Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.cer
File: BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.cer (raw, json)
Hash identifier: xdi3eZmwlNovQcNpMTwgBEKfUNu2mLqdu/PbjpMqwFg=
Subject key identifier: 04:A0:8F:E8:3A:7C:2B:F1:55:24:F4:8D:9A:7C:AC:43:9C:46:FD:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F4206E481FB758A90CDC191177834B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.96.149.0/24
IP: 2a12:1c00::/29
Validation: Failed, certificate revoked on Fri 03 Nov 2023 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:06:e4:81:fb:75:8a:90:cd:c1:91:17:78:34:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04a08fe83a7c2bf15524f48d9a7cac439c46fd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:bc:6e:22:d8:ae:31:ae:ac:c0:01:4b:84:
30:a7:04:91:6c:4f:b3:48:da:d8:b9:29:1b:af:b1:
3f:df:8d:bc:c0:cb:ed:6d:df:46:54:1b:ce:d8:8e:
53:a7:a1:bd:6f:4e:c3:87:0d:e8:26:a3:a3:52:f1:
14:7e:6b:0f:f6:91:65:28:77:59:73:b3:01:62:2e:
2f:df:63:e5:b6:39:a2:5d:53:ad:04:d5:13:29:7e:
20:70:7f:c6:44:62:86:2a:97:99:0d:5f:1d:62:4f:
ab:50:89:89:25:71:9f:00:d1:1f:4b:46:16:6e:4f:
a9:4f:c2:69:2f:97:49:5f:54:ca:1c:74:a2:1b:cb:
82:11:fc:e2:c6:43:c9:c0:d9:8e:27:4a:d9:f8:33:
6d:27:a8:3c:0a:e8:fa:c5:12:b9:57:78:d6:7d:4c:
f7:88:ac:b3:14:3b:6b:c4:c7:4a:22:32:f4:65:ab:
0d:2b:81:32:ce:a3:04:fe:a0:2b:9e:6e:b3:1e:8b:
84:32:a8:45:ee:16:e6:bc:e7:ef:7b:0f:8e:7c:f2:
e9:6b:a9:49:70:f6:5c:a2:80:40:02:6a:bf:fd:eb:
6c:72:c1:f8:8c:3e:05:13:82:53:ab:2b:c8:71:7a:
93:23:13:ea:8e:64:9d:df:d1:a7:bb:7d:7b:35:cf:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A0:8F:E8:3A:7C:2B:F1:55:24:F4:8D:9A:7C:AC:43:9C:46:FD:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.149.0/24
IPv6:
2a12:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
5e:87:e3:c1:ca:73:75:4c:4c:80:8d:98:bb:02:85:29:15:53:
f2:63:5e:5e:f2:35:94:50:4a:23:04:48:44:09:e4:6d:70:67:
3e:f2:60:ca:90:0d:a7:04:1e:6c:70:8e:f4:35:f7:3f:05:f6:
9a:e1:48:44:2f:1a:1a:25:94:6c:8d:04:ab:35:8e:24:85:1d:
62:61:92:d8:24:f3:42:9e:8a:66:99:a8:86:b1:c5:7c:af:16:
4a:d5:84:35:03:b9:3b:c8:a9:67:1e:59:ca:79:10:4e:3c:06:
dc:80:91:23:31:54:e7:f0:44:b1:7b:ba:8d:dd:a7:15:1f:f9:
84:de:0a:61:04:14:ba:88:56:be:1f:92:2a:5f:75:63:29:19:
bb:1b:fc:55:32:67:7c:bc:99:53:fc:26:a3:53:b1:e8:51:ea:
ef:f6:87:ca:ff:65:75:a5:44:a4:bf:0a:b9:e5:26:7b:ef:ea:
8a:c8:b5:64:98:5f:1c:3a:80:dc:27:72:12:05:17:15:ee:2b:
bf:b7:25:61:4c:fa:94:8c:27:8d:75:35:d9:57:b3:29:72:71:
32:6f:7d:e4:13:93:63:93:13:04:79:a4:f4:64:14:48:96:b4:
8a:21:4e:35:18:6e:f3:ec:5d:7e:b9:89:dd:a6:ce:fd:0e:c2:
71:17:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:40 2024 by rpki-client on console-fra.rpki-client.org