Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bWNf4MCJbVhMTMwZlL5_alGainM.cer
File: bWNf4MCJbVhMTMwZlL5_alGainM.cer (raw, json)
Hash identifier: RMCXa/F0UKMvGS8JCrwff9A0mAKwQ64bzkHpb4QNRuA=
Subject key identifier: 6D:63:5F:E0:C0:89:6D:58:4C:4C:CC:19:94:BE:7F:6A:51:9A:8A:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01884E917568F573F8F416D2554475C8F0A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/bWNf4MCJbVhMTMwZlL5_alGainM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 May 2023 16:22:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 46.253.139.0/24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 13:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:91:75:68:f5:73:f8:f4:16:d2:55:44:75:c8:f0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 24 16:22:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d635fe0c0896d584c4ccc1994be7f6a519a8a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:3f:b6:e7:a3:7d:62:9c:86:4f:ff:3d:55:
c8:bf:87:fe:77:17:a7:f3:d0:55:e5:25:86:69:a3:
b2:d0:ac:8a:02:73:c7:1f:8f:78:bb:1c:c7:91:69:
80:df:2e:0f:c9:2f:12:87:29:01:74:08:e0:ac:c4:
17:47:25:3f:25:ef:49:ef:7d:ba:b6:11:c2:49:c9:
4e:f5:4d:e0:98:7c:61:63:a4:fa:20:a3:94:e8:2f:
00:b6:61:59:eb:e2:84:e3:aa:0c:1c:64:1d:19:a5:
3e:7e:60:89:aa:c6:7c:c7:b5:bb:69:ab:fc:3c:d8:
86:66:f9:a9:09:1f:ec:57:39:04:b3:96:75:94:e2:
0c:23:a9:24:02:f5:ff:d7:81:a7:7e:04:c8:b2:56:
87:78:83:f6:d3:e9:af:75:30:f4:82:28:3b:07:3a:
23:c7:5e:27:1e:ad:0c:a2:5f:37:6e:7f:4e:99:e6:
8d:29:f0:eb:16:8f:49:23:1a:c9:48:b7:0c:18:07:
b4:c2:ed:0c:29:d1:bb:37:ff:68:9a:3d:b0:7a:ac:
3b:a1:5a:7b:e0:5e:33:68:6e:6b:88:4d:28:30:b9:
1b:e6:b3:d0:76:86:3a:d5:00:b9:98:57:71:bf:1b:
ab:ed:78:0f:01:18:43:80:93:79:00:aa:f7:5d:71:
13:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:63:5F:E0:C0:89:6D:58:4C:4C:CC:19:94:BE:7F:6A:51:9A:8A:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/bWNf4MCJbVhMTMwZlL5_alGainM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:67:e2:48:a2:94:f7:d7:b8:1e:be:e7:40:fb:e3:98:f6:c5:
bf:2f:8f:b6:68:54:eb:29:9e:4d:3d:46:04:55:ab:eb:9f:d1:
5f:89:aa:73:a0:e6:07:15:e9:d0:48:6d:91:37:61:99:8e:a0:
89:a1:49:0f:aa:31:57:03:d0:fe:2d:c2:10:32:65:62:1c:c1:
93:f9:91:f5:37:7e:e1:c4:40:af:ff:c7:11:02:e5:97:e2:3d:
7f:47:72:73:23:c5:47:09:a5:9c:9d:27:1a:36:eb:f8:41:40:
e2:64:48:d6:dc:0d:ca:8e:14:65:45:2a:a8:3c:54:f5:3e:49:
90:73:87:67:1e:cf:71:10:b6:96:42:10:1b:f7:69:3f:5d:e3:
55:06:5b:ef:3f:d2:d4:29:e3:ee:ba:59:f9:22:d8:7f:50:e4:
96:bd:b4:5e:1d:25:08:b7:9d:bf:5b:92:c6:95:82:68:88:2e:
fb:a0:dc:8c:dd:0f:20:0c:ee:8a:08:e1:c6:a0:5a:65:70:c0:
25:df:ed:d7:ba:71:82:f7:05:f6:c7:c6:58:32:a0:00:a7:fa:
75:51:48:94:c6:d9:1a:61:20:de:20:56:24:08:71:e1:f5:66:
10:43:06:4f:ea:20:b4:b7:c0:82:0d:72:fc:ef:35:97:f4:a6:
7f:49:4e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:42 2024 by rpki-client on console-ams.rpki-client.org