Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58hKSL4W_A3rT94RhpI35klUh00.cer
File: 58hKSL4W_A3rT94RhpI35klUh00.cer (raw, json)
Hash identifier: Z1An8ksMfM94okoJdETcYdlyF/mxQieWj7UaCIFyBsk=
Subject key identifier: E7:C8:4A:48:BE:16:FC:0D:EB:4F:DE:11:86:92:37:E6:49:54:87:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E65EBC8B2D8129932022C3EEE5E0BC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/58hKSL4W_A3rT94RhpI35klUh00.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:34:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 84.54.33.0/24
IP: 2a0d:9400::/29
Validation: Failed, certificate revoked on Thu 06 Jul 2023 10:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:eb:c8:b2:d8:12:99:32:02:2c:3e:ee:5e:0b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:34:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7c84a48be16fc0deb4fde11869237e64954874d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:80:59:02:ab:dd:fc:b5:e2:40:39:9f:17:
46:c2:9a:cd:d6:5e:0e:f2:16:33:46:14:77:1a:f1:
c4:cc:a8:b7:e4:62:ea:8c:2b:e7:9c:86:9c:a0:15:
db:33:bc:78:ad:1b:ac:f0:ae:77:de:2f:d3:4c:dc:
16:f9:52:a2:27:5f:e4:01:2a:b6:a1:ca:77:fa:df:
09:8a:8e:0e:db:99:f0:53:6a:7c:00:20:72:fa:cd:
6c:2a:55:89:1c:ab:4e:87:19:a2:4f:3a:93:a2:37:
b6:1b:16:1f:16:56:d4:3e:74:1e:41:68:a3:a8:cd:
af:27:ea:71:61:86:59:a7:fa:97:23:09:c7:0f:49:
a7:13:89:c1:8c:6b:fa:eb:d3:54:ef:e7:47:87:e2:
28:12:37:d3:87:bb:3d:cd:71:fc:c7:2f:25:6d:de:
05:8f:98:96:5e:30:20:54:73:09:91:a3:45:61:2c:
ac:4e:fc:c9:f9:cb:fe:e7:a4:ac:b6:ca:45:bd:5a:
10:85:f8:4a:74:3d:b3:02:a2:fa:6f:6c:94:78:ce:
c2:d6:e0:c7:8e:51:a9:bf:c4:2b:bb:80:21:30:da:
74:6d:15:69:9d:c5:bd:c5:2b:15:de:7c:8b:b0:55:
f3:e2:ce:0b:d0:6e:ac:d5:c1:53:e8:97:46:6a:0f:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C8:4A:48:BE:16:FC:0D:EB:4F:DE:11:86:92:37:E6:49:54:87:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/58hKSL4W_A3rT94RhpI35klUh00.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.33.0/24
IPv6:
2a0d:9400::/29
Signature Algorithm: sha256WithRSAEncryption
a7:29:7b:15:bf:15:77:26:57:bc:9b:e7:d0:c8:25:29:f4:42:
2d:72:80:e8:5d:e1:ab:1f:db:5a:6d:f5:b1:4b:b5:d6:3d:5d:
b4:b2:94:7c:f6:8e:5b:70:90:e6:3f:e1:4d:ba:95:3e:01:42:
c6:4d:75:ac:42:0f:f4:56:a6:6e:27:3f:d9:40:cb:63:37:b3:
12:6b:77:48:47:60:7e:2a:51:5c:c8:7f:fc:87:70:b5:7b:c7:
25:dd:8b:b2:e8:8c:7b:82:88:0e:20:3a:dd:ac:7d:0d:61:de:
46:18:be:66:ba:7b:22:50:19:5f:a5:0c:42:f2:60:85:99:80:
ba:11:99:61:9f:7e:af:59:ed:0a:d8:04:ef:11:50:00:5f:b1:
73:7a:5a:a0:39:12:17:d7:6d:83:1e:52:f3:e4:a2:a2:d0:e4:
65:d5:b3:12:c7:fe:96:2d:6a:61:74:f1:90:88:9f:43:7d:48:
62:ac:a8:d2:34:d2:27:bc:8c:fd:9e:89:9b:e1:fb:e1:e8:77:
67:b4:6c:29:8a:8b:cf:db:b3:05:f1:40:81:e3:ab:d9:35:b6:
07:00:d0:a0:b8:91:8c:a1:7b:83:dd:0c:e8:5a:6f:35:95:66:
47:19:c0:aa:a0:3f:22:25:28:d2:30:98:42:4a:4c:a7:03:3d:
77:57:53:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:44 2024 by rpki-client on console-fra.rpki-client.org