Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DkQMiZiTAeI7dC3DoQsuySBRRIc.cer
File: DkQMiZiTAeI7dC3DoQsuySBRRIc.cer (raw, json)
Hash identifier: DfQUizY1sO9EuLfbaEWV9eB3HXzYZ/XroJi/5P8waQk=
Subject key identifier: 0E:44:0C:89:98:93:01:E2:3B:74:2D:C3:A1:0B:2E:C9:20:51:44:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187AD3B506F183929782E61A5BC3A8E569B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/7e5421-b560-48a5-b175-8d51de6bd796/1/DkQMiZiTAeI7dC3DoQsuySBRRIc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/7e5421-b560-48a5-b175-8d51de6bd796/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 23 Apr 2023 08:29:18 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.95.134.0/24
IP: 2a13:a800::/29
Validation: Failed, certificate revoked on Mon 24 Apr 2023 08:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ad:3b:50:6f:18:39:29:78:2e:61:a5:bc:3a:8e:56:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 08:29:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e440c89989301e23b742dc3a10b2ec920514487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:f9:70:a4:20:1b:8a:ff:43:0d:4b:53:62:
42:f5:1a:67:c3:37:86:ed:a3:dd:f8:dc:47:e4:8c:
0d:46:aa:a5:73:17:65:27:09:e5:9a:9e:d8:0d:b6:
50:14:26:73:c5:28:1b:48:fc:7b:4a:e7:17:ba:23:
4b:a6:72:e9:21:d0:b3:4c:cb:f0:0d:31:38:94:0f:
17:5d:65:91:96:5d:38:fc:0f:2e:2a:7c:a4:8d:82:
c8:23:0b:0b:b6:5e:1a:ff:a5:92:c5:7f:fb:26:50:
d2:de:94:e0:6a:92:b3:81:8c:87:b0:64:f9:69:92:
2b:83:ef:05:59:d6:0a:79:b2:93:88:9b:66:f6:d8:
87:60:63:fc:35:8b:b8:9b:d4:a9:25:60:e3:f3:aa:
9e:ae:07:86:38:67:49:83:c8:a3:53:ab:cd:9b:54:
b9:4f:4b:8a:44:c8:f1:13:b8:90:56:54:05:07:25:
60:db:cd:9e:11:ce:71:cc:83:43:9b:c8:e5:f6:0f:
c4:72:f6:9c:68:83:e4:48:bc:23:41:de:0f:17:9a:
cf:99:69:2e:4c:2a:5a:19:b4:6f:f9:66:e6:24:65:
ee:39:46:d4:5f:ed:8e:53:32:1e:ef:e6:52:a1:79:
28:50:23:11:dc:62:c4:83:ee:df:bf:5b:55:3e:18:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:0C:89:98:93:01:E2:3B:74:2D:C3:A1:0B:2E:C9:20:51:44:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7e5421-b560-48a5-b175-8d51de6bd796/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7e5421-b560-48a5-b175-8d51de6bd796/1/DkQMiZiTAeI7dC3DoQsuySBRRIc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.134.0/24
IPv6:
2a13:a800::/29
Signature Algorithm: sha256WithRSAEncryption
5c:dd:cf:9a:55:4b:2d:e5:b1:8a:ab:20:c3:9d:23:97:2e:5e:
20:11:be:7f:a5:71:4b:a1:60:0e:c1:95:ce:04:97:09:ec:e6:
69:bd:56:e9:fe:e2:45:9c:94:10:fa:a6:19:0e:c3:02:43:ec:
5c:4a:11:1c:ae:35:67:5f:ef:bf:51:38:f2:c3:bc:1e:49:75:
12:3c:d3:1b:e1:72:d7:c6:48:18:98:d5:44:0a:bf:8a:7a:17:
1b:2e:ce:00:c4:8f:9e:29:9d:a5:17:27:66:5b:bf:fb:29:bc:
a4:27:d5:59:2d:12:d8:2a:6f:72:5b:78:d5:e7:a1:57:4b:89:
e8:0b:f2:4a:f1:cf:2b:9d:73:71:81:dc:09:2f:69:a1:48:94:
d0:bc:e5:d9:b5:b5:26:7c:33:6a:7e:49:12:c9:96:26:21:58:
61:73:6f:79:3e:2a:b7:42:16:ad:2f:3d:93:27:98:cb:22:e7:
d6:2a:3a:6f:58:ff:5a:0b:f9:e5:b6:67:1f:6e:8a:95:85:c8:
93:d7:3d:c3:44:e5:66:fa:3c:de:13:43:77:14:60:0c:f8:58:
da:04:78:63:44:f1:5a:64:08:9d:48:65:31:3d:f8:b3:11:19:
2d:b5:b3:e7:4b:4c:aa:d5:e7:34:79:31:c5:b9:55:d0:e1:96:
4c:29:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:04 2024 by rpki-client on console-ams.rpki-client.org