Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TmTyoLJt9D3nIwmaY6cjtb65f1o.cer
File: TmTyoLJt9D3nIwmaY6cjtb65f1o.cer (raw, json)
Hash identifier: cY1nCQRPfyet7vIYTAzHE2exdAKMZgONqKJUXn+GyXI=
Subject key identifier: 4E:64:F2:A0:B2:6D:F4:3D:E7:23:09:9A:63:A7:23:B5:BE:B9:7F:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F6496CD411082EC9BD9A244C5AEFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TmTyoLJt9D3nIwmaY6cjtb65f1o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.205.60.0/24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 11:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:64:96:cd:41:10:82:ec:9b:d9:a2:44:c5:ae:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e64f2a0b26df43de723099a63a723b5beb97f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:44:d3:5e:0b:61:b7:e2:2e:d7:f1:59:d9:
db:39:66:50:86:21:9c:34:7e:09:27:24:2b:ac:74:
4a:b0:f0:b4:c2:3c:c3:fd:81:2e:ee:92:c3:cb:56:
25:8e:11:13:f5:1a:c6:9d:d5:ec:37:c4:2b:43:5a:
d0:a6:a3:6b:31:f5:e1:6a:0e:39:bd:f4:ae:96:74:
0e:c1:94:7c:fd:c9:2e:6c:32:f9:e2:4c:d5:d1:89:
72:15:14:41:e0:e1:18:ce:8a:1c:17:fd:1f:39:26:
04:70:e2:9c:92:56:11:d0:10:06:2a:ad:19:9a:ff:
64:3f:4b:29:94:4c:37:13:fb:cf:03:ef:58:6b:85:
6f:26:32:5c:74:52:9c:c7:84:ef:4d:05:cb:18:d6:
8f:44:62:4b:57:cb:09:5e:6a:b9:28:61:d7:8c:dc:
e9:95:f9:14:97:02:9b:bb:8d:60:ee:0f:3b:07:7d:
92:2f:e1:b5:f5:00:b0:5c:00:df:71:1c:84:1c:c3:
06:be:3f:71:10:c1:cd:bb:e2:48:a0:80:85:62:70:
05:fa:c9:ee:66:74:b4:fe:c0:e0:26:88:b5:f2:10:
3f:c5:2e:ce:bf:af:1b:06:97:09:5f:79:4d:00:36:
b9:b3:64:a3:da:cf:8e:31:03:f9:7c:58:b2:56:8a:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:64:F2:A0:B2:6D:F4:3D:E7:23:09:9A:63:A7:23:B5:BE:B9:7F:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TmTyoLJt9D3nIwmaY6cjtb65f1o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.60.0/24
Signature Algorithm: sha256WithRSAEncryption
65:10:5e:9c:01:17:eb:9c:3d:e0:5a:87:2a:e0:3a:f5:5c:d0:
c3:49:42:30:7d:16:c6:bf:95:80:b6:41:db:a7:7a:7a:a5:89:
90:b5:fd:3c:61:35:b8:f8:b7:6f:07:71:c8:19:ed:ac:cc:92:
21:7a:8f:d2:9a:d8:57:9c:92:e1:c6:fa:a8:97:f1:97:4a:05:
39:82:54:6d:20:8f:a1:6b:3a:e3:4a:eb:48:e0:b1:e7:79:d3:
d4:83:9f:99:71:9b:b9:1d:4c:62:49:4e:8a:70:25:b5:b9:37:
06:de:f3:ff:32:a1:91:c4:5b:02:f2:d9:79:5a:9e:79:17:fb:
11:98:e2:1c:58:29:d2:41:8f:98:72:83:d1:42:46:ed:89:7f:
63:ba:d1:fe:e7:90:c1:e0:40:d4:8e:dd:86:eb:7d:d2:5f:86:
a8:f6:87:f4:ec:f3:eb:02:17:87:6f:30:d1:a5:63:86:b8:3f:
dd:fa:b0:39:33:2d:b1:92:af:ee:b0:8c:2d:8b:bd:2b:09:c3:
0e:92:75:46:8a:aa:94:b5:01:30:9c:8f:0c:a8:af:d7:c5:d0:
18:1b:cf:f4:e3:91:f9:4f:19:74:f5:a6:d4:eb:26:1d:a5:e4:
90:c0:ee:1b:3f:01:13:a7:ca:04:05:2d:3b:dd:40:cf:54:b6:
68:b7:18:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:18 2024 by rpki-client on console-ams.rpki-client.org