Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GzjKPrK6f_JBL15_je8-tRVg0a0.cer
File: GzjKPrK6f_JBL15_je8-tRVg0a0.cer (raw, json)
Hash identifier: okIjirsQiI53rgsdXtEBkGuVW2WZq8R6B6n8mqZx20w=
Subject key identifier: 1B:38:CA:3E:B2:BA:7F:F2:41:2F:5E:7F:8D:EF:3E:B5:15:60:D1:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFA942F4D7527CA912AE7B426F69773
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/GzjKPrK6f_JBL15_je8-tRVg0a0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.124.249.0/24
IP: 2001:67c:10bc::/48
Validation: Failed, certificate revoked on Tue 24 Jan 2023 13:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:94:2f:4d:75:27:ca:91:2a:e7:b4:26:f6:97:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b38ca3eb2ba7ff2412f5e7f8def3eb51560d1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ae:4f:80:55:e3:4c:ed:51:02:27:70:fb:11:
83:7f:04:9e:31:ad:3c:0f:94:08:5e:6b:d2:c7:90:
7d:2f:70:f6:a1:24:76:e1:85:4c:3b:ee:f2:83:3c:
7c:65:da:f0:b3:84:36:e0:78:17:26:89:64:51:26:
fc:f6:38:b4:3a:22:7a:ff:ec:4f:48:fd:96:cc:09:
7d:b0:c1:1d:c8:4a:47:ea:30:06:65:23:1f:a3:e2:
15:c8:70:44:f5:94:73:15:b6:5e:c2:cd:38:26:fc:
f0:af:f9:ff:3f:25:90:30:eb:0b:75:03:07:86:af:
63:9b:bf:a6:8e:10:a3:a7:3c:ba:b7:02:8c:3e:00:
c6:51:df:78:d5:d6:c1:dd:d0:54:de:76:06:ee:5d:
c9:f7:b2:75:82:aa:0f:a9:7a:32:0e:27:29:3f:e8:
d5:5d:4e:91:6d:38:4f:f8:d0:59:b9:fe:23:c9:ac:
ed:d5:8d:b6:27:6d:96:06:04:58:09:8a:e6:f3:25:
09:e4:a3:ba:51:0a:1f:51:f5:d6:14:41:53:8f:d2:
5c:f4:77:b0:06:b1:f5:3c:18:21:47:16:02:39:a0:
37:a4:74:5f:65:42:5f:39:27:e6:02:7c:bd:95:c7:
9f:a4:f7:58:13:8d:87:3e:b8:0d:14:3b:fd:3c:78:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:38:CA:3E:B2:BA:7F:F2:41:2F:5E:7F:8D:EF:3E:B5:15:60:D1:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/GzjKPrK6f_JBL15_je8-tRVg0a0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.249.0/24
IPv6:
2001:67c:10bc::/48
Signature Algorithm: sha256WithRSAEncryption
a2:86:2d:29:ba:8d:ed:fb:3b:43:61:68:f4:12:6f:a5:18:73:
40:2b:92:4b:80:8d:ef:0d:fd:44:91:6c:64:79:9f:b6:ea:47:
8c:65:80:66:71:6f:dd:9b:3c:41:70:3a:38:32:49:59:61:2d:
70:b9:a0:d5:3d:94:0f:14:7a:89:f9:ae:b2:57:8f:97:bb:33:
2c:09:15:8a:b5:a5:cb:74:9f:4a:d4:6a:5d:a0:ca:87:42:6c:
21:74:7b:61:a9:99:a9:e0:f8:f0:bd:c0:a1:b9:ba:9e:5d:c2:
06:ea:cd:a7:5a:fb:43:b7:f7:eb:82:0a:4c:23:ea:08:ec:4a:
f1:35:8d:76:52:63:89:23:6b:94:ba:cd:3c:a9:39:96:05:8e:
71:30:cf:ec:39:77:7d:07:61:3d:ac:9f:6f:ce:2a:b8:1f:8d:
6f:d8:80:c8:62:a7:72:7b:0d:77:3d:a6:76:01:1b:e5:4a:ec:
0f:52:9f:ac:69:6a:47:2e:b9:0c:ec:cb:08:a1:8d:46:27:9c:
9e:a0:85:93:66:c9:18:39:b4:60:64:ba:d9:dd:86:bc:a4:2d:
49:84:06:a0:26:7b:16:92:f0:0a:15:db:57:18:2c:33:84:33:
9c:52:6f:b5:3f:2e:90:56:77:47:cb:50:1a:18:3f:15:c9:84:
74:43:c4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:07 2024 by rpki-client on console-ams.rpki-client.org