Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TvEpnCQo-l6AorFQekY4SQIkZMc.cer
File: TvEpnCQo-l6AorFQekY4SQIkZMc.cer (raw, json)
Hash identifier: 4QDFl8QSTFuAQdiH6d+npSMEenX/oXNm5oKZDVaMoRw=
Subject key identifier: 4E:F1:29:9C:24:28:FA:5E:80:A2:B1:50:7A:46:38:49:02:24:64:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FB070CFF820B0D0659C783B789119B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/124bb3-9511-42f9-bbfc-6e545390aa44/1/TvEpnCQo-l6AorFQekY4SQIkZMc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/124bb3-9511-42f9-bbfc-6e545390aa44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.241.0.0/23
Validation: Failed, certificate revoked on Mon 20 Feb 2023 14:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:07:0c:ff:82:0b:0d:06:59:c7:83:b7:89:11:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ef1299c2428fa5e80a2b1507a463849022464c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:73:80:9a:0d:d3:54:19:47:f6:3e:f0:96:
80:96:36:be:d6:ab:f5:ee:e1:2a:51:a2:27:a2:1b:
4a:bd:c6:3a:38:0d:27:b2:91:be:21:fd:3c:8c:96:
21:c2:dd:27:47:75:6e:40:9b:8a:1e:2c:ed:d0:74:
48:5b:d2:48:7e:2f:01:fc:cb:3d:5c:3a:6b:db:10:
93:65:37:03:36:ca:96:ab:1c:94:99:6f:1f:dd:59:
92:f3:43:f9:53:f7:ff:59:99:13:da:57:b8:0f:bd:
5d:54:b0:98:54:a4:42:5e:84:cf:44:61:c8:80:9f:
fc:7c:91:2d:95:25:98:81:68:17:e8:f6:7d:21:1d:
41:0a:87:80:ce:f7:9a:57:b2:4d:62:0b:3b:fd:a0:
61:2d:58:70:ab:be:97:23:61:18:d6:b3:5d:36:d2:
82:ef:82:63:16:f5:1e:dd:ab:49:27:3a:52:cd:f2:
59:aa:35:ee:ed:22:a2:61:81:35:81:0c:6f:c4:1d:
47:27:58:bf:c4:88:17:06:81:f7:60:c6:1b:b7:5f:
8d:2b:4d:e4:dc:03:95:ae:6d:06:b2:f4:89:59:0c:
f7:47:89:34:c4:37:73:82:54:d4:0b:d1:a1:03:b9:
70:50:26:84:f2:2c:e7:63:3d:62:7a:64:6c:84:32:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F1:29:9C:24:28:FA:5E:80:A2:B1:50:7A:46:38:49:02:24:64:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/124bb3-9511-42f9-bbfc-6e545390aa44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/124bb3-9511-42f9-bbfc-6e545390aa44/1/TvEpnCQo-l6AorFQekY4SQIkZMc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.0.0/23
Signature Algorithm: sha256WithRSAEncryption
19:d6:c4:0a:7b:16:dd:e3:2f:f3:3f:af:66:c5:77:9e:2b:95:
2d:6f:1e:e2:80:02:07:ce:be:a6:55:fb:6a:09:98:4d:ba:cb:
d1:53:b2:7e:fa:dd:ed:85:af:96:84:18:fc:a0:b1:d0:75:43:
db:c4:6d:b2:8b:8e:39:1c:d7:ca:6a:bb:13:38:b9:0a:a4:c4:
c2:02:0c:85:ce:24:b0:99:3c:2d:fe:9e:61:ee:f7:ca:ae:e9:
40:29:d6:13:66:3c:aa:4c:a0:fc:86:4a:62:25:a4:50:79:87:
b5:c5:ba:7b:75:34:59:7e:ce:40:52:f4:bb:50:e3:86:fd:32:
2b:b2:7d:bf:34:1b:ff:73:c7:71:a1:c8:00:38:60:58:a9:23:
38:9e:ce:b9:d6:99:a0:e7:e3:6f:13:fb:50:92:24:1c:67:8c:
a0:70:e9:f1:cd:83:84:5d:dd:83:d1:6f:30:0f:2b:43:9c:f2:
cb:a9:2a:d1:b4:52:44:e3:95:c6:32:5e:d8:fc:59:5c:92:41:
05:64:c5:e5:41:57:e5:ea:c3:dc:cd:14:4f:d1:66:e7:50:51:
66:1b:ce:2c:85:5f:da:53:7c:10:d8:1a:71:30:51:92:c3:4b:
a0:61:89:c8:fa:56:7d:98:17:0d:25:53:d4:9a:1a:5b:35:b0:
52:f9:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:05 2024 by rpki-client on console-fra.rpki-client.org