Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FvRd2_zQobTHeSFXJ7KXqD3ZQdA.cer
File: FvRd2_zQobTHeSFXJ7KXqD3ZQdA.cer (raw, json)
Hash identifier: j/Pl21vrB8r36i42vk0AEUlrNkNuIej1hfAPgynRXBg=
Subject key identifier: 16:F4:5D:DB:FC:D0:A1:B4:C7:79:21:57:27:B2:97:A8:3D:D9:41:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D89A88F361D49E12650F69F55B16084
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/0fc7f7-1851-4e34-8e5e-cd902421219f/1/FvRd2_zQobTHeSFXJ7KXqD3ZQdA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/0fc7f7-1851-4e34-8e5e-cd902421219f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.10.96.0/22
IP: 2a03:59c0::/32
Validation: Failed, certificate revoked on Wed 05 Apr 2023 07:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:a8:8f:36:1d:49:e1:26:50:f6:9f:55:b1:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16f45ddbfcd0a1b4c779215727b297a83dd941d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d5:97:20:06:e0:22:5d:dd:81:ae:a5:29:56:
36:7d:7b:b7:d4:5b:4d:e7:e0:8d:98:78:bf:19:68:
51:4b:48:2a:ce:c4:7e:e4:c8:e6:98:b1:9c:3d:a8:
11:d9:a6:1e:55:5a:4a:6d:c2:39:f8:7c:1e:10:00:
32:43:1d:b0:a0:b3:bb:14:96:17:79:54:76:69:de:
4e:fa:fc:c9:6b:bc:47:70:18:f6:30:52:c2:5b:32:
73:b1:3b:6a:da:62:7c:ea:a8:c0:8d:72:69:60:c8:
9d:93:d8:90:77:46:89:1b:7c:9e:07:a4:9b:53:44:
3d:d0:65:36:12:6a:1f:96:0a:b5:e6:4e:95:ec:f2:
4a:de:7b:d9:78:28:8b:a2:73:0b:25:f3:d7:82:f2:
cd:75:ee:69:2f:b8:f0:dd:27:24:b4:10:17:11:5e:
fa:26:56:88:be:c7:9b:32:d4:4c:23:7c:f7:1c:a0:
59:1f:de:fd:22:9f:f9:d7:67:25:e8:88:12:6f:e5:
6a:53:df:1e:ac:3d:51:b3:8a:3c:b3:49:e3:34:75:
bb:4c:81:b9:be:7d:15:e4:91:36:ef:3b:88:1d:9d:
7e:b4:87:67:50:bc:53:d0:1a:d1:5a:a4:a1:83:0c:
3c:30:30:a7:d1:bf:98:61:54:b9:5e:b7:cc:f3:2d:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:5D:DB:FC:D0:A1:B4:C7:79:21:57:27:B2:97:A8:3D:D9:41:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0fc7f7-1851-4e34-8e5e-cd902421219f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0fc7f7-1851-4e34-8e5e-cd902421219f/1/FvRd2_zQobTHeSFXJ7KXqD3ZQdA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.96.0/22
IPv6:
2a03:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:39:ca:ee:f9:39:40:54:6a:7d:25:a5:e6:c7:0a:2f:70:f0:
06:c8:cc:df:70:37:88:aa:bf:89:dd:84:71:d2:08:be:57:40:
30:01:c0:0d:f5:6a:85:8e:ce:18:9c:f9:67:ee:48:2a:7f:e0:
21:6a:e8:8d:7f:41:6d:b6:19:4b:44:a0:d6:2f:72:37:9a:cb:
b4:11:2f:b5:5a:fd:36:28:65:db:b9:a5:83:41:12:ca:f4:73:
97:26:e6:a3:d1:2e:8d:dd:b0:26:37:61:9d:a3:b1:54:cf:ac:
a9:28:3e:33:5a:b1:16:f8:2d:41:b4:2f:b7:b9:fe:97:c9:3c:
23:1b:64:5f:80:57:b0:2b:e8:f9:15:6e:c9:b6:95:73:65:ed:
42:3b:0e:4d:98:cd:3d:38:68:05:ac:d3:5a:c4:7d:e0:f8:68:
32:59:11:f0:af:5d:f2:2b:6d:12:29:c7:5d:77:96:f4:78:07:
eb:42:29:15:be:8f:52:1b:bf:5f:fc:4d:db:a1:58:ff:4a:21:
74:72:ea:5c:ce:42:d6:00:51:f4:19:76:d5:9a:1c:17:a8:e0:
1e:99:c7:b8:e9:3e:b3:dd:a7:23:05:71:2c:04:49:50:76:fe:
c0:22:38:a5:b7:a7:e2:b7:6b:9b:6c:d2:05:a2:5a:96:3d:92:
6d:18:bc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-fra.rpki-client.org