Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_iGKhxKWwlp31-Cm09SMQ8aqlaE.cer
File: _iGKhxKWwlp31-Cm09SMQ8aqlaE.cer (raw, json)
Hash identifier: kwGKzEuW9XjhtGnvSYnv5mBnIQTK/ennfHirzZuwsng=
Subject key identifier: FE:21:8A:87:12:96:C2:5A:77:D7:E0:A6:D3:D4:8C:43:C6:AA:95:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6353648F7450FA36C75107AEA448A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/5d9ed0-a204-4550-99fd-8f4edd6cb4d0/1/_iGKhxKWwlp31-Cm09SMQ8aqlaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/5d9ed0-a204-4550-99fd-8f4edd6cb4d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.102.126.0/24
IP: 2a0f:c740::/29
Validation: Failed, certificate revoked on Tue 06 Jun 2023 15:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:53:64:8f:74:50:fa:36:c7:51:07:ae:a4:48:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe218a871296c25a77d7e0a6d3d48c43c6aa95a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:3d:7e:9d:7e:61:1e:76:67:d7:82:75:00:
01:18:20:7c:d1:0a:ad:37:45:b7:b2:2e:df:70:b1:
ed:03:9c:d9:31:9e:57:51:a8:d3:18:1f:67:e8:b6:
ee:e4:ea:db:8c:5c:ab:90:4a:97:fd:5f:97:c7:33:
60:f2:1b:e9:bb:3e:a0:44:51:a2:8a:17:47:4e:3c:
9b:ee:71:3a:c6:34:fd:24:51:3b:f7:3c:ff:b0:3c:
6b:0f:a4:a1:2d:63:3b:aa:45:70:fa:59:76:35:49:
fc:53:e3:95:b0:b2:55:05:b8:82:9f:85:45:d9:6d:
d9:83:6d:78:90:54:bd:5e:f9:d0:27:fb:2c:22:7e:
cf:44:c7:55:89:c5:78:e8:f3:69:3d:81:ed:50:4f:
08:47:c4:90:8c:7f:b7:13:44:f9:18:63:4f:06:c3:
56:98:9a:de:f7:06:b1:f2:41:e2:be:87:40:5d:b6:
96:d4:99:c1:67:89:49:7a:b7:0a:2d:db:3d:ce:26:
37:de:11:a0:e9:c1:7c:c6:59:a3:cf:b0:cd:41:b8:
27:f4:6c:18:d8:f0:79:46:18:b7:80:b4:23:ff:8e:
52:47:6c:75:87:ca:46:50:71:64:b7:5b:2a:3b:d4:
00:4c:e2:1e:c7:9c:ff:19:00:72:8d:37:5f:7b:93:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:8A:87:12:96:C2:5A:77:D7:E0:A6:D3:D4:8C:43:C6:AA:95:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5d9ed0-a204-4550-99fd-8f4edd6cb4d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5d9ed0-a204-4550-99fd-8f4edd6cb4d0/1/_iGKhxKWwlp31-Cm09SMQ8aqlaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.126.0/24
IPv6:
2a0f:c740::/29
Signature Algorithm: sha256WithRSAEncryption
3b:8c:15:31:b6:51:32:fa:64:68:cf:7d:00:c4:cd:fe:7c:65:
50:94:79:f4:a7:ce:7d:81:f0:34:2c:9a:65:80:c9:58:74:5b:
43:82:ef:2e:c0:ec:b1:9b:c2:af:48:e6:86:7b:4d:50:a9:79:
e1:cf:92:0a:c8:fc:c5:8c:c8:18:87:b1:03:48:a7:ee:09:e8:
2d:ee:ac:83:96:57:c7:85:5b:28:e0:a7:91:62:8f:21:66:6c:
25:b5:b0:8b:9e:1a:98:1f:17:a0:9b:0f:a6:29:2e:48:c8:86:
60:b8:ad:02:66:22:f5:62:53:33:0b:fa:f8:91:0f:70:89:de:
89:6b:56:3a:64:b2:42:b1:b9:c3:2a:0a:e5:1e:8f:5c:74:77:
c1:4f:20:89:db:27:bd:9b:f4:db:e7:5e:a7:76:e3:22:73:04:
89:e9:dd:52:24:45:63:c4:75:54:30:42:c2:9c:f0:9a:64:e0:
b5:cd:18:fe:fe:6a:58:8c:87:0a:1a:4c:f6:d8:e3:68:d2:46:
1b:09:81:46:56:04:84:34:f3:4b:2b:fc:40:65:5e:e6:f2:e0:
11:d2:83:3b:cc:f2:2a:de:ed:e7:e8:41:f5:6d:f7:9c:cc:98:
cf:eb:17:c5:95:f5:08:af:08:e1:c9:23:14:51:64:a5:e3:eb:
c2:d2:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:37 2024 by rpki-client on console-ams.rpki-client.org