Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P37F6QYWPHcmGT8NUZja3c_qCI0.cer
File: P37F6QYWPHcmGT8NUZja3c_qCI0.cer (raw, json)
Hash identifier: 7UsMTiuTtT6nwnAQQU1NYYFFxXAWqj27x35RMqwvOUE=
Subject key identifier: 3F:7E:C5:E9:06:16:3C:77:26:19:3F:0D:51:98:DA:DD:CF:EA:08:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701CC085B0446FDC2D9A2A264F80D770
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/381f70-3fa4-4b76-af3b-0882c97ef0f2/1/P37F6QYWPHcmGT8NUZja3c_qCI0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/381f70-3fa4-4b76-af3b-0882c97ef0f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:33:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.132.100.0/22
IP: 185.238.136.0/22
IP: 194.48.152.0/22
IP: 2a02:f680::/29
IP: 2a09:c380::/29
Validation: Failed, certificate revoked on Mon 13 Feb 2023 08:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1c:c0:85:b0:44:6f:dc:2d:9a:2a:26:4f:80:d7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:33:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f7ec5e906163c7726193f0d5198daddcfea088d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:c3:29:9b:3b:b7:30:53:fa:08:5d:cb:0e:
be:52:a6:94:b0:a3:b2:00:06:7f:10:49:2b:5f:c1:
91:d0:f0:d2:5c:f5:3c:f0:84:e0:5b:e2:cc:0e:01:
9e:6c:12:c2:f9:8f:f0:7f:91:6d:ae:1b:02:be:77:
2c:51:84:0d:16:77:5d:fa:02:1d:dd:31:58:4d:d8:
21:a4:6b:46:a8:b9:d6:da:b0:8a:0d:42:61:38:6e:
98:be:74:f8:f4:c9:5b:41:5c:30:38:39:78:dd:d1:
12:9c:68:eb:0d:02:62:a3:ac:8c:28:1f:1f:a7:12:
04:c3:ee:7c:98:01:ef:36:a7:c6:d7:e9:db:c3:10:
01:98:fa:d2:a7:d0:5a:48:18:59:ee:e7:3e:2a:59:
23:7d:60:8b:85:b3:5a:78:27:cb:db:40:49:41:da:
07:02:a5:71:23:c7:ed:70:4d:ce:66:36:88:25:0e:
62:4d:cf:92:df:4f:95:12:15:d0:e2:98:ad:09:80:
ca:47:60:2d:90:9b:76:db:ea:ca:4f:99:99:e0:2d:
bc:c7:a5:2b:bb:d8:96:31:20:89:51:d5:83:f5:2a:
2f:ac:f6:cd:1b:43:64:48:e1:02:05:c1:df:f9:56:
71:3d:b9:2a:28:62:74:ab:41:da:50:7d:97:f3:f9:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7E:C5:E9:06:16:3C:77:26:19:3F:0D:51:98:DA:DD:CF:EA:08:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/381f70-3fa4-4b76-af3b-0882c97ef0f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/381f70-3fa4-4b76-af3b-0882c97ef0f2/1/P37F6QYWPHcmGT8NUZja3c_qCI0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.100.0/22
185.238.136.0/22
194.48.152.0/22
IPv6:
2a02:f680::/29
2a09:c380::/29
Signature Algorithm: sha256WithRSAEncryption
8f:1a:53:d1:72:6c:2e:a1:52:65:98:c4:d0:bc:6d:75:41:76:
09:3f:9b:88:6a:61:82:b0:85:c5:eb:09:30:8a:7d:61:d8:eb:
48:9d:28:25:eb:57:9b:24:e9:8c:42:f1:68:72:8b:a5:97:4e:
ee:80:6f:20:e9:53:89:95:06:8b:ca:66:3c:8f:d0:77:63:50:
f7:b9:28:01:8b:59:c4:07:51:15:82:88:1e:f5:35:dc:68:c3:
2d:53:34:c0:0c:9f:ad:2c:90:cb:8c:3f:d9:5a:3f:b8:84:26:
e6:c9:10:d0:ea:87:aa:e2:0d:c7:a9:df:bc:e8:d5:f6:7e:09:
03:af:4a:ed:b2:ec:81:f9:aa:43:cd:0f:c2:0b:ee:5c:32:4e:
72:dd:32:a0:66:8e:f6:33:ee:f1:b6:ec:14:dd:c0:9a:79:22:
b5:51:14:25:6c:c1:08:3d:41:28:8c:3c:e3:11:95:eb:24:50:
09:81:16:45:a1:1e:28:27:a1:81:df:fe:70:8c:87:62:ea:2d:
c9:2f:9d:90:b3:11:fe:70:3e:d7:21:fb:8b:dc:99:5f:9e:f2:
99:e8:76:e7:f1:ec:ed:a7:d7:05:fc:57:33:5b:23:fe:94:2f:
0c:57:44:ad:4a:d9:96:32:81:21:2c:e0:90:4b:71:1d:bc:b5:
ef:78:5e:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:49 2024 by rpki-client on console-ams.rpki-client.org