Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J69Zw0CPiXtkAFoSOhLZaNwTfy0.cer
File: J69Zw0CPiXtkAFoSOhLZaNwTfy0.cer (raw, json)
Hash identifier: HxaPbQjSCzrUtFCMbUjWwyDeb1cVm6IudDT129SzFVg=
Subject key identifier: 27:AF:59:C3:40:8F:89:7B:64:00:5A:12:3A:12:D9:68:DC:13:7F:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B630FA5CED51EED440D3B6C4EF2FD5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/9e1654-9822-4b94-b68c-71eef5d74937/1/J69Zw0CPiXtkAFoSOhLZaNwTfy0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/9e1654-9822-4b94-b68c-71eef5d74937/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.147.52.0/24
Validation: Failed, certificate revoked on Wed 22 Nov 2023 14:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:0f:a5:ce:d5:1e:ed:44:0d:3b:6c:4e:f2:fd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27af59c3408f897b64005a123a12d968dc137f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:26:27:14:d5:33:bf:1c:e2:a6:cd:76:8d:71:
12:e5:03:ec:9a:97:78:cd:da:0a:3b:b7:b2:84:70:
96:f6:f3:fc:91:a8:c8:05:61:c6:3a:a5:5e:9c:70:
c1:46:be:0a:dd:da:79:1a:67:26:80:69:7e:6f:10:
b1:9c:5f:e8:99:33:fd:05:05:89:74:ba:6c:86:03:
6e:db:4c:2b:61:eb:49:4f:9d:89:ec:e4:c6:91:33:
69:77:3b:22:85:08:35:ad:53:6d:bf:94:8a:ea:84:
3c:0c:ce:fa:9c:6b:fe:e3:9c:fe:19:32:05:19:1e:
29:97:87:18:11:01:f1:94:50:f4:47:dc:10:53:66:
85:29:e3:a6:1a:70:f3:a0:a0:4c:c8:ee:04:cb:5a:
b1:fa:c1:0d:26:99:da:c9:fb:64:88:60:47:76:0b:
bf:01:26:13:67:08:dc:11:d9:83:22:3e:fd:00:8e:
f9:be:10:f3:f2:cb:64:be:e7:43:da:e1:ea:3c:35:
4a:b2:7e:fb:cd:36:96:b1:e4:a3:82:1e:19:11:8c:
02:30:5e:34:18:ac:46:53:a2:fd:c1:e5:e1:cc:4b:
ae:46:99:9e:32:cb:3b:9c:ce:f1:de:9d:10:b8:78:
c0:c1:f3:fd:fe:dd:cd:27:ac:79:09:29:9f:48:27:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AF:59:C3:40:8F:89:7B:64:00:5A:12:3A:12:D9:68:DC:13:7F:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9e1654-9822-4b94-b68c-71eef5d74937/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9e1654-9822-4b94-b68c-71eef5d74937/1/J69Zw0CPiXtkAFoSOhLZaNwTfy0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.52.0/24
Signature Algorithm: sha256WithRSAEncryption
10:df:a8:88:5b:15:0c:12:2b:2d:24:7b:b7:4d:83:da:29:5a:
86:59:27:c7:56:01:d3:cd:4b:20:5d:3c:2c:00:fa:4a:59:34:
fb:10:ae:00:8c:bf:20:f9:19:8d:78:2a:5f:22:68:88:67:1d:
3f:26:7e:e9:79:12:a4:b6:ef:cc:93:a2:e0:40:0b:1e:86:06:
7b:de:5e:b2:ba:15:4f:82:0c:cb:76:58:bc:93:a2:ba:bd:39:
c1:07:6f:b9:ad:a2:60:83:0a:53:e0:30:67:5a:a6:bd:fc:f3:
6e:34:2f:d9:e2:61:0d:a6:1c:8d:be:d1:34:4a:60:a7:e8:7b:
8a:43:a5:3b:70:72:a9:9b:91:93:2f:04:5c:95:85:11:89:a3:
53:79:3b:ed:e0:02:7d:d2:56:2f:e5:ff:29:47:5f:06:e1:9a:
64:11:50:e3:70:76:7f:40:ea:f2:b5:86:4c:6e:c9:21:a5:bd:
a7:97:71:6e:ef:bc:ff:fb:0c:35:18:1b:f9:2a:95:4d:9c:04:
f1:a2:a3:f4:2f:a5:40:c3:1d:e9:3f:3e:48:1c:f7:a4:71:87:
d1:85:43:90:64:d9:9a:c4:80:11:6f:7e:43:ce:ad:e6:fe:50:
8f:94:37:1d:56:56:ae:6f:de:af:88:ce:d2:95:d6:aa:de:d0:
84:27:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:30 2024 by rpki-client on console-fra.rpki-client.org