Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66_7k24W3h0EztXVNo3MPHebmLs.cer
File: 66_7k24W3h0EztXVNo3MPHebmLs.cer (raw, json)
Hash identifier: txvBt37Cjngq4pXiUKdsT2CsQoZlad4hoJslJimO5/8=
Subject key identifier: EB:AF:FB:93:6E:16:DE:1D:04:CE:D5:D5:36:8D:CC:3C:77:9B:98:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED3B75A809BF1D46D34A8FB6BA0F45F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/EBAFFB936E16DE1D04CED5D5368DCC3C779B98BB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:06 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.97.0/24
IP: 2a13:800::/29
Validation: Failed, certificate revoked on Tue 31 Jan 2023 16:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:b7:5a:80:9b:f1:d4:6d:34:a8:fb:6b:a0:f4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebaffb936e16de1d04ced5d5368dcc3c779b98bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fd:fb:55:78:72:72:28:fd:5b:7c:fc:da:02:
6b:b9:98:1e:95:25:6f:4e:19:3b:78:9e:af:c0:75:
ca:75:21:25:63:23:3d:c7:fa:55:3a:d8:09:33:a8:
d1:f8:c8:a5:a0:c1:a8:17:15:ed:1f:95:fe:d2:3a:
8b:66:91:a4:c4:a5:c6:b4:06:8d:e2:59:b6:82:75:
76:48:0a:99:2d:30:fe:a4:dc:90:d3:cd:b8:18:02:
19:02:cc:9a:75:f2:d2:db:ad:df:69:9e:e8:00:0f:
1c:4e:65:81:1b:7a:e7:02:7f:64:c1:c6:40:a6:da:
6f:89:f2:fb:a6:2f:fb:b6:9d:05:da:44:97:53:c2:
6b:00:49:d0:b2:06:c6:f6:d4:e0:4b:3c:f3:47:54:
24:15:d2:7a:9c:d5:2c:be:ce:0d:18:c1:91:4f:d9:
ed:48:f7:d9:45:fe:64:a0:43:aa:ec:32:cd:65:7f:
54:74:11:53:65:d9:82:e8:0b:59:84:3a:d8:b5:90:
67:dd:62:78:db:2b:cf:af:bc:03:cb:f0:e8:a9:3b:
cc:d9:47:c2:da:07:65:db:e7:fe:fc:b7:73:95:f5:
de:b8:77:85:fd:5f:01:4d:93:cf:7e:25:e5:aa:84:
70:27:41:47:c7:b7:1c:ea:85:2c:6e:b7:a1:17:89:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AF:FB:93:6E:16:DE:1D:04:CE:D5:D5:36:8D:CC:3C:77:9B:98:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/EBAFFB936E16DE1D04CED5D5368DCC3C779B98BB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.97.0/24
IPv6:
2a13:800::/29
Signature Algorithm: sha256WithRSAEncryption
4b:99:fa:7d:eb:26:f3:13:7d:6f:c6:40:86:08:4b:2f:4e:0f:
04:2a:9b:38:ff:8f:09:f3:19:c7:c4:50:16:e8:e8:ba:f8:1e:
7b:22:0b:23:c6:bd:f8:3d:47:eb:23:6e:0f:3b:5e:5f:f3:20:
5a:31:6f:b8:6b:e1:a7:a1:d8:c0:91:63:4e:dd:d9:1b:02:87:
66:cb:ce:1e:8c:9b:1b:6b:34:ad:6b:49:00:2e:a0:5e:d5:67:
6a:04:d2:59:38:e2:95:b9:a7:80:b1:7f:18:10:2b:0c:6a:ee:
0d:73:ba:c4:29:42:2d:cd:18:fe:88:56:e7:35:c2:b5:96:ab:
b1:27:03:c2:8d:5d:90:6f:8e:ba:7d:88:1d:fb:45:19:c4:13:
8f:e4:4b:13:ee:cc:10:98:0a:b4:ac:f5:c9:ac:5f:c1:2c:61:
e6:9a:90:b6:6e:da:4e:a8:9c:a2:ae:cc:68:3c:41:ef:23:0a:
3a:c2:ee:84:c6:9c:b4:e2:bf:80:a1:ab:96:6c:e5:9d:f7:ae:
d6:99:00:00:bf:56:f9:d2:bb:be:e7:73:e8:58:d4:91:6a:e6:
22:09:af:c3:49:5b:ed:7e:22:3b:a2:9a:8b:24:d3:3f:69:7e:
1d:c3:84:c8:ad:54:0a:19:4a:e9:11:7b:eb:6c:e8:b2:55:e3:
98:5a:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:23 2024 by rpki-client on console-ams.rpki-client.org