Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D2Eiw9fFxf-DUuTtI_iz19_0j3E.cer
File: D2Eiw9fFxf-DUuTtI_iz19_0j3E.cer (raw, json)
Hash identifier: jK4g2nF5NBY3Fs+FQdEYA6HdD9NHTAjRVvsv0DpTmnQ=
Subject key identifier: 0F:61:22:C3:D7:C5:C5:FF:83:52:E4:ED:23:F8:B3:D7:DF:F4:8F:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185724600190BE75325931DB684181C6E7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/D2Eiw9fFxf-DUuTtI_iz19_0j3E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.233.176.0/22
Validation: Failed, certificate revoked on Thu 01 Jun 2023 13:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:00:19:0b:e7:53:25:93:1d:b6:84:18:1c:6e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f6122c3d7c5c5ff8352e4ed23f8b3d7dff48f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:00:04:9f:2a:bc:6c:6d:f6:86:d5:1a:58:
92:f3:3b:33:c9:e2:4b:1c:39:8b:ae:fa:68:6f:88:
74:ff:79:af:93:c7:19:67:bf:a2:ca:24:11:20:01:
44:0a:c1:a6:f1:fa:88:a6:cd:96:39:d9:48:30:1e:
4e:1f:23:3a:fa:b1:ee:24:02:95:4c:05:9e:b1:3c:
e0:e7:0c:2e:3a:9d:1a:53:90:30:ff:05:71:17:a8:
76:d5:57:a1:95:61:a6:f0:dd:52:ad:8f:6d:65:1e:
62:81:1a:af:92:b5:c0:77:6b:06:d8:03:ca:48:bb:
99:c7:02:40:02:a2:b2:d5:38:9e:2c:2a:61:2d:04:
c6:f2:73:7d:68:b5:fa:a0:8c:38:3c:c4:9f:ae:ae:
86:5b:6b:d7:2d:f0:ed:02:2b:19:b6:3d:8f:c2:d6:
44:37:2b:47:01:17:ac:42:9f:02:ca:82:80:49:8e:
5d:ab:7b:f6:72:21:d3:98:4d:6f:e1:b8:29:56:ab:
fa:0c:da:91:82:62:a5:f4:55:54:7d:04:fa:9a:bc:
b6:4e:98:06:46:49:55:0a:75:27:40:66:55:97:62:
c4:03:3b:b3:53:d2:ed:d2:50:7f:eb:79:b2:85:0a:
04:fa:9a:fe:e3:db:ac:dd:f0:ff:11:14:e4:ce:8d:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:61:22:C3:D7:C5:C5:FF:83:52:E4:ED:23:F8:B3:D7:DF:F4:8F:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/D2Eiw9fFxf-DUuTtI_iz19_0j3E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.176.0/22
Signature Algorithm: sha256WithRSAEncryption
94:5a:9c:c6:32:35:16:36:e9:b3:a9:b8:5f:e5:18:72:17:e5:
c5:bf:9a:5a:1d:ea:6c:c1:e0:0d:e2:54:85:8f:ef:28:39:5c:
c2:ee:94:b0:89:50:d0:d5:32:62:51:6c:d3:37:4a:f5:35:5c:
0a:a9:66:8b:d9:18:e5:e6:71:f2:79:67:5c:ee:fb:6d:a4:23:
3a:4a:07:a8:00:2a:34:2c:64:29:6e:4a:ab:22:c2:ce:02:e0:
53:a6:b4:53:f4:27:29:67:1e:12:54:bb:fa:22:79:69:71:10:
3d:59:95:1b:60:76:fa:d8:39:7f:52:db:64:4c:ba:aa:8c:c8:
a6:a8:64:85:0b:b0:41:8d:1e:e4:e1:c3:b1:76:14:ac:6f:de:
6c:3d:72:41:aa:dc:89:99:b7:bb:d4:f7:a4:01:10:f6:de:d3:
32:16:c6:be:2a:b6:f7:12:b2:dc:cb:db:46:51:a0:c5:fc:98:
43:7a:fb:13:67:f7:10:66:70:49:77:da:1a:02:c3:46:12:54:
45:1a:ea:d7:a0:67:4d:47:ae:09:6e:1e:46:df:67:9d:ea:eb:
7d:dd:a3:6e:ee:05:38:99:c5:68:99:cc:d0:a5:97:d2:ad:3f:
4a:d0:18:51:27:06:9e:51:9e:3d:9d:b9:35:7d:67:c7:32:02:
d9:3e:83:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-fra.rpki-client.org