Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71kepEyoVEBK7iKCSz05Xt08TA0.cer
File: 71kepEyoVEBK7iKCSz05Xt08TA0.cer (raw, json)
Hash identifier: 2KAh1tnxBK+W70GPwrdFvpMZlQpgskGbDW2lnkP9LX4=
Subject key identifier: EF:59:1E:A4:4C:A8:54:40:4A:EE:22:82:4B:3D:39:5E:DD:3C:4C:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708A0063EAD04843C228F736C1A9AC2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/71kepEyoVEBK7iKCSz05Xt08TA0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:32:50 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 87.236.167.0/24
IP: 2a11:5080::/29
Validation: Failed, certificate revoked on Thu 24 Aug 2023 08:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8a:00:63:ea:d0:48:43:c2:28:f7:36:c1:a9:ac:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef591ea44ca854404aee22824b3d395edd3c4c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5f:2a:1b:8d:94:87:9b:78:9c:c2:e3:23:0a:
26:6b:7f:82:dc:ef:5c:81:8e:81:22:aa:25:b7:d7:
c5:0a:af:89:e7:01:b4:f4:33:23:c1:7b:a4:00:16:
1e:86:89:e5:08:2c:41:01:74:8d:53:f7:58:22:97:
6a:5a:91:ed:a6:3b:18:5a:16:14:81:28:b8:bb:ff:
84:f2:55:16:2d:e0:eb:00:a0:47:19:8c:be:18:6e:
42:c9:86:ad:55:7c:78:7e:41:46:c9:6e:80:c0:e8:
e5:1e:db:19:d9:68:40:06:2f:6b:bc:95:c4:f7:ec:
71:d9:34:7a:29:c8:2f:5a:71:6a:6e:ec:99:b8:6c:
6d:17:1f:cd:d7:af:1b:7c:33:f6:30:92:8a:0b:59:
37:2f:f8:cb:85:84:cc:73:1b:4f:13:34:2f:cf:3c:
d8:02:f0:6f:90:3b:c4:e8:63:07:7a:12:ee:3c:5e:
f0:a3:7f:a0:e7:ff:26:be:f1:34:34:15:ea:60:c5:
97:45:19:58:34:4e:ba:e6:c5:bd:bd:ea:6b:7f:7f:
18:f2:ec:00:7b:c6:93:85:b8:de:f2:73:23:6a:25:
a6:ef:49:a5:9f:f0:4e:13:1a:31:3c:6a:6f:fd:ce:
ed:bf:f8:13:c2:ed:60:de:92:7a:99:b3:82:a4:26:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:59:1E:A4:4C:A8:54:40:4A:EE:22:82:4B:3D:39:5E:DD:3C:4C:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/71kepEyoVEBK7iKCSz05Xt08TA0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.167.0/24
IPv6:
2a11:5080::/29
Signature Algorithm: sha256WithRSAEncryption
0b:44:e4:76:70:7f:32:bc:5e:a0:2a:a1:81:7f:d6:0a:cd:2f:
92:e4:b3:cb:76:40:b2:2c:47:8c:e8:62:d5:ac:cd:3c:8d:db:
27:91:75:ff:ce:23:d0:60:91:94:50:ac:52:66:24:14:55:89:
11:7f:6b:7c:00:3e:c7:1f:e1:e5:3b:cf:e7:e0:36:77:be:88:
42:54:49:85:87:e7:55:f9:12:5c:05:fa:d2:aa:92:59:02:52:
c5:84:3a:90:51:ea:db:25:31:a1:0e:2b:83:2b:54:2d:8a:3c:
2e:bc:7c:09:fc:18:dd:26:d1:5e:39:de:cd:49:2f:8a:5f:b2:
ec:85:85:03:5e:89:65:5a:16:0f:54:de:3f:04:4f:89:2e:20:
52:0e:7f:78:41:f8:8f:10:90:99:f0:90:d5:27:bd:61:be:78:
e0:db:8d:b2:be:c2:61:ff:c6:31:c9:6e:b6:7b:63:2a:2a:c7:
95:97:1b:3b:83:62:25:c4:14:77:3b:91:06:14:fb:ae:d7:0d:
13:b1:a8:e1:3c:83:e1:f1:e3:a3:1a:85:48:ea:df:89:42:f4:
1f:25:d8:13:57:38:a0:59:a4:75:42:43:f8:f4:3e:44:fe:14:
83:52:b6:31:07:5f:e6:9d:5a:a1:dd:55:d4:5f:62:33:55:5a:
58:5b:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:48 2024 by rpki-client on console-fra.rpki-client.org