Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hzds8N3JsKTYEyjSkTOcJhTkICY.cer
File: Hzds8N3JsKTYEyjSkTOcJhTkICY.cer (raw, json)
Hash identifier: 9JKtR9wPFEMwy18U3e7lvdQbJbKMc8L9kAt312BwSvw=
Subject key identifier: 1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAE7F4FFB7B9636186E18511B8F7F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/Hzds8N3JsKTYEyjSkTOcJhTkICY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.162.0/24
Validation: Failed, certificate revoked on Wed 22 Nov 2023 11:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:e7:f4:ff:b7:b9:63:61:86:e1:85:11:b8:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f376cf0ddc9b0a4d81328d291339c2614e42026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:29:e2:75:a6:df:30:2d:3d:a6:29:db:c1:
b6:91:ac:e5:17:c2:25:92:c2:4b:f5:14:17:34:bc:
80:a5:1b:54:e1:cb:19:cb:54:ce:f7:2a:7e:bc:b9:
54:28:b8:12:cf:24:e7:f5:3d:8b:88:20:69:fe:01:
c1:53:1a:83:d2:3c:06:dc:5a:2f:32:8d:3e:e4:43:
47:da:cd:61:ee:5c:0c:4e:e4:2e:d5:f2:e0:69:5b:
86:a6:ee:02:f2:2d:76:74:f0:00:bf:ad:2f:e2:72:
5d:90:3b:55:66:aa:3e:11:c6:41:52:d2:93:75:d4:
96:84:52:c2:76:de:75:76:1a:de:30:1f:2e:db:8f:
9b:2e:9b:8a:0a:5b:b2:13:85:74:c3:ed:63:ae:dd:
ad:d1:5b:5d:84:4f:06:5e:05:03:af:ac:52:dd:24:
a1:f8:61:43:70:4a:20:5f:d6:ef:39:48:5b:53:63:
06:0a:c8:37:c1:ba:44:38:e3:d9:a4:41:54:55:4a:
e0:37:3e:55:c9:d6:6b:98:d8:31:f6:af:43:93:fb:
8a:3f:a0:78:a1:f2:56:7e:be:c0:33:5e:15:81:0b:
bf:e0:b1:7f:66:d8:f0:c2:3a:38:18:d2:6b:f2:88:
05:f3:72:65:43:fb:9e:f9:a8:bd:20:c9:c0:83:c9:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/Hzds8N3JsKTYEyjSkTOcJhTkICY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.162.0/24
Signature Algorithm: sha256WithRSAEncryption
87:cf:a3:10:8b:24:9e:0e:64:dd:d6:38:1b:9f:9e:90:96:21:
25:90:e2:bd:64:b9:1b:43:8f:61:da:31:9d:6a:c0:ca:64:6a:
5c:d2:97:69:62:96:cd:e6:42:45:12:87:10:8e:0a:4e:fa:d0:
ff:54:1d:55:ec:42:d2:11:36:ce:be:4a:aa:9e:d6:d4:ce:c6:
1d:09:57:d9:71:3e:df:35:c1:47:8b:cc:f1:bb:a3:67:35:b7:
f3:9f:09:39:f5:35:f6:67:5e:0d:5f:e1:68:04:a4:fb:e3:fd:
e9:12:1a:f7:02:ef:26:1b:61:62:69:01:80:89:77:34:fe:c7:
7b:4a:6a:76:92:e4:f9:dc:ce:8c:72:ee:6d:0c:b6:ff:c7:75:
f5:42:12:63:b7:3f:c5:65:dd:27:53:fc:24:7c:c5:7c:ac:58:
96:10:de:f2:86:b2:71:7b:a2:26:d0:f2:2e:c9:a0:db:0a:a6:
6f:04:b1:75:1c:b7:7d:a0:68:f2:b8:9c:f6:c4:c1:28:d2:2d:
b7:e3:08:32:8e:e6:16:d3:2b:57:a9:45:c9:3f:5f:51:bd:15:
85:42:be:96:5c:5b:62:45:84:d1:c0:68:1b:16:82:ed:1f:9e:
9f:2a:2b:b2:0b:89:b5:f8:23:57:b7:07:3d:5a:d9:e0:82:a2:
e0:f1:ed:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-fra.rpki-client.org