Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DivJkyqpzqtfcrbQMrn67eDWiGA.cer
File: DivJkyqpzqtfcrbQMrn67eDWiGA.cer (raw, json)
Hash identifier: OMw2CJtdBFI2CsmQqG8vhbjADYoZD0/EWCYM/Ji/0OE=
Subject key identifier: 0E:2B:C9:93:2A:A9:CE:AB:5F:72:B6:D0:32:B9:FA:ED:E0:D6:88:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED1D1BFFE4826F45C1AFE4814A24675
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/DivJkyqpzqtfcrbQMrn67eDWiGA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:32:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.234.112.0/24
IP: 2a01:ab40::/29
Validation: Failed, certificate revoked on Mon 30 Jan 2023 11:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d1:d1:bf:fe:48:26:f4:5c:1a:fe:48:14:a2:46:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:32:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e2bc9932aa9ceab5f72b6d032b9faede0d68860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:15:2a:db:8b:ae:38:7c:c5:ba:f8:b9:0a:
63:d9:4e:2c:28:06:5f:5a:43:f4:8f:09:63:ef:63:
a6:ad:e1:3d:ba:8c:f8:e7:2c:b5:17:51:ab:c6:d4:
4e:3b:a8:51:48:92:28:6e:88:42:0b:bc:5f:f6:30:
79:85:0c:b0:1b:5b:bf:41:c3:b3:d6:d9:d3:73:9d:
78:6b:3a:c6:f1:90:d5:6f:00:4c:56:80:3c:54:4f:
82:28:78:59:60:0f:72:a6:b0:3c:d3:03:70:ce:37:
7a:a6:e3:d9:b1:76:e8:ca:db:ef:b3:22:7f:91:c4:
77:f1:8d:06:fc:c5:87:9a:1a:d1:09:6f:53:bf:62:
92:9a:3c:ea:5d:c7:7f:49:56:51:8f:f9:7d:70:ef:
0a:66:6b:35:06:46:87:15:4d:73:33:fa:69:22:09:
a8:f6:60:a7:79:a6:3e:d9:44:6c:36:b2:56:8b:6c:
85:25:e3:c9:81:f2:75:72:bf:47:ce:ea:95:db:13:
fa:47:64:80:0d:0e:ae:c7:32:23:90:23:cf:75:95:
79:cd:9d:a3:38:dd:c8:63:a0:6e:48:6c:dd:37:11:
94:fd:32:a6:7a:ae:93:89:ad:83:ce:ea:19:df:c9:
c4:b0:9e:9b:66:32:29:ad:5a:37:f9:44:ce:c4:37:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2B:C9:93:2A:A9:CE:AB:5F:72:B6:D0:32:B9:FA:ED:E0:D6:88:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/DivJkyqpzqtfcrbQMrn67eDWiGA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.112.0/24
IPv6:
2a01:ab40::/29
Signature Algorithm: sha256WithRSAEncryption
37:3a:99:21:14:22:db:64:e1:fa:16:d4:e4:0b:0a:35:03:45:
ce:3f:74:f1:75:72:a9:69:2e:fc:0c:d3:25:81:f8:0f:02:dd:
57:7d:02:72:21:4e:df:e4:13:45:fc:e2:31:d0:b5:5e:23:96:
77:ee:76:a3:8e:4d:62:e2:4a:78:4c:0f:49:78:13:f1:c4:4b:
4e:dd:0c:15:6f:47:f3:2a:89:9a:ad:2e:f5:d4:83:0a:b0:bb:
66:84:9d:39:59:9b:1d:72:30:01:39:0d:84:dc:9b:cd:5f:ba:
28:57:61:7b:a3:51:a0:74:81:b3:9f:c7:43:d6:3a:7e:ac:d6:
9a:70:71:ff:e9:3d:df:e8:5d:1e:dc:e3:99:ed:ab:64:a9:05:
27:55:46:f5:eb:d6:5e:8e:4c:9e:81:fd:c0:f8:af:0c:66:63:
03:2f:e1:ce:f3:b0:ad:18:51:c6:75:3c:1e:80:e4:8f:ff:fb:
ea:0c:60:1d:65:96:cf:29:42:b7:f5:1c:d6:2c:e5:8d:5b:20:
a9:da:21:92:dd:2e:0b:b5:49:d7:ce:09:01:10:b2:b6:1f:95:
8e:56:6c:4c:4c:d4:29:8d:a9:11:79:3f:3a:76:51:d5:32:42:
0f:15:fa:ae:2b:c1:e4:73:3d:2c:c8:61:85:2a:c5:80:eb:50:
ec:1c:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:14 2024 by rpki-client on console-fra.rpki-client.org