Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7-oQY1dccQ1QxD8cehpog_hNlJg.cer
File: 7-oQY1dccQ1QxD8cehpog_hNlJg.cer (raw, json)
Hash identifier: ZJdrt6sQCae7QHFAqtIyPGOrxOu5aY5FyaE6wGS96hE=
Subject key identifier: EF:EA:10:63:57:5C:71:0D:50:C4:3F:1C:7A:1A:68:83:F8:4D:94:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01896478483364D0FAC256E43BCAE4ABE01D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/2d401e-06eb-4309-b556-1d621238c4fd/1/7-oQY1dccQ1QxD8cehpog_hNlJg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/2d401e-06eb-4309-b556-1d621238c4fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Jul 2023 15:29:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 89.248.70.0/24
IP: 2a11:6180::/29
Validation: Failed, certificate revoked on Fri 01 Sep 2023 07:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:48:33:64:d0:fa:c2:56:e4:3b:ca:e4:ab:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 15:29:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efea1063575c710d50c43f1c7a1a6883f84d9498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:0c:d5:1d:80:7d:1e:02:27:9a:a5:44:16:
85:15:b2:26:b9:8c:a6:c2:09:81:48:2f:84:4f:56:
3f:d9:d9:df:10:31:ed:4a:99:fb:73:d7:08:eb:d3:
d8:8e:9b:58:bf:dc:5e:bb:34:0d:f0:96:90:32:74:
5a:e8:b0:cb:93:43:4f:ad:8c:c6:b0:e8:33:c8:44:
2c:68:78:89:11:48:a9:26:16:42:ee:3f:be:76:4a:
4b:c3:5a:a9:ac:49:d8:ed:f3:a8:8e:5b:cf:0b:40:
cb:79:de:c6:3d:2f:6d:47:2d:b5:c9:2f:5e:4e:06:
16:cd:fb:df:f8:87:a4:33:a7:2a:53:de:ed:e3:95:
5c:93:bc:8b:e6:8c:b2:89:d0:45:86:ca:6b:ac:96:
79:2d:c4:e7:63:60:14:0b:ae:99:00:24:b6:cb:51:
38:ee:d1:66:71:21:91:e5:45:9b:58:82:65:1e:15:
7f:71:c6:37:64:c5:2b:f0:14:45:75:7c:55:24:e4:
d7:d1:7b:c2:f0:19:a8:f6:af:ea:a8:74:74:b8:23:
ce:5f:88:f8:c0:89:9e:23:2a:1a:8d:c1:af:b7:12:
98:2d:c6:b6:02:3a:d9:2a:f3:58:09:89:7d:c3:7d:
30:12:54:3d:db:a4:40:0a:cd:dc:27:87:b7:85:98:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EA:10:63:57:5C:71:0D:50:C4:3F:1C:7A:1A:68:83:F8:4D:94:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2d401e-06eb-4309-b556-1d621238c4fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2d401e-06eb-4309-b556-1d621238c4fd/1/7-oQY1dccQ1QxD8cehpog_hNlJg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.70.0/24
IPv6:
2a11:6180::/29
Signature Algorithm: sha256WithRSAEncryption
76:9a:4a:17:9f:69:55:ce:fb:fd:29:6b:1f:ad:e4:96:f8:de:
6a:df:89:5c:cc:de:ad:95:e9:00:17:92:61:31:fb:47:7d:63:
e0:f2:13:2e:10:1c:51:45:ac:bd:f9:8b:86:b1:8f:4a:ed:05:
a7:a4:31:8e:ae:22:ec:24:e4:04:a5:2d:98:61:d2:61:56:7e:
9d:2a:4b:cd:b1:26:e3:fa:ba:61:e1:63:fb:cc:b8:04:1e:ae:
18:f8:a4:95:c6:30:c5:96:1a:14:67:ca:79:5c:fd:f3:50:3a:
6e:db:27:11:ca:ba:2f:d9:6e:6d:31:b9:5f:9a:f6:fe:47:ba:
9f:e9:d5:54:b9:20:6c:fe:90:e1:65:be:42:b9:61:3e:db:15:
fb:b1:52:51:07:2a:98:da:a3:13:32:34:67:cb:79:d8:18:5c:
10:4d:d8:37:7d:a2:94:27:81:f3:de:4a:f3:b5:b6:c5:04:87:
b0:4b:3b:9f:79:dc:67:09:58:b5:bb:d4:3f:d7:7d:2e:55:af:
58:62:c5:63:44:4d:36:6a:ff:8f:49:e5:c9:a3:2d:a0:6e:14:
cd:5c:f1:14:9d:2c:01:4b:1b:77:22:ed:80:15:cc:cb:42:45:
25:81:5b:cf:ed:7e:69:19:f1:14:9c:83:5f:4a:aa:04:6a:5f:
d6:91:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:11 2024 by rpki-client on console-ams.rpki-client.org