Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GfcmVZrbgRzvFJtyBOIhi6eo1bs.cer
File: GfcmVZrbgRzvFJtyBOIhi6eo1bs.cer (raw, json)
Hash identifier: FYORZNCUON1AcNmchf2jRLo+Qd5Rbr6vUjDKyqU7I18=
Subject key identifier: 19:F7:26:55:9A:DB:81:1C:EF:14:9B:72:04:E2:21:8B:A7:A8:D5:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245991506CB69798CC9485ED12DACB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/GfcmVZrbgRzvFJtyBOIhi6eo1bs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 217.119.140.0/24
IP: 2a11:7d40::/29
Validation: Failed, certificate revoked on Wed 13 Dec 2023 12:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:99:15:06:cb:69:79:8c:c9:48:5e:d1:2d:ac:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19f726559adb811cef149b7204e2218ba7a8d5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:7d:be:fc:df:cc:33:5c:75:65:8c:76:18:
6f:80:46:f5:f0:ef:88:02:42:0d:61:5d:76:4f:49:
06:f2:03:bb:44:1c:97:05:89:d6:43:3a:9b:a1:3c:
6a:37:26:b6:38:26:62:dd:84:db:b2:68:00:ab:6a:
a8:ac:87:d6:2e:5f:dd:67:18:a3:c7:b1:e0:d3:4c:
4a:a1:1e:61:c5:db:79:31:6b:bd:f5:2a:28:98:4f:
4f:78:d1:3a:ed:1e:4d:0e:f6:93:38:69:0e:b0:50:
93:43:7e:7a:a7:b5:01:63:0b:79:ca:4f:8e:79:6a:
39:56:3e:f5:6c:a4:23:ef:7d:90:2e:7d:a4:c4:bd:
82:3c:f8:9f:98:97:df:1b:f2:da:12:7f:ef:a4:1e:
c4:98:72:34:79:85:53:d4:12:76:77:21:08:f9:a6:
f1:83:20:87:e0:df:2e:17:51:2a:28:3d:b5:2b:03:
c4:86:0b:40:8a:6d:4d:b1:7f:35:13:43:4b:5b:1d:
62:b8:c4:c3:4b:fe:9c:78:fd:a7:57:23:7e:62:c5:
30:1f:f5:af:83:e1:a4:5a:d3:82:bd:7d:48:2c:7e:
4e:11:af:86:d8:05:42:b7:b3:83:ef:e7:16:a3:48:
16:34:79:2a:e6:29:88:6d:0a:43:1a:e2:d5:7c:30:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:26:55:9A:DB:81:1C:EF:14:9B:72:04:E2:21:8B:A7:A8:D5:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/GfcmVZrbgRzvFJtyBOIhi6eo1bs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.140.0/24
IPv6:
2a11:7d40::/29
Signature Algorithm: sha256WithRSAEncryption
1c:7c:d7:7b:bd:1b:d9:a7:07:42:d0:a2:8b:95:06:01:84:c0:
74:98:9f:fb:69:d8:b1:69:31:bd:42:e0:5b:a1:89:41:7f:d1:
37:40:04:ca:4a:9b:95:9e:47:5a:b1:4d:89:ce:2b:b8:1e:64:
6a:8c:8d:15:8a:4f:a3:81:76:1c:68:8c:71:43:4c:a0:e8:90:
1e:7c:f4:66:4f:11:3c:48:88:ff:ab:cd:d4:5f:c8:ae:78:2b:
0a:ca:3d:58:4e:f7:a4:ec:30:ef:a3:f4:bc:7e:60:70:eb:d9:
6f:c1:72:26:2a:c7:6f:54:a6:09:ea:5b:d9:2c:97:46:45:cc:
02:6a:dc:c9:46:71:b0:1f:85:b2:f9:b2:09:56:42:8f:9b:18:
1b:03:4b:af:9d:df:26:94:1b:3d:1b:1a:9a:4a:87:67:8d:52:
6f:ed:f2:70:f8:70:e9:22:07:dd:a4:5d:d5:d3:c5:87:be:94:
d4:1b:54:c3:81:10:12:ea:0e:d8:ca:12:a4:42:bd:5a:93:b4:
9f:bd:e5:c2:73:83:3a:fa:d6:ec:0b:93:01:99:19:9c:ac:e3:
bb:06:1b:a9:45:67:c3:e2:a8:8a:f6:95:61:7e:5a:d5:87:f3:
a8:9e:3a:02:1c:94:25:de:46:5e:df:ca:a2:09:eb:c7:dc:e3:
a2:95:b2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:54 2024 by rpki-client on console-fra.rpki-client.org