Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
File: 66hVhrmRz3DgrxnAOkN24n0Cb0M.cer (raw, json)
Hash identifier: B5ytRsQfHYg2g5HM6WyvX38RHkyNsB4MUuw7nXxwZ+s=
Subject key identifier: EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED41370EAE65AD6A0DFE6DC3921F302
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.149.0/24
IP: 2a12:cb00::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 08:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:13:70:ea:e6:5a:d6:a0:df:e6:dc:39:21:f3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eba85586b991cf70e0af19c03a4376e27d026f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:a2:32:42:01:97:05:87:75:80:4f:69:ca:
8e:71:ae:df:54:1c:e8:1a:03:59:dc:3c:c5:59:50:
d6:91:bd:9b:82:14:da:f5:65:ba:80:96:3e:53:4b:
01:8b:43:cc:55:2f:b9:be:7d:aa:66:3a:22:f4:17:
1a:74:45:bc:de:e6:17:d2:9d:f0:82:37:b5:33:41:
37:14:34:5e:2c:7b:6c:11:98:72:0a:6b:c5:85:87:
f5:c5:89:3f:18:4f:8e:0e:ee:5e:0e:9d:24:24:05:
1c:07:d4:0e:f6:bc:d0:d9:42:4b:50:02:6e:62:02:
e6:04:57:a9:86:73:b5:f9:e5:13:96:9b:24:fc:e4:
36:7f:39:5f:2e:7c:83:39:a1:43:e1:67:02:97:38:
34:0b:a7:43:3c:f6:2e:35:98:8a:21:da:bc:c7:b2:
b7:51:83:a2:c3:35:a9:c9:00:11:a0:9a:b0:32:d0:
6d:bc:96:78:0a:67:96:96:90:6d:4e:72:72:57:04:
24:c4:e0:77:e8:38:81:a7:c1:0d:38:81:89:ef:9e:
47:2f:6a:b6:18:6f:92:3f:ee:43:61:3c:3c:86:f6:
70:79:30:c5:c6:75:c6:b8:85:1d:84:76:0c:6c:69:
d8:58:e1:78:8c:e2:7a:85:fe:e9:14:18:e4:ff:74:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.149.0/24
IPv6:
2a12:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
a6:f2:48:bd:43:e5:1a:05:08:65:78:16:8d:30:f7:17:36:03:
ab:79:c6:38:91:fe:a9:49:8f:9c:30:6c:0e:c0:ed:6a:0b:3d:
07:ea:de:91:4f:a0:6a:55:eb:71:65:82:23:c5:6d:f7:ee:f8:
28:4a:f4:e6:3e:95:48:f4:42:07:0e:77:b9:14:3a:f0:31:bd:
db:87:9c:aa:88:ee:e9:f3:af:d4:79:f8:ac:d4:b1:67:f0:37:
7b:48:d0:76:f4:69:f6:0e:e7:45:36:4c:66:f5:85:cf:32:27:
41:d9:37:e9:de:5c:4e:b6:34:35:99:3c:6d:9c:90:30:c3:58:
85:b5:2d:1d:b0:78:cc:e7:0e:2c:b9:0e:64:ca:53:da:4b:c1:
4a:6c:9e:d3:6a:6a:1b:83:62:d0:88:58:42:30:67:d3:23:27:
a4:20:d6:d3:fe:34:e6:cf:a2:00:b1:3d:58:0e:35:12:cb:cf:
c0:ae:d2:fb:cc:61:da:16:6e:f5:dd:14:56:36:e0:93:60:cb:
7c:0b:5b:a9:96:f8:fd:ed:5b:f1:9a:af:13:bb:b4:1d:b5:98:
fb:58:62:ef:b3:61:00:c6:1f:da:bd:5f:c2:f5:c5:f1:cd:1b:
d9:32:72:27:aa:ba:1f:4d:bf:37:65:6b:46:2a:1b:73:28:fe:
60:3c:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:17 2024 by rpki-client on console-fra.rpki-client.org