Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ds2ZqhcBdjpaHtm7430swJMpybo.cer
File: Ds2ZqhcBdjpaHtm7430swJMpybo.cer (raw, json)
Hash identifier: iXLCD5LL+4iCzb2uf7L2cqKH8YFTy2VLeAwjWp7vlSI=
Subject key identifier: 0E:CD:99:AA:17:01:76:3A:5A:1E:D9:BB:E3:7D:2C:C0:93:29:C9:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185E436E8A8AED3C1AE9989E4A771CEFCD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/Ds2ZqhcBdjpaHtm7430swJMpybo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Jan 2023 14:38:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 89.248.71.0/24
IP: 2a13:e400::/29
Validation: Failed, certificate revoked on Mon 21 Aug 2023 06:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:36:e8:a8:ae:d3:c1:ae:99:89:e4:a7:71:ce:fc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 24 14:38:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ecd99aa1701763a5a1ed9bbe37d2cc09329c9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:42:72:c3:01:b0:88:e2:6b:8d:e1:14:2b:e2:
4e:79:e2:f9:44:3a:4b:c7:43:1e:d3:1b:ea:3a:df:
5d:61:8c:8c:19:4f:d4:77:66:bc:e6:55:53:ea:a2:
a5:5e:6d:69:9f:3c:9b:ae:45:ec:62:37:a6:4a:dd:
6e:90:2c:e9:6c:8e:3f:19:b1:69:a9:aa:c7:90:19:
a6:f1:70:ff:a4:05:00:b7:b7:69:79:d1:f6:b8:a6:
27:51:aa:8b:6f:0f:e1:f0:41:72:bf:54:b9:79:a4:
74:a4:e3:7b:88:64:75:b2:de:6d:b0:a6:f7:9d:87:
70:4a:6b:77:8f:cd:99:5c:33:b8:af:8a:8c:8e:96:
30:78:59:8f:13:d1:57:6d:e7:74:49:98:78:3e:a6:
b8:1c:d9:1c:11:6f:3a:9d:16:da:5b:1f:0a:32:fc:
5c:bb:76:42:11:66:36:05:27:2a:49:82:cc:dc:8b:
e9:e8:e9:1a:68:b4:bd:d5:d5:cd:a8:97:66:9d:80:
06:dc:27:27:69:76:19:84:ac:01:5e:0a:9b:ec:a6:
09:2b:ff:25:44:a5:9a:c1:7d:91:22:aa:f7:f4:c6:
57:8f:9c:a6:c2:6f:52:47:b9:30:4c:3e:b1:25:26:
9d:d3:5f:8b:89:53:f1:c5:c4:4c:62:9e:f0:1c:a0:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CD:99:AA:17:01:76:3A:5A:1E:D9:BB:E3:7D:2C:C0:93:29:C9:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/Ds2ZqhcBdjpaHtm7430swJMpybo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.71.0/24
IPv6:
2a13:e400::/29
Signature Algorithm: sha256WithRSAEncryption
77:80:f8:fd:6d:5e:a2:04:9b:24:17:cf:cb:d0:cf:f0:14:75:
4c:ed:eb:05:48:29:50:3f:a2:a3:7a:14:8f:7b:88:30:75:f2:
6b:d1:f4:4c:2a:45:72:07:dc:a0:61:36:6a:32:65:4d:89:c0:
0b:61:c0:db:b1:0b:a1:3f:b3:5d:68:4e:0e:64:59:82:75:91:
a9:c2:94:53:bf:58:f5:46:31:59:48:c7:1c:fa:cd:f5:5a:e8:
0c:a6:07:0a:0e:f3:6e:38:a5:6b:fe:7f:8d:dd:28:02:fb:e5:
5b:58:a2:23:ee:01:09:c3:44:4a:5c:b2:f4:60:e7:4d:05:8f:
05:cf:da:a0:17:50:1a:2e:3d:03:c1:c9:ef:7c:81:f0:d0:51:
e3:31:56:a8:91:cc:65:96:5c:fb:9e:ea:ae:0c:e9:29:16:88:
18:bd:7d:93:57:b7:7e:0f:e5:d4:13:43:66:72:88:6b:03:d4:
c1:84:3b:c7:b7:6f:89:b9:4d:e9:99:f8:9d:a1:6a:d1:d5:10:
a1:b8:83:82:9e:f3:7c:3d:51:84:48:e7:97:ea:59:a1:79:21:
f6:ac:e5:82:72:fe:8d:51:33:f0:b3:79:ff:59:7f:34:8e:b3:
41:60:19:7f:ef:25:3a:4d:93:c9:74:84:39:57:8d:ea:64:85:
20:ce:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:06 2024 by rpki-client on console-ams.rpki-client.org