Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.cer
File: 7t0Uxqqw6KTJwkEdkPzhBWjCXsE.cer (raw, json)
Hash identifier: g5CSDZpMhgBhTqgiYmqOiq/TfT7sZ2Zc4U2TAg6E+Yk=
Subject key identifier: EE:DD:14:C6:AA:B0:E8:A4:C9:C2:41:1D:90:FC:E1:05:68:C2:5E:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF786EC84EDDDFF6F62EF27D53E1C3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.5.16.0/24
IP: 194.5.50.0/24
IP: 194.5.54.0/24
IP: 194.5.62.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:86:ec:84:ed:dd:ff:6f:62:ef:27:d5:3e:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eedd14c6aab0e8a4c9c2411d90fce10568c25ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:e9:13:46:86:22:b1:a2:4e:68:72:77:39:
60:2c:8b:f7:3c:5f:56:d4:24:bc:5d:20:04:ef:01:
81:f6:0a:af:26:1a:7b:56:26:fa:59:c8:da:8f:fa:
67:89:e9:17:09:ad:5e:b9:d9:40:2d:bb:01:70:aa:
ad:f8:5d:9f:da:a1:65:26:e7:7f:60:b3:78:d1:c2:
56:09:18:e8:09:bc:32:1c:b8:46:78:cd:4b:2e:45:
a6:bc:4d:85:5c:15:74:ff:eb:c1:3a:94:f8:7c:32:
d3:c2:78:c7:ee:18:02:1d:61:9a:7f:0c:03:cb:04:
5b:fc:9b:1c:c7:d5:91:54:1b:ec:8e:d2:01:db:71:
94:ac:55:59:ec:12:ec:7d:4e:45:68:a7:5e:27:9d:
bd:5d:8f:ce:ef:38:46:6e:44:64:6d:c8:a3:0c:36:
b3:ff:b0:11:ad:04:08:82:bf:8f:a8:9e:b2:17:21:
c8:ba:38:02:9b:31:16:99:90:ca:bb:8e:34:6c:4e:
25:1f:6a:3c:5b:ec:72:4b:6e:b9:fa:5e:ad:fe:7a:
92:e2:a8:60:28:16:9b:87:3b:b2:ae:e1:82:f4:83:
29:64:3d:88:c1:9c:f9:8c:49:1c:87:eb:45:3e:8c:
da:97:cc:06:2e:94:86:93:b3:1a:c0:71:f5:70:3b:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:14:C6:AA:B0:E8:A4:C9:C2:41:1D:90:FC:E1:05:68:C2:5E:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.16.0/24
194.5.50.0/24
194.5.54.0/24
194.5.62.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b7:e9:b6:05:ea:88:76:14:91:29:ac:47:6d:7a:b7:bf:2d:
6c:25:95:25:60:e9:52:45:06:7c:c5:c5:4a:fa:ac:2a:4b:1f:
7f:1f:0a:32:10:00:0f:c8:6a:b1:1a:01:31:80:ca:37:61:45:
2f:7c:0a:f4:f8:e5:32:2c:5b:43:79:69:f4:24:e6:25:4f:4d:
a8:5d:3d:f6:c2:b4:80:8e:58:1f:6c:ab:6d:d0:b2:75:60:f6:
77:53:70:4f:c4:60:b0:a3:44:62:36:8f:99:a3:c5:21:47:94:
50:f5:c8:7f:47:b7:b5:73:db:6d:42:28:f0:fd:ab:16:90:7d:
34:5e:ff:95:a2:6d:e2:ef:b9:eb:38:7a:df:31:9d:b2:d4:49:
b5:00:06:1d:98:4a:a4:d2:31:32:8d:9c:fe:d3:0b:af:ad:7b:
16:99:26:d8:8e:03:b7:10:88:4d:54:5a:32:f0:1d:be:e0:39:
08:21:47:46:38:fe:a2:c1:34:4c:3b:87:cf:0b:83:2b:a0:83:
dd:d2:a1:f9:72:2b:e3:f8:7a:6d:84:c5:a4:1b:0e:6c:61:66:
8a:b2:da:31:48:b2:eb:11:62:77:12:e9:04:ff:84:59:85:01:
17:3e:6b:0c:2a:61:e6:e3:21:cd:0c:1a:c9:e3:88:26:27:52:
d2:fa:16:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 15:45:37 2023 by rpki-client on console-fra.rpki-client.org