:7d:da:a4:a5:05:78:2d:
15:ed:02:0a:ae:b7:61:21:49:f8:12:de:a3:28:21:68:f7:36:
82:a6:72:2d:41:a8:51:bf:60:e4:58:cc:ea:33:3c:eb:81:3b:
d2:6d:43:01:dc:32:12:5c:16:14:16:3e:2b:02:95:92:bb:7f:
f5:6d:3c:4c:0f:98:73:55:29:a8:08:2d:52:eb:78:5d:c1:0e:
56:4a:10:13:9f:25:91:4c:14:0a:ea:1d:36:ab:35:4f:6d:79:
5a:32:75:2e:33:4c:bf:1b:d0:48:34:a2:0c:4c:0b:b7:4c:41:
94:af:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:22 2024 by rpki-client on console-fra.rpki-client.org