Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TPC6YVG4CCQ_EvHotUT08WQDPvY.cer
File: TPC6YVG4CCQ_EvHotUT08WQDPvY.cer (raw, json)
Hash identifier: m0tG7OVlCsq/1cV2nHjKhA63rzZIg4W/IFm7uhUgOUs=
Subject key identifier: 4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B17D3D4A1CA1B77B51C210B1834D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/TPC6YVG4CCQ_EvHotUT08WQDPvY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:50 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.57.0/24
IP: 2a12:cc80::/29
Validation: Failed, certificate revoked on Mon 11 Dec 2023 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:17:d3:d4:a1:ca:1b:77:b5:1c:21:0b:18:34:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf0ba6151b808243f12f1e8b544f4f164033ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:44:1c:65:27:fa:f3:33:7b:0a:e9:61:e9:3d:
5e:26:97:f6:92:04:48:87:a0:f5:51:d6:da:e5:2b:
7b:92:85:ae:3a:05:45:23:d5:38:59:c4:6b:be:1a:
85:3e:86:96:54:12:53:92:6e:24:55:7d:94:de:7f:
1b:49:b4:33:f3:24:62:05:76:33:e6:37:26:a8:90:
5d:e3:41:b5:47:87:b9:f8:3e:c5:01:c5:7f:12:f8:
97:7f:2d:13:f9:7e:8c:95:ce:93:b4:c3:7c:70:8a:
dc:a6:3f:78:a7:4b:1b:2a:09:9b:9a:60:74:3f:53:
28:50:4c:18:94:c8:3d:70:a4:dc:a8:f5:55:f2:4a:
c5:7b:87:2f:cb:92:12:19:7f:5b:bf:b6:f5:a2:e7:
c4:ae:4d:09:7a:54:20:96:c9:5c:aa:e4:70:5f:08:
05:c3:f8:57:02:1e:ae:cf:14:2d:4a:d8:c5:94:7f:
77:0d:fe:fa:95:07:7c:d3:80:52:3c:e9:41:eb:27:
56:47:ca:c8:ee:08:81:5d:40:d5:f1:3d:f5:fa:0a:
82:98:3e:40:20:6f:b2:bf:21:a8:0a:6b:8a:8d:81:
4f:d7:0a:62:7f:5b:2b:bd:be:53:45:6c:7d:8e:d2:
43:5b:09:10:3e:93:cb:1c:c6:7a:a6:70:fe:a8:f5:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/TPC6YVG4CCQ_EvHotUT08WQDPvY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.57.0/24
IPv6:
2a12:cc80::/29
Signature Algorithm: sha256WithRSAEncryption
79:a7:f7:97:2b:06:5b:3b:f4:5a:1a:80:35:69:3a:a9:ef:9c:
31:88:19:c6:b2:89:10:c1:3e:38:06:83:62:4d:d5:a8:77:6f:
e2:1d:0a:f9:4c:e6:07:17:ff:08:38:4a:74:17:ed:2b:93:a5:
76:4d:23:fb:11:e0:2a:96:b6:69:84:8d:c7:9e:03:c7:73:a7:
aa:ba:37:ed:85:99:1f:46:da:38:5e:b0:b4:17:38:00:46:8c:
45:90:21:28:a9:c7:81:6d:e6:eb:ab:ec:79:8b:96:ab:25:0d:
46:28:96:54:5e:e5:f6:4e:55:9e:52:4e:33:45:8e:5e:51:6b:
a6:f5:cc:d8:9c:a5:2d:2d:76:db:47:de:ee:d8:9b:3d:2b:ed:
df:77:cb:09:47:92:41:dd:26:e9:e4:94:cb:9f:93:3e:bd:ee:
d2:bb:ff:40:8d:a2:52:fc:3b:3f:34:14:81:65:7c:30:31:fe:
27:a5:bd:e5:f5:38:6a:22:7c:ce:29:52:d6:ec:1c:cc:8d:0e:
70:ff:62:ae:c2:16:81:68:c4:29:df:dd:97:9b:82:80:c7:46:
2b:e1:6f:f5:ed:7c:76:50:cd:cd:37:bc:04:a6:3d:54:0e:a7:
3d:91:69:bd:9d:06:96:1d:6a:91:62:77:1a:d1:d2:64:e5:2f:
98:4d:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:12 2024 by rpki-client on console-ams.rpki-client.org