Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.cer
File: EZb4fV3s_L8ERQtfz2W1s0XyJGQ.cer (raw, json)
Hash identifier: aFR1nIZpuRzLa4cq000apjVDQnqnhFdf9i95ZlbJWBg=
Subject key identifier: 11:96:F8:7D:5D:EC:FC:BF:04:45:0B:5F:CF:65:B5:B3:45:F2:24:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEA7F282A4FC604C708AF3BA0A9447
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 139.28.100.0/22
IP: 2a09:540::/29
Validation: Failed, certificate revoked on Tue 27 Feb 2024 12:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a7:f2:82:a4:fc:60:4c:70:8a:f3:ba:0a:94:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1196f87d5decfcbf04450b5fcf65b5b345f22464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:37:88:ba:4e:5b:3b:4b:3c:e7:9e:f8:3a:
dc:5d:0e:70:11:eb:72:22:de:08:4e:f9:ae:3d:1a:
c3:7e:df:3f:e7:34:09:58:ee:7e:bb:72:df:53:42:
af:b5:f6:4d:c1:e9:34:90:32:8f:d2:f3:6a:12:e1:
66:0c:6e:e9:8f:b8:61:0a:3c:45:49:88:9a:2c:87:
02:ef:58:0d:cc:18:1e:0a:82:9f:27:9c:9b:15:f3:
9f:73:b3:c7:9f:98:45:21:8a:94:2d:8b:58:3f:41:
d0:65:0c:98:77:2b:5b:b3:e7:98:d2:ba:16:66:df:
e3:e1:da:97:14:06:4f:04:26:b6:69:e9:56:83:86:
c6:5d:17:1c:25:9a:0e:a2:ac:2c:23:62:97:df:37:
e1:c0:a1:f4:98:f0:d5:8b:85:b8:3f:aa:c8:21:bd:
e6:62:03:39:81:47:ab:8e:00:70:ef:90:ee:7d:a5:
a6:d7:49:18:0d:d5:ca:2d:b2:43:ad:5b:6c:7b:f6:
a5:ec:e6:e6:63:1a:f7:d5:02:fa:28:77:52:1b:86:
be:d2:62:59:70:e4:24:c8:14:92:38:a7:44:d9:65:
38:b9:00:0e:2f:39:ee:6a:dc:e3:7c:66:ad:0c:83:
e2:ea:4d:bf:79:bf:33:e5:09:3d:13:dd:1b:a4:6b:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:96:F8:7D:5D:EC:FC:BF:04:45:0B:5F:CF:65:B5:B3:45:F2:24:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.100.0/22
IPv6:
2a09:540::/29
Signature Algorithm: sha256WithRSAEncryption
6b:79:b0:f8:b4:cb:1f:1c:de:d9:d3:bf:48:08:09:94:e5:d4:
f9:cc:35:36:2b:8b:bc:e5:c0:a5:ad:d8:34:50:52:14:76:ba:
f7:ef:bf:b2:21:b1:a4:59:34:8f:8c:4b:11:ad:ea:1c:bf:1f:
f3:a9:f1:03:57:97:21:5f:4f:2c:9b:fb:7e:67:cb:b8:81:ce:
2d:74:48:a3:85:ee:73:9d:60:86:78:64:48:7c:9e:12:af:46:
0d:1e:a8:89:35:8f:5c:eb:9b:50:61:0d:87:7f:91:42:b9:d1:
2d:fe:ed:55:fc:b2:03:3c:b8:70:41:f7:72:8c:53:1a:1d:99:
02:69:18:67:37:87:69:1d:dd:b6:e5:d5:c5:40:8c:9f:46:08:
8d:7c:df:b9:07:c0:db:95:0b:1a:87:96:fb:91:25:23:8d:65:
55:bb:a4:67:d7:73:65:9e:0b:01:8d:cc:6f:a0:9b:82:f2:56:
7d:7d:eb:51:a7:b2:db:d6:be:9e:8e:de:44:4c:a0:4c:d0:c0:
73:00:0b:5a:48:0b:c2:7c:ba:4e:2d:82:85:1a:0d:d8:5a:cc:
18:e6:14:8d:e0:9a:f7:fa:9b:a8:8b:43:48:02:1c:fc:18:63:
87:f1:a6:27:31:04:8d:8e:ee:10:87:b4:0a:34:b1:a9:f5:11:
12:1c:c6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 15:32:19 2024 by rpki-client on console-fra.rpki-client.org