Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SmGqIzGb4hMi-NaoufeJ41ymFfE.cer
File: SmGqIzGb4hMi-NaoufeJ41ymFfE.cer (raw, json)
Hash identifier: HmmGK79/YXNj7uw0Eq8xs6GeixxXsyWARr7UZg756dk=
Subject key identifier: 4A:61:AA:23:31:9B:E2:13:22:F8:D6:A8:B9:F7:89:E3:5C:A6:15:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F41D50540D507786D86AD82093C3642
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/18409d-7967-46ca-bc1d-dec4497eec42/1/SmGqIzGb4hMi-NaoufeJ41ymFfE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/18409d-7967-46ca-bc1d-dec4497eec42/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.135.96.0/22
IP: 193.228.197.0 -- 193.228.198.255
Validation: Failed, certificate revoked on Thu 26 Jan 2023 11:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:d5:05:40:d5:07:78:6d:86:ad:82:09:3c:36:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a61aa23319be21322f8d6a8b9f789e35ca615f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:47:04:6f:6b:e1:5b:5c:7e:1a:be:79:46:
bb:02:13:c2:f2:28:8b:87:ce:a9:c1:ea:70:b7:90:
a0:69:9d:7e:39:f0:5d:3d:55:a5:0e:92:c5:7d:02:
05:f1:8e:9e:da:8e:45:3f:f9:36:33:7b:4e:62:01:
10:5c:42:be:5b:d4:68:8f:9a:d2:e6:a5:f5:18:4c:
63:45:87:b9:fb:5f:98:22:b3:b6:15:87:6b:72:3d:
60:88:84:64:ff:fd:f8:e8:b4:78:4b:e3:61:d9:1f:
42:b8:53:14:38:a5:38:e1:1a:81:14:7f:f3:65:d0:
61:ab:8b:3f:e1:ad:29:b2:16:54:2b:c5:d8:12:35:
dc:e1:7c:d4:6c:a4:ba:1e:d9:1e:11:f2:d5:e1:03:
50:9d:98:f2:89:bd:71:a6:88:4a:ee:a6:72:f6:b4:
6d:4e:2e:09:f1:b6:f0:ad:fb:0c:28:ea:65:4c:e4:
14:47:28:6a:4e:f4:64:3c:bb:9c:1a:9f:58:e3:95:
04:54:bb:6b:89:06:e7:cf:8f:b4:17:66:d0:55:6a:
49:d2:c1:06:aa:e7:97:48:1b:45:1b:2a:54:95:d9:
fb:ca:02:d9:d0:53:30:a4:be:de:fa:5b:18:42:de:
db:f6:d4:96:ad:1b:39:03:15:ab:ca:26:59:d2:84:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:61:AA:23:31:9B:E2:13:22:F8:D6:A8:B9:F7:89:E3:5C:A6:15:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/18409d-7967-46ca-bc1d-dec4497eec42/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/18409d-7967-46ca-bc1d-dec4497eec42/1/SmGqIzGb4hMi-NaoufeJ41ymFfE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.96.0/22
193.228.197.0-193.228.198.255
Signature Algorithm: sha256WithRSAEncryption
01:23:89:28:81:2f:52:28:55:e3:15:9d:5b:ef:f4:fa:bf:20:
f7:38:50:72:08:6f:a6:c9:d5:4f:1a:c4:ad:60:75:9e:4e:68:
e8:4b:59:07:fa:ef:f5:5c:76:bb:b0:e8:93:d3:fa:24:0d:a3:
ee:e9:0a:83:2a:01:e7:6d:7d:89:e5:fa:3e:70:9d:a8:7f:94:
24:c8:0e:5c:b5:cb:5a:78:7d:79:6d:36:cc:2d:52:c0:1f:2a:
4a:f3:f9:b2:c5:e0:3c:c4:32:09:f2:7c:5f:13:2f:cf:dd:5e:
f6:a7:a2:bb:7c:5a:9d:14:1a:6e:3a:ae:be:6f:2a:50:6b:c4:
77:44:ed:83:9a:bf:59:b9:ec:3a:85:72:62:d3:86:11:86:2e:
70:98:99:93:c9:34:4d:9c:b7:03:16:71:b9:3b:8a:16:cb:b7:
de:ab:52:cc:b0:5e:23:ac:8e:4f:eb:d2:0c:69:c6:8b:eb:50:
e8:97:a4:64:68:9a:f7:51:c6:f6:80:80:a0:84:9d:7e:e1:5e:
5a:47:dc:3c:72:f7:c5:06:54:15:fb:1e:09:15:84:f6:bf:99:
c9:3d:d7:d4:df:18:c2:21:69:1d:ef:46:bb:53:54:07:78:b6:
88:a9:8b:cd:25:45:3c:dd:47:8e:26:f3:38:aa:0d:4d:18:ce:
a0:91:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:48 2024 by rpki-client on console-fra.rpki-client.org