Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tjvzu6WLPStjYgK19Q6EGmd3vKU.cer
File: Tjvzu6WLPStjYgK19Q6EGmd3vKU.cer (raw, json)
Hash identifier: h2bHhlj/fErBgr9SoUfR2zbdbZwn7g87Do5a7ln0UQU=
Subject key identifier: 4E:3B:F3:BB:A5:8B:3D:2B:63:62:02:B5:F5:0E:84:1A:67:77:BC:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018708DCF35F241CB0433F978C85B7DEB7D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/894efc-405a-4640-bc5b-a42f405fad52/1/Tjvzu6WLPStjYgK19Q6EGmd3vKU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/894efc-405a-4640-bc5b-a42f405fad52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Mar 2023 10:28:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.146.100.0/22
IP: 2a0f:2000::/29
Validation: Failed, certificate revoked on Mon 03 Apr 2023 13:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:dc:f3:5f:24:1c:b0:43:3f:97:8c:85:b7:de:b7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 22 10:28:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e3bf3bba58b3d2b636202b5f50e841a6777bca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:80:87:72:e7:c3:06:be:28:08:fc:bb:75:
4f:c0:b7:41:8e:ca:f2:bc:26:57:6b:f8:43:45:ed:
99:4c:ec:29:87:65:c8:da:ab:30:f4:7c:fc:d9:15:
a2:d2:42:af:a4:a4:88:b4:a8:16:23:30:f6:da:cb:
99:e5:b6:c2:ce:78:3f:68:bc:39:15:77:d4:64:3c:
da:52:d6:00:c5:b8:1b:36:73:fd:75:ca:73:cb:b3:
51:ca:67:e6:58:5a:b4:e9:f9:d2:f5:b2:da:44:84:
f5:a6:f2:4a:a8:77:42:d2:fe:82:3d:60:4a:39:95:
84:b8:64:00:0c:d9:a3:a2:99:dd:69:17:af:84:10:
fd:e4:ef:90:d9:11:e0:0a:f5:dc:19:77:98:ba:e9:
49:3b:38:78:1e:d6:3a:e9:a4:85:5f:a5:96:f8:9a:
c0:05:19:ba:01:bb:b2:69:db:a1:70:a9:88:b9:79:
ef:71:7f:5d:2c:f9:78:13:ce:9f:1e:99:d8:00:57:
9d:85:ba:bb:4f:60:27:03:04:4e:f2:1f:70:5a:8b:
40:9c:8b:86:ff:c1:5a:f5:12:50:ab:d3:ab:05:17:
42:4a:cf:6f:43:05:9b:13:53:b8:2b:81:55:00:db:
d8:a7:0a:9b:e3:c1:3f:68:6d:87:91:fa:6f:af:2e:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:F3:BB:A5:8B:3D:2B:63:62:02:B5:F5:0E:84:1A:67:77:BC:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/894efc-405a-4640-bc5b-a42f405fad52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/894efc-405a-4640-bc5b-a42f405fad52/1/Tjvzu6WLPStjYgK19Q6EGmd3vKU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.100.0/22
IPv6:
2a0f:2000::/29
Signature Algorithm: sha256WithRSAEncryption
07:4b:88:d1:dc:0b:9d:46:a9:c5:2f:9c:2b:0b:fb:43:bf:de:
3d:25:c1:0a:cc:df:ed:cf:99:f9:f0:f4:5c:93:c7:dd:c6:1d:
92:a9:94:c0:45:44:a1:36:96:7e:91:a8:c5:1f:68:47:d9:e8:
c6:ee:dc:c6:d6:b6:c3:ad:89:c4:e8:a9:d3:da:31:96:3b:f1:
e2:44:5b:05:73:b1:4b:e1:be:8b:18:ea:94:f7:94:ac:91:30:
8a:ee:7b:31:a4:4a:25:d8:e2:b8:8e:79:55:ab:b7:8d:46:70:
ed:46:9f:01:af:d4:97:a0:89:8c:28:59:d0:45:ef:d5:2d:a8:
43:b8:b5:cc:c5:5d:dc:82:b6:75:08:40:53:83:9f:37:7d:b2:
a2:81:0e:f1:35:06:98:91:cb:77:83:86:ee:99:49:85:ac:2d:
7c:49:8b:5a:64:81:3e:24:78:01:bc:96:cd:f1:a8:46:2c:be:
27:be:02:00:dd:9b:bd:d5:3e:a6:4b:33:47:6d:80:41:c1:d4:
6c:8b:a1:e5:c3:d4:21:ab:6a:69:3e:ff:0f:90:ca:f5:10:6a:
c6:ba:b0:20:f6:3f:bd:ba:1b:fa:2b:16:58:c6:06:92:2e:3c:
52:1c:76:6b:b1:1b:d6:30:bd:58:36:91:d2:f7:eb:f9:98:cd:
bc:a2:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:17 2024 by rpki-client on console-ams.rpki-client.org