Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J_nANGq3YFCmuGXY2KkAedHc73U.cer
File: J_nANGq3YFCmuGXY2KkAedHc73U.cer (raw, json)
Hash identifier: bOyMXpplx/XYb8potsrePlacPEkhkYhNRTylSFLsSk0=
Subject key identifier: 27:F9:C0:34:6A:B7:60:50:A6:B8:65:D8:D8:A9:00:79:D1:DC:EF:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245C75D8F83CAE129D06471C7479566
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/6da278-bcd7-4268-ac6e-79e50867d421/1/J_nANGq3YFCmuGXY2KkAedHc73U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/6da278-bcd7-4268-ac6e-79e50867d421/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.242.241.0/24
IP: 2a11:afc0::/29
Validation: Failed, certificate revoked on Wed 18 Oct 2023 11:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:c7:5d:8f:83:ca:e1:29:d0:64:71:c7:47:95:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27f9c0346ab76050a6b865d8d8a90079d1dcef75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:df:72:28:07:22:51:3b:9e:12:ef:1e:23:
51:8e:0b:d9:0a:aa:a9:d8:d3:90:d0:bd:6e:c0:45:
f7:b9:50:0b:bc:e8:b0:08:70:5f:4b:16:90:13:65:
d5:c6:93:08:9a:be:fa:01:4c:7b:20:fa:06:26:00:
69:3d:e8:0a:8a:8f:52:60:eb:03:9d:18:f2:92:27:
f9:eb:e0:85:6c:a2:94:e7:8e:41:80:27:bc:fb:16:
f9:5f:c4:b5:ae:fb:28:02:ce:6b:26:df:af:58:af:
c7:89:fb:01:dc:e0:1f:38:98:1b:ea:c4:fa:33:54:
17:fd:93:e3:8d:13:bb:ab:62:f4:d0:aa:a4:a4:99:
84:a6:41:04:0e:5f:d9:61:68:6e:ce:b8:4b:1c:55:
98:27:f5:35:cd:70:a2:88:b2:65:dd:db:ca:ad:77:
ac:e9:b1:61:71:c8:f1:ba:4e:17:7a:c3:24:e1:8f:
45:55:47:65:ca:4d:a6:1e:9a:83:ad:c3:b0:a9:64:
25:de:99:0e:54:02:b2:1c:87:60:7e:5a:14:06:66:
7b:25:7e:2f:0b:be:88:18:80:cf:94:8f:4e:0a:7b:
77:38:a6:90:a5:39:0f:51:3a:f3:6e:5f:e2:4c:cf:
4b:3d:99:b8:26:b3:f3:64:7e:43:60:c8:02:b3:e9:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:C0:34:6A:B7:60:50:A6:B8:65:D8:D8:A9:00:79:D1:DC:EF:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6da278-bcd7-4268-ac6e-79e50867d421/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6da278-bcd7-4268-ac6e-79e50867d421/1/J_nANGq3YFCmuGXY2KkAedHc73U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.241.0/24
IPv6:
2a11:afc0::/29
Signature Algorithm: sha256WithRSAEncryption
91:7c:98:b1:0b:71:9e:e0:28:7d:f0:e5:89:a0:c8:2a:88:73:
c0:fb:56:12:0f:a1:7f:c8:f8:37:45:7c:d4:4f:56:b1:7f:8b:
e1:84:90:af:6a:0a:35:09:94:44:3a:4c:de:05:5e:5c:ab:21:
23:34:ca:76:e9:05:cd:06:44:f9:29:fb:b8:7f:6e:9c:96:29:
1f:57:d9:8e:8a:22:93:0b:49:03:93:c3:07:01:89:e3:30:7b:
7b:1a:e3:b6:1f:5c:31:e8:77:26:f4:df:03:2f:be:9d:74:7a:
da:c7:ae:47:64:12:3a:e3:cf:db:75:60:79:2d:ce:7e:17:5e:
a9:3a:e6:57:5f:e4:2e:79:38:5f:ab:84:0e:5a:66:ba:12:6a:
82:d4:35:40:c9:54:29:29:0b:bc:d7:c6:50:d0:9b:75:ac:d9:
6e:91:31:b0:a2:8e:ed:4b:5c:9b:3d:9e:2e:c8:bb:4e:f8:9b:
b2:41:49:bc:8a:1d:63:37:6d:0f:2d:ad:46:45:06:f2:d7:b4:
01:19:22:fa:10:03:2a:35:30:12:5b:87:80:6c:a9:cf:ca:72:
34:64:ac:0a:42:77:54:e5:66:a7:de:ca:07:f9:6c:b8:db:06:
eb:3d:3c:4e:6b:27:38:19:71:36:92:82:e2:93:08:33:c8:a5:
b3:31:0d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:00 2024 by rpki-client on console-ams.rpki-client.org