Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer
File: 3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer (raw, json)
Hash identifier: wzoStn/9e1QkJ00x3ogC0g/XXR1leFteyGKL9EaasQM=
Subject key identifier: DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD122FF6E595FFF311A74858A6261D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/3JgLt-Bxjjzh8KCuJor-ea93Ty8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.242.237.0/24
IP: 2a11:b140::/29
Validation: Failed, certificate revoked on Tue 17 Oct 2023 07:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:22:ff:6e:59:5f:ff:31:1a:74:85:8a:62:61:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc980bb7e0718e3ce1f0a0ae268afe79af774f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:3e:92:14:0b:fb:c6:41:11:79:b1:5b:3b:
af:ce:ea:1c:38:a4:e7:5f:57:3a:7a:40:97:f7:b8:
06:10:3b:71:ad:c9:f0:dc:1b:d7:75:3d:36:27:37:
67:32:92:fd:05:2e:57:6b:37:98:8a:25:c3:a7:ce:
d0:d4:0e:1a:44:26:98:89:15:cd:86:9a:28:a9:27:
83:93:2e:ab:76:6a:ee:ab:20:ad:02:f0:df:08:1b:
1e:7b:19:9a:67:3f:90:6a:30:93:ff:32:19:77:08:
eb:84:7d:9a:f9:49:a1:15:6a:a8:31:3e:af:81:71:
8c:76:47:44:bd:2b:59:f0:4d:e4:f3:78:e6:65:cf:
89:eb:e9:97:8a:6f:15:64:01:37:75:e8:a8:7d:80:
8d:4c:96:15:a1:c6:e8:21:23:99:65:de:a1:d7:fd:
24:4e:c9:5e:75:c5:a5:0b:6b:fb:34:b9:c7:7a:fa:
6c:b7:4a:06:98:aa:1f:d7:3d:b7:ee:d4:5a:5c:bf:
80:8e:68:57:e6:0a:7e:94:df:32:40:dc:c4:e0:f1:
31:37:b4:a5:f9:24:89:16:44:8c:ad:ec:a8:c6:36:
cf:d3:94:d3:df:99:9d:fd:ef:e5:c2:2b:ed:be:62:
0d:3b:11:de:c7:8b:1f:07:af:3b:3f:5d:6a:47:fd:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/3JgLt-Bxjjzh8KCuJor-ea93Ty8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.237.0/24
IPv6:
2a11:b140::/29
Signature Algorithm: sha256WithRSAEncryption
6b:2e:a2:7b:8c:2e:2f:dc:ed:a9:45:f4:f7:f3:a5:c2:4a:e1:
3c:0d:7f:74:40:c6:53:5c:41:36:45:ef:c7:dc:76:02:be:c2:
98:a0:a0:a7:29:c4:fb:b1:9a:0a:9e:31:89:f4:57:2e:01:77:
ca:68:36:19:5c:cc:13:dd:75:72:cc:e8:e8:d3:0e:c6:92:f0:
d1:a7:c9:42:95:2b:8e:c9:27:4e:e6:ff:ad:09:5b:01:c6:26:
86:0f:97:19:2a:de:f3:92:a7:91:ef:f2:6c:0d:84:d4:48:7d:
3c:57:9e:14:0c:7d:e5:6d:78:c3:df:54:b2:6c:de:bb:52:2e:
a3:c7:64:8f:0c:73:03:12:8a:c1:ba:11:da:75:ac:c5:48:34:
2d:16:1d:85:55:dc:9c:97:11:e9:bf:45:cd:56:2d:9e:74:2d:
65:01:fb:87:1b:9e:1b:7f:23:0f:6b:40:2f:c4:a1:30:dd:7f:
03:6f:e1:a9:cc:30:8d:c2:0b:4b:d5:81:be:3f:78:bd:ae:42:
ac:b0:2c:c6:7d:f4:a6:c6:4a:8c:22:bd:6f:a8:c4:17:1b:34:
fe:08:45:88:88:e2:69:e7:d0:f9:c8:5c:b2:02:4b:4a:02:ae:
89:7d:06:0c:39:d7:8c:ba:c4:5d:3b:3e:be:b3:56:63:e2:e3:
6c:eb:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:52 2024 by rpki-client on console-fra.rpki-client.org