Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H0SHjOSWkSBXXvBJyda5FIwp214.cer
File: H0SHjOSWkSBXXvBJyda5FIwp214.cer (raw, json)
Hash identifier: HS+1mU32IV3kHB6ng67nyGYgSOvF/ZIi0ZAMxMpGEAY=
Subject key identifier: 1F:44:87:8C:E4:96:91:20:57:5E:F0:49:C9:D6:B9:14:8C:29:DB:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245E05E1974E30B7A91555A176EA91E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/H0SHjOSWkSBXXvBJyda5FIwp214.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.222.224.0/24
IP: 2a11:8440::/29
Validation: Failed, certificate revoked on Mon 09 Oct 2023 13:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:e0:5e:19:74:e3:0b:7a:91:55:5a:17:6e:a9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f44878ce4969120575ef049c9d6b9148c29db5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:ae:96:a6:bd:04:f4:bc:9a:c2:8e:25:95:
1e:b3:17:23:d6:f2:57:eb:1b:f1:2b:0a:ec:76:84:
77:3b:a1:3f:c5:39:1d:87:b7:1f:5f:fa:5b:28:91:
a6:f9:5d:0a:c2:77:b2:34:51:f7:e2:7b:c4:69:c8:
ce:e2:73:cd:1c:46:86:f4:c7:f8:ee:a4:8e:df:f2:
f7:23:87:83:50:4c:6b:49:1e:e3:c9:b1:50:25:d2:
57:c7:2c:4e:23:39:a0:65:00:82:c1:5e:50:b4:17:
5d:a0:58:a0:c6:de:e7:37:fe:78:8e:a5:89:f9:0a:
17:da:d9:04:70:ff:5c:5a:4a:b7:3a:af:aa:52:b3:
50:36:48:b1:19:70:29:38:0c:72:49:4d:95:3a:12:
e7:2d:d6:2c:26:33:fd:fb:a9:14:b5:44:65:00:1b:
0f:75:56:60:5f:1d:63:98:70:bf:10:d0:81:c3:2d:
28:bd:62:61:82:f9:82:a8:4a:d9:ec:95:e1:ae:54:
c4:89:ed:4f:57:cb:1e:3d:9e:6d:5a:d9:27:ab:88:
72:5d:f0:6d:f3:92:ee:e4:04:75:5b:b7:0f:97:cd:
76:9c:18:3a:76:57:8f:ad:84:7f:8a:84:ce:d8:5b:
48:f2:56:a9:93:a3:6d:85:1f:a8:7f:cc:7e:8c:0b:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:87:8C:E4:96:91:20:57:5E:F0:49:C9:D6:B9:14:8C:29:DB:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/H0SHjOSWkSBXXvBJyda5FIwp214.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.224.0/24
IPv6:
2a11:8440::/29
Signature Algorithm: sha256WithRSAEncryption
25:0c:e7:2f:a1:67:4e:51:c7:87:a7:b9:f3:a6:68:22:28:df:
8b:7a:69:8e:e2:60:ba:fd:08:82:a1:b4:51:d1:1a:f1:54:ee:
82:06:19:5e:da:8b:05:23:c2:cd:16:d6:18:21:f1:98:e9:c5:
82:13:38:11:24:18:9f:6c:c8:64:51:66:0b:73:02:07:45:6a:
db:47:08:da:96:b4:91:6d:9f:d6:11:d9:40:ae:eb:b8:b8:d5:
8d:52:d5:ad:1f:03:d4:24:bb:4f:01:9a:7d:17:50:46:bc:06:
05:ed:a1:6e:31:53:7f:58:02:d7:56:1f:45:6e:17:27:61:3b:
0b:c7:3f:93:ed:c9:13:e5:e1:db:57:22:57:e8:f6:43:53:5c:
50:45:94:bb:7e:8a:ce:75:65:ed:3c:f7:98:8c:6c:7d:df:51:
f6:a8:61:6d:9d:ef:f4:26:1c:29:7f:45:a9:58:9e:8e:40:bf:
ce:bb:ff:75:c9:ec:3b:10:2c:12:2a:19:1a:90:67:7f:21:56:
6d:a4:42:09:1b:3b:c5:b8:fa:67:d5:1b:eb:6f:86:c8:2b:f5:
54:b2:3a:aa:ce:af:dd:0d:f8:89:85:c7:1a:04:80:8e:80:d7:
1a:68:5f:0e:39:60:dc:d0:a5:da:4a:e4:2f:87:39:6d:91:b7:
ce:c9:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:00 2024 by rpki-client on console-fra.rpki-client.org