Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J1cUJqGybWUc1Zev5zwhA0SpPbw.cer
File: J1cUJqGybWUc1Zev5zwhA0SpPbw.cer (raw, json)
Hash identifier: v8dmZ4IgsyMnl7jK9O6cXnrrUyLP9irYzuU3z0oWf2A=
Subject key identifier: 27:57:14:26:A1:B2:6D:65:1C:D5:97:AF:E7:3C:21:03:44:A9:3D:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D66CF4A847160D710F0B26FFB9B464
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/816ac6-f944-46d0-bdba-6d944b9370c6/1/J1cUJqGybWUc1Zev5zwhA0SpPbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/816ac6-f944-46d0-bdba-6d944b9370c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.246.34.0/24
IP: 2a11:b6c0::/29
Validation: Failed, certificate revoked on Fri 27 Oct 2023 14:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:6c:f4:a8:47:16:0d:71:0f:0b:26:ff:b9:b4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27571426a1b26d651cd597afe73c210344a93dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:58:a4:e2:be:22:aa:ce:82:31:c1:a6:19:
96:90:44:16:cd:de:8d:b0:14:57:78:0e:51:2c:11:
c7:69:7c:84:89:95:f8:66:0e:35:f7:68:5b:6b:a9:
51:de:a2:61:bc:79:d2:3d:83:5d:62:ac:c1:30:fa:
b9:11:4a:8e:0c:e8:e0:15:96:b0:bb:9e:c6:35:a3:
b8:15:f6:70:db:65:2e:b8:7a:73:fe:fc:b9:92:14:
dc:ed:f3:49:60:0f:dc:b0:d6:90:87:58:40:4a:7a:
bc:7a:fc:2d:18:fa:74:fa:1a:2b:8e:40:45:54:e9:
17:5e:ba:3b:f7:70:f1:c3:19:2c:c9:5e:90:fb:55:
ee:ae:23:a0:5b:a2:cb:6c:2f:cd:84:bd:96:f2:db:
7d:ec:0f:fb:eb:bb:31:a9:c5:7e:22:48:98:1f:be:
e2:b7:4e:1b:39:9b:01:b9:bc:9c:bd:f6:ea:52:5a:
e8:0f:5a:bb:37:65:34:9a:1c:4e:06:bf:cd:8c:dd:
9a:3e:ef:f6:4b:dd:21:e1:4c:0e:4f:4e:0a:77:95:
23:55:b0:33:45:72:1c:30:c5:10:f3:a4:93:16:08:
21:66:34:18:87:6b:2a:97:bb:d7:76:22:8e:ba:ba:
14:c6:86:dd:20:95:88:26:a6:0e:06:c6:48:23:bd:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:57:14:26:A1:B2:6D:65:1C:D5:97:AF:E7:3C:21:03:44:A9:3D:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/816ac6-f944-46d0-bdba-6d944b9370c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/816ac6-f944-46d0-bdba-6d944b9370c6/1/J1cUJqGybWUc1Zev5zwhA0SpPbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.34.0/24
IPv6:
2a11:b6c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:0a:0e:b3:b5:e4:e6:d1:fe:1e:f0:6f:34:75:19:b6:ce:d6:
17:19:c0:19:03:9d:36:10:74:3e:77:2e:6b:79:70:43:5b:c9:
f4:9e:76:24:30:34:a6:27:45:08:2c:2d:b5:a7:82:f6:c9:fc:
7f:50:14:44:09:63:8f:ff:4c:84:c5:f7:13:be:7f:63:b3:2b:
72:71:5d:93:d8:30:4f:b1:21:a5:25:2f:06:1b:33:71:74:b0:
15:b2:ed:4d:51:13:df:36:83:db:04:2d:2a:ec:01:79:17:15:
42:7e:67:58:4b:d6:86:76:37:aa:38:03:40:dc:0d:58:da:fe:
7c:4a:03:15:56:9e:15:5a:8e:1a:28:92:dd:db:c1:9b:a7:69:
09:cc:81:f0:f1:48:94:81:f8:fc:89:37:62:cd:95:32:cf:09:
a7:d3:63:6f:1f:d2:e6:40:15:6c:d9:87:cf:f0:62:be:6f:60:
e7:28:c6:20:59:e8:48:f4:59:a1:dd:17:32:09:76:7a:24:0b:
7a:c7:36:8f:8f:5f:a0:99:e2:55:4f:a0:f3:ad:9f:62:dc:f9:
73:a1:8b:73:a1:57:23:38:58:5e:af:ca:a4:da:ee:4c:8c:18:
d5:19:7d:52:bb:56:15:99:ba:55:d1:53:c2:ca:0f:0b:6e:87:
53:a8:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:29 2024 by rpki-client on console-fra.rpki-client.org