
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
File: BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer (raw, json)
Hash identifier: DoNDua492i52nBbQhf0j3p3efji1gMLHE+Ng2bEijrg=
Subject key identifier: 05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019343A3580363978D67083495895FD82F70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 Nov 2024 08:56:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a0d:b140::/29
Validation: Failed, certificate revoked on Wed 11 Dec 2024 13:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:a3:58:03:63:97:8d:67:08:34:95:89:5f:d8:2f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 19 08:56:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:b5:68:9f:ad:85:40:5c:4d:ba:11:9e:de:
ea:05:dc:31:d2:73:28:48:fd:ab:b6:c4:52:6c:25:
00:5d:9b:80:0f:09:3d:d8:de:91:f1:82:20:67:62:
8d:f7:8e:c9:f8:c8:54:3b:89:da:0b:5e:76:77:6b:
8f:89:f2:da:e0:b4:4d:d1:4b:cf:58:4d:4e:a7:92:
97:b7:73:fe:3f:ef:14:03:53:1e:8f:32:3d:68:d9:
c4:ed:3a:6b:76:a3:61:46:26:26:e0:3b:c7:53:12:
c9:8e:8e:47:9d:df:c6:c1:00:c5:4c:b4:f2:5b:0f:
f7:a2:8b:f3:04:e2:cb:1e:78:ed:4e:25:f4:ec:ad:
20:e2:03:f0:41:83:1a:f5:23:e7:28:fd:09:01:f9:
6e:98:dc:41:f2:10:70:da:a4:be:de:b8:d9:bc:70:
70:7f:e5:ad:64:d3:39:2c:1a:de:64:df:98:74:38:
26:0b:66:19:da:e6:db:f7:fb:62:87:58:8c:72:ea:
2e:81:20:a0:74:cf:95:25:3b:45:e0:ff:b5:78:c2:
8f:a6:b9:fe:59:bd:7d:43:37:14:d8:e6:b9:13:d6:
6a:ad:90:2c:0d:4c:49:5a:c5:79:c4:af:ae:01:4e:
c4:26:ce:8d:42:49:68:75:1b:12:45:a7:7d:48:7e:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b140::/29
Signature Algorithm: sha256WithRSAEncryption
21:b7:76:61:a8:3d:fa:3e:7b:20:69:a7:df:0a:91:51:29:9b:
6e:0a:e5:68:3d:4e:e9:d8:a1:6b:be:77:4a:f9:ee:b5:bf:61:
77:d0:bc:64:96:14:60:99:da:9a:7b:50:17:bc:5c:a3:8a:65:
3c:02:dc:9b:87:02:eb:65:e7:b3:e4:22:f5:0c:40:d2:5a:56:
7c:79:ba:fb:66:98:e4:3a:dc:29:3e:63:a4:2a:af:a4:7c:08:
d7:ce:a1:fe:e4:6d:a2:52:68:88:2b:32:32:4a:13:bc:04:10:
58:ad:0e:dd:9a:09:e7:93:24:b6:f2:4d:e1:14:c0:93:0d:12:
ea:12:c2:4c:4b:9a:b5:23:a9:2e:9b:b9:98:c8:14:95:b5:b7:
83:4a:45:70:07:1e:4c:ae:54:c7:7f:b4:76:78:36:d4:8f:bf:
2c:8b:e7:61:e8:8b:6d:7c:88:0d:00:0f:97:cf:36:2e:74:ee:
b2:53:4a:59:0c:df:a1:00:4e:34:e3:0c:95:8b:21:36:d4:a6:
c8:1a:9c:79:d7:36:d1:42:62:2e:d1:87:31:25:8b:f0:18:e1:
36:01:33:a5:d0:58:a4:26:c2:75:59:b0:22:4e:4e:8c:04:92:
f5:c6:95:d4:63:70:19:4d:71:6d:6d:3e:c2:ea:07:a7:91:f6:
9d:26:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:44 2025 by rpki-client