Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer
File: Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer (raw, json)
Hash identifier: IxxyUSofjp7vOTIm9m39utKC5s18/FKhP/sOui0xhcs=
Subject key identifier: 63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01864A4D9B7AC365BC09379603A2A4B8D6C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Feb 2023 10:24:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.23.210.0/24
IP: 2a13:b900::/29
Validation: Failed, certificate revoked on Fri 10 Nov 2023 09:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:4d:9b:7a:c3:65:bc:09:37:96:03:a2:a4:b8:d6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 10:24:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6373975bd0b3f329ff954f951cffe7d867c2ca36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:e1:56:bd:83:cd:05:c5:ed:e1:25:97:2f:
49:81:09:d3:13:98:f5:3c:d2:14:d8:3f:47:8a:6b:
f4:50:9a:59:28:71:cc:42:4c:34:cf:b4:28:91:22:
55:4c:91:a4:3d:41:85:23:17:fb:a5:8e:70:15:c5:
4e:ab:9c:3b:34:10:7a:a7:2e:73:7d:cd:13:df:af:
c3:c3:92:9d:f7:9b:19:22:6d:8c:2f:1b:c4:9f:46:
ed:29:51:d1:3e:6c:e1:de:cf:e9:85:eb:b6:bc:d9:
a6:02:06:41:1a:fb:ed:04:2d:f3:3f:12:dd:88:4c:
3c:6e:e1:e6:0e:de:41:49:b4:4e:61:c3:ca:cd:3f:
c5:88:f0:a4:ad:1d:a5:41:34:92:15:fc:94:14:98:
58:ca:b0:cd:03:bb:06:e8:10:a0:3e:9e:58:d9:72:
e0:d2:44:7c:3c:b4:c8:e4:69:c0:fd:34:63:a2:e4:
ac:70:ae:46:91:cf:06:7f:17:ff:20:d1:0f:5a:84:
a8:ea:07:a9:45:cb:58:76:8c:30:ac:0b:c5:92:16:
6c:14:2c:c4:22:eb:1a:94:24:a8:d6:dc:34:7f:91:
b7:be:21:ee:6b:2e:d6:83:96:04:cf:5f:de:b3:e0:
c5:95:7f:5f:b3:e7:65:50:77:95:a7:6d:fd:80:cb:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.210.0/24
IPv6:
2a13:b900::/29
Signature Algorithm: sha256WithRSAEncryption
72:e6:6d:7e:31:0d:3f:36:a4:85:f7:41:ee:65:61:7f:8b:dd:
5d:bd:30:27:d8:33:7b:9f:f5:0a:43:b7:cb:e9:d3:04:a3:11:
83:fd:e2:8a:ac:a7:f9:9f:02:ca:7f:9c:c3:77:92:fd:29:62:
23:44:f0:07:f4:be:5c:ea:6d:21:91:58:6c:75:2d:d2:e6:fc:
1f:f0:06:d2:b2:da:46:c7:e0:96:60:51:71:98:c1:1b:70:df:
1c:de:30:c6:46:b1:1e:12:74:fe:4b:f0:b4:c7:58:b3:94:91:
f7:a0:c2:41:bb:63:ec:7a:8f:f6:84:ed:ba:92:db:d0:17:9b:
71:e3:2c:b9:4d:65:25:9c:a8:35:f9:7e:05:fb:93:3c:b7:0d:
ef:6d:53:c0:54:da:b7:09:8a:d0:ca:5a:e5:a3:fa:b6:73:d9:
e5:bb:76:37:61:c1:11:e6:6c:52:d7:02:75:49:51:4a:32:30:
41:7b:fd:26:a1:61:a0:be:90:6a:15:f9:74:d0:d8:10:fc:49:
54:a6:35:23:f0:fc:78:39:ab:23:91:0a:ba:02:52:71:af:3a:
11:8d:52:de:e4:ee:61:1c:02:28:31:66:ab:87:8d:7b:d9:e0:
ca:b9:2b:e4:98:f3:29:28:f9:99:7d:02:9e:ed:31:95:04:58:
fd:2b:1f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:46 2024 by rpki-client on console-ams.rpki-client.org