Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3zH46yVAPX_-SGsKE4M1BgEhqPY.cer
File: 3zH46yVAPX_-SGsKE4M1BgEhqPY.cer (raw, json)
Hash identifier: tLZXLWcCgdvQM8F33lawbary75tATx1GzoO8Guz+Piw=
Subject key identifier: DF:31:F8:EB:25:40:3D:7F:FE:48:6B:0A:13:83:35:06:01:21:A8:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF7E5B477776503B15EB698B22C9934
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/3zH46yVAPX_-SGsKE4M1BgEhqPY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:34:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 46.253.132.0/24
IP: 2a11:3640::/29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 10:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:e5:b4:77:77:65:03:b1:5e:b6:98:b2:2c:99:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:34:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df31f8eb25403d7ffe486b0a138335060121a8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:9c:76:63:68:66:6d:f2:93:2b:53:9a:57:
85:b0:05:d8:30:8a:dc:8e:b4:1f:e4:69:34:55:e6:
13:9c:3a:ef:c6:96:60:5a:23:87:31:1b:a7:4c:ff:
4e:9c:8e:7e:07:2b:d6:a7:c3:45:b4:87:47:66:fb:
a1:f5:28:d9:42:1e:66:dd:b4:3f:e3:1c:eb:09:03:
d3:b5:52:ad:cb:fa:d2:89:e6:a2:9e:de:8c:3e:8e:
aa:18:bd:ef:69:0f:7d:f9:99:31:a3:7c:8c:c2:0a:
aa:fa:49:78:ea:1e:0c:8e:6b:23:81:85:b6:f4:a1:
cb:20:b1:77:e5:09:4c:6b:92:ab:46:48:93:a1:f8:
23:3b:87:c2:91:53:45:9a:78:9a:f4:86:99:ef:db:
ec:17:4d:ed:81:87:78:0c:ad:35:39:58:1e:56:08:
8c:b5:ed:37:2e:41:ad:6a:44:e9:28:0b:86:77:03:
a6:87:d0:11:51:13:dd:33:ea:3e:a1:de:31:63:da:
95:ec:52:12:de:7d:30:8c:b3:f3:b8:70:de:25:50:
e9:88:c0:9d:43:3e:a2:42:f8:14:b8:ab:8c:28:71:
0d:1a:0c:1a:16:26:2f:ef:a0:5c:e9:5f:93:df:40:
c8:af:7f:30:3f:12:81:07:69:99:8c:82:2e:01:9e:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:31:F8:EB:25:40:3D:7F:FE:48:6B:0A:13:83:35:06:01:21:A8:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/3zH46yVAPX_-SGsKE4M1BgEhqPY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.132.0/24
IPv6:
2a11:3640::/29
Signature Algorithm: sha256WithRSAEncryption
38:32:7b:04:c7:7f:d8:55:b5:70:dd:17:16:76:f1:be:4c:b8:
24:82:a6:39:da:ae:cd:e1:c5:a7:06:a4:8d:6f:d8:e1:44:3a:
f0:2b:3a:4c:fa:2a:7b:d0:c5:11:2c:fa:c0:21:b2:ae:ce:6a:
26:12:af:51:e7:40:13:2c:85:6c:26:2c:7c:8d:80:4f:f6:ce:
43:d5:0b:4c:6a:e9:c2:e7:d4:08:0d:e9:ef:77:ba:9b:82:de:
18:58:03:b3:38:36:91:92:0f:e4:64:49:0b:8f:3a:84:8f:b0:
09:fc:20:b0:7b:1c:59:26:09:e9:cd:15:99:0a:7c:4a:29:f3:
ab:35:cd:f7:3c:d7:dd:11:c4:14:4b:9f:a0:75:42:f8:3e:e1:
8c:1d:98:85:0c:ee:cb:61:58:96:33:65:ff:5d:48:18:b7:41:
cd:c0:fe:a2:00:c0:b5:07:dd:02:96:d6:13:1e:0e:6f:66:5a:
ba:22:4f:90:b0:f4:05:c2:72:75:4e:f1:44:57:8f:20:52:ea:
bf:2c:87:a5:9e:a8:63:be:a1:92:b9:ff:b1:42:80:2b:fb:7e:
09:71:0c:07:2c:9a:84:6d:b7:d2:43:9d:a1:82:73:01:88:69:
11:a8:bb:e9:39:08:d0:e6:5d:2d:ed:cf:b0:74:64:63:02:c1:
e6:e9:a1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:50 2024 by rpki-client on console-ams.rpki-client.org