Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W4r9htF1Fuxnr2ENLTBB0Gwc1IA.cer
File: W4r9htF1Fuxnr2ENLTBB0Gwc1IA.cer (raw, json)
Hash identifier: SN33CsruFhiyz7+RmhZIq45x+wbkgcK88jGMae/ho5w=
Subject key identifier: 5B:8A:FD:86:D1:75:16:EC:67:AF:61:0D:2D:30:41:D0:6C:1C:D4:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F64327AB7D77E4157381489E34BE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/W4r9htF1Fuxnr2ENLTBB0Gwc1IA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.91.150.0/24
IP: 2a12:6180::/29
Validation: Failed, certificate revoked on Tue 06 Feb 2024 07:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:64:32:7a:b7:d7:7e:41:57:38:14:89:e3:4b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b8afd86d17516ec67af610d2d3041d06c1cd480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:5f:62:55:e9:ed:1f:ba:de:69:7e:45:c4:
fc:d5:72:3b:29:e5:ee:f6:a0:e2:74:3a:18:98:a5:
c6:d9:36:64:ef:7a:82:57:5d:dc:bb:57:7e:95:1f:
5a:ad:d8:20:52:82:c4:b4:66:2a:ae:b9:33:a1:25:
cc:8e:e0:20:c3:a0:86:79:52:c0:64:4c:eb:a8:b6:
a3:10:bf:1a:93:75:1e:0d:7c:b4:b0:d5:ee:5c:82:
08:90:34:76:c0:67:9d:b2:c0:fe:87:d8:44:15:01:
30:0c:18:d0:97:b4:63:e8:eb:c5:ed:0e:c6:92:13:
1e:00:02:e4:ba:7b:f1:f4:89:57:60:2e:30:25:47:
b5:66:3f:07:a3:7d:26:6e:5a:46:c9:8b:b4:24:6d:
81:71:18:97:96:81:30:a5:5b:77:da:9c:85:3f:a6:
70:36:69:7a:7f:23:37:1d:0c:b9:fc:0f:f3:2a:b4:
e4:63:d8:74:93:1c:2b:1c:0b:cc:57:fb:e7:2d:f9:
fd:a6:00:31:bb:6d:09:94:70:ac:b7:bf:91:a6:9b:
08:ab:3b:bd:68:5c:27:b9:de:e1:85:50:f1:73:fc:
de:fa:09:d0:8d:70:47:d2:f2:d3:f3:fb:c6:00:da:
76:0d:32:22:c9:b3:cf:bb:53:ef:f9:4d:d2:c6:1e:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8A:FD:86:D1:75:16:EC:67:AF:61:0D:2D:30:41:D0:6C:1C:D4:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/W4r9htF1Fuxnr2ENLTBB0Gwc1IA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.150.0/24
IPv6:
2a12:6180::/29
Signature Algorithm: sha256WithRSAEncryption
22:20:d7:a2:db:60:62:f5:7d:c4:ab:ef:02:22:29:97:a9:7a:
08:e9:39:2b:0a:3d:d5:33:d0:df:10:66:2d:ab:c3:31:26:50:
d3:c8:7c:37:cc:3f:c3:eb:55:76:88:2c:bc:35:17:00:64:72:
50:53:e0:1c:f0:9d:15:31:97:ce:6f:b2:a7:25:ea:48:7e:9a:
d1:b4:3c:9a:33:b6:43:a8:84:4d:32:1c:4d:2a:1a:49:e2:f7:
58:96:26:2b:ed:72:25:13:ac:89:9b:0d:bc:7b:24:15:80:2d:
f8:b4:38:5e:f8:5a:cc:87:de:6d:9d:e2:5a:b8:3b:df:fb:b2:
50:d6:1e:87:5a:10:90:51:35:bf:66:d4:78:92:6b:3e:64:34:
05:af:82:c0:65:80:1c:7c:41:da:97:bb:65:05:76:0e:5f:7c:
73:b2:a1:76:2f:93:06:c8:e3:de:b2:aa:c0:00:61:e7:44:11:
8c:62:a9:8b:f8:0a:5a:99:01:76:b3:f1:53:17:54:f6:68:59:
f2:3f:0e:a1:bb:eb:1e:1a:f4:36:f6:e8:0a:84:f5:b7:9d:b7:
63:98:2b:83:f6:c5:08:e3:09:e7:d2:45:6b:a2:82:54:1e:fb:
a0:71:b2:a9:81:39:8f:58:18:ec:43:23:58:49:c0:88:e2:21:
1a:6b:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:03 2024 by rpki-client on console-ams.rpki-client.org