Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
File: TCl_WCiqThyOBB6dvqer05tVhNc.cer (raw, json)
Hash identifier: 6gA9Hn9s2eg9AVdMOjb9leckMSi/VdQg3S6Ba6kC9Vc=
Subject key identifier: 4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185DF1BA0C51D6F57E0F9E1AF4FB782F4CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/TCl_WCiqThyOBB6dvqer05tVhNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Jan 2023 14:50:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 84.246.111.0/24
IP: 2a13:c400::/29
Validation: Failed, certificate revoked on Fri 18 Aug 2023 07:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:df:1b:a0:c5:1d:6f:57:e0:f9:e1:af:4f:b7:82:f4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 23 14:50:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ed:d2:aa:d9:dc:b0:9d:98:6a:98:4d:00:eb:
ba:a4:c2:75:c3:51:05:7a:30:8d:bd:03:c0:1d:d6:
ec:e7:44:c6:60:63:83:84:3b:48:3c:58:16:85:1b:
8c:c7:49:bd:c3:d3:1e:91:b4:ea:a7:f2:e8:18:49:
7a:b3:3d:86:a3:f3:b0:00:b4:eb:fb:c5:45:d9:8b:
cc:25:b4:29:3c:02:c0:9c:65:6c:2b:11:e1:ea:fa:
d6:80:c9:75:9d:ce:e0:ba:1d:3c:cf:dc:88:1b:56:
39:bd:52:aa:1e:0e:ff:3f:27:40:46:d0:c3:d8:fb:
07:35:1e:c7:3f:4c:cf:cb:b1:a7:e5:23:57:f7:08:
c8:da:31:da:ff:8c:e0:e7:e6:1a:ea:7b:83:d8:7b:
d7:75:82:4d:2e:95:b7:2d:78:61:fe:cd:75:1a:aa:
48:05:44:1c:59:1e:2a:17:88:19:53:b9:73:da:9e:
b0:df:df:ef:34:b0:2d:5f:71:9f:d2:6b:1a:4c:08:
a7:9e:f1:b0:9c:29:41:20:5c:1a:04:4b:ce:a0:07:
b2:13:33:08:ea:fd:73:54:86:bb:0f:18:98:92:99:
57:e5:dc:bb:08:14:55:f4:73:5a:b0:4f:95:11:cd:
8d:9a:a8:92:b8:cd:5e:80:16:83:e4:73:3d:0e:87:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/TCl_WCiqThyOBB6dvqer05tVhNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
IPv6:
2a13:c400::/29
Signature Algorithm: sha256WithRSAEncryption
27:ef:6e:58:cf:39:26:98:aa:a0:14:76:69:9f:fb:ba:0a:f8:
c9:3a:d6:7d:1b:cb:75:d8:9f:9e:65:3b:b7:55:83:45:f6:66:
ed:58:1a:49:05:7a:92:f4:3b:25:b1:ea:54:16:4a:98:f7:80:
13:d6:a3:cc:04:e3:86:03:6b:a0:1e:d6:97:50:b5:bc:dd:a2:
54:60:70:cb:4d:d1:f7:48:16:bc:28:6b:e0:45:83:65:48:90:
1e:c7:1e:2d:b3:a6:87:94:34:ed:30:6e:02:b5:1f:2d:67:54:
ab:2a:9e:22:2e:31:36:56:0a:fa:f5:10:05:96:5d:d7:ac:f2:
86:35:ca:aa:2f:bb:9e:01:18:b8:e2:fa:60:05:23:0d:d5:e7:
6d:70:34:a6:90:74:98:02:3f:c9:e0:e7:8e:cc:63:13:22:c5:
10:d8:69:c4:c0:a8:ec:a2:dc:a8:77:6a:aa:3a:e9:30:44:b4:
5b:39:9b:d5:88:c9:de:21:53:b1:85:87:d7:61:1b:c0:b6:19:
ea:ac:b2:31:4b:ae:0a:78:8b:d2:71:f9:aa:38:7d:4a:b1:65:
60:f1:b0:b6:2d:98:a0:b7:ca:3a:c8:bd:eb:e6:d8:5c:61:21:
6f:8c:55:58:36:6a:ba:12:ac:4b:e4:77:7a:c2:bf:18:a6:5f:
d8:25:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-fra.rpki-client.org