Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IvoceuLmneV2nDlpsLD49SW1qwU.cer
File: IvoceuLmneV2nDlpsLD49SW1qwU.cer (raw, json)
Hash identifier: x2lzWvqIc8zIeiwyC1H0R+VvbbouOYTla7eofY4SzMo=
Subject key identifier: 22:FA:1C:7A:E2:E6:9D:E5:76:9C:39:69:B0:B0:F8:F5:25:B5:AB:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E55D5EE0C131F009BAEDAA3544CC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/IvoceuLmneV2nDlpsLD49SW1qwU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.239.212.0/24
IP: 2a0c:72c0::/29
Validation: Failed, certificate revoked on Mon 25 Mar 2024 13:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:55:d5:ee:0c:13:1f:00:9b:ae:da:a3:54:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22fa1c7ae2e69de5769c3969b0b0f8f525b5ab05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:f1:56:bd:cc:cd:8d:10:c4:89:95:e8:45:
9a:08:f3:f3:72:50:49:57:76:a6:ae:60:e2:01:72:
7f:29:03:a2:aa:f9:9f:11:56:84:ef:16:d5:50:00:
10:a8:80:00:32:72:69:d5:0f:01:7c:bc:c7:85:85:
fc:e3:e4:fb:d9:90:a6:bd:31:db:b8:61:36:a5:af:
13:ee:12:22:14:ec:34:2c:e5:15:45:d3:60:f1:40:
84:61:24:43:0d:24:b5:64:df:8d:b9:db:18:82:84:
45:a6:13:e4:31:a7:b7:22:32:27:24:39:4b:62:17:
28:5d:a2:bd:34:88:c1:34:cf:36:1b:2c:cb:fa:21:
55:d7:f2:f9:67:47:96:eb:63:01:df:44:30:1d:df:
7e:af:c1:81:37:ac:fa:c7:b0:c5:53:a4:78:29:27:
ba:22:b7:4c:5d:91:49:93:93:f9:65:46:9b:fe:d6:
78:35:8f:30:d0:ae:40:b4:b0:28:26:55:10:45:47:
f5:da:6c:76:12:22:e0:d9:72:a9:16:1e:9f:64:a6:
d8:cd:cc:ca:12:fc:e5:d0:aa:8f:a9:75:8c:5e:9b:
88:90:30:7c:e4:4d:7c:ce:bd:b9:1d:57:13:86:53:
58:49:72:52:b9:55:d9:7f:e1:dd:38:3c:ce:b8:87:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FA:1C:7A:E2:E6:9D:E5:76:9C:39:69:B0:B0:F8:F5:25:B5:AB:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/IvoceuLmneV2nDlpsLD49SW1qwU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.212.0/24
IPv6:
2a0c:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
00:58:a4:3f:a1:bf:0a:bb:dc:97:f8:7d:f0:00:cc:8f:33:b0:
b3:c6:a0:7a:ef:1b:a3:fc:4b:64:b0:5e:28:f2:01:06:57:63:
0b:12:e2:a9:bf:24:0d:fd:7d:76:a9:9c:48:2e:4b:95:a5:7f:
fa:48:43:4f:15:f2:de:11:30:8b:b8:05:94:40:97:d3:67:d9:
0f:89:34:33:86:7a:bb:be:32:da:4a:3e:b8:4b:e2:6d:87:d3:
e4:cd:0c:6e:ab:e3:a4:fc:f2:87:39:6f:5d:4e:66:ad:e4:cb:
cc:a2:42:6e:f4:1c:f9:d4:1a:04:38:a5:5c:ef:0d:09:6b:82:
07:2f:da:7c:87:ba:e6:0e:6d:3e:1e:cf:32:99:ed:14:db:49:
63:81:38:cc:4b:e4:a3:e8:ea:8a:41:db:83:d0:80:f4:c7:57:
e8:ee:5a:ac:19:bf:2c:f2:60:57:b4:95:24:d5:f9:31:6f:11:
78:0d:aa:fe:a1:6f:27:ef:08:c0:f9:1f:33:67:6a:f6:3b:5e:
ca:f8:b9:e7:ab:fb:de:e7:d6:76:f7:b4:d9:04:8c:4c:32:dc:
34:bc:4e:b2:44:11:89:c4:11:2d:6c:15:72:2d:7c:2f:5a:cd:
ab:4e:12:ad:78:cd:d3:a2:1f:10:0a:5d:47:f8:19:42:c8:6b:
8d:84:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:47 2024 by rpki-client on console-ams.rpki-client.org