Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c_9TZr4AUNPb7jbyDlQAZcpqjlE.cer
File: c_9TZr4AUNPb7jbyDlQAZcpqjlE.cer (raw, json)
Hash identifier: 9Azexm1D3pZyMfQ3tRAJVEPLDWollRrKhUEn545sCaA=
Subject key identifier: 73:FF:53:66:BE:00:50:D3:DB:EE:36:F2:0E:54:00:65:CA:6A:8E:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F2491A9710B00E79BAB2A092D9245
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/ed6589-272c-4120-9adc-ee8ae6638f12/1/c_9TZr4AUNPb7jbyDlQAZcpqjlE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/ed6589-272c-4120-9adc-ee8ae6638f12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.222.230.0/24
IP: 2a11:84c0::/29
Validation: Failed, certificate revoked on Mon 09 Oct 2023 12:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:24:91:a9:71:0b:00:e7:9b:ab:2a:09:2d:92:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73ff5366be0050d3dbee36f20e540065ca6a8e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:a0:d6:c0:9c:3e:8b:7d:b4:59:0f:f9:62:
b6:17:9a:2c:b9:e3:da:55:84:34:21:25:b6:1f:89:
d6:87:3e:2e:f6:19:92:2e:73:80:d5:28:0e:b5:c9:
8e:bd:83:7d:93:2c:cb:65:9c:ac:57:3d:7c:75:60:
c8:7a:e5:2c:c5:c7:50:8e:38:d1:c6:04:c3:9f:5a:
07:15:b2:7e:61:72:fa:4a:3a:1b:0e:79:cf:5f:8d:
27:eb:15:19:0c:01:79:0c:c2:fc:4b:25:d0:85:8e:
8f:51:c7:73:01:2d:93:dc:31:49:e1:a0:9e:25:3e:
fc:a4:55:5f:62:39:79:d7:f8:17:39:23:d6:8c:51:
3e:f0:a1:26:21:e2:10:95:93:77:38:38:2f:ea:7c:
63:83:99:94:ce:05:be:50:78:b0:70:bb:00:33:09:
93:bd:4c:37:84:b4:63:41:44:91:96:b2:70:fd:e6:
bc:c3:7e:e2:32:6c:df:63:6f:b2:86:0d:b0:6a:2b:
7b:74:bc:80:60:13:d1:24:ea:a8:73:00:b9:a8:42:
1f:9f:52:98:7c:67:50:b5:60:f8:15:e1:f5:81:c1:
85:11:07:19:10:f7:8e:46:5e:a1:b4:41:b2:1a:18:
55:af:c0:c4:dc:b6:05:05:7e:1b:ac:45:d5:f0:d1:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FF:53:66:BE:00:50:D3:DB:EE:36:F2:0E:54:00:65:CA:6A:8E:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ed6589-272c-4120-9adc-ee8ae6638f12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ed6589-272c-4120-9adc-ee8ae6638f12/1/c_9TZr4AUNPb7jbyDlQAZcpqjlE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.230.0/24
IPv6:
2a11:84c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:9e:6c:76:84:80:87:3a:f3:3a:0a:8b:f9:ef:ad:52:7b:be:
3a:58:80:f8:fa:ad:aa:82:e8:17:82:b4:7e:e1:d8:b4:8c:43:
8d:da:c3:4e:3b:a8:20:75:a5:00:4e:9e:bc:f6:a8:b1:7c:da:
81:62:e3:6d:a2:81:71:56:93:d6:6c:a3:d7:03:40:08:1b:94:
e4:23:3b:45:84:4f:e9:37:47:b6:39:1c:16:5a:41:e6:5b:73:
b1:06:3e:bd:3c:7b:a7:cf:59:ef:70:1f:3b:3b:e0:95:ec:9b:
bf:9b:84:c5:9e:5c:34:9b:a5:3c:6b:54:bb:11:d0:e9:88:c0:
f3:c6:56:91:e8:df:26:11:7d:7a:a0:51:d2:34:3f:27:a0:b6:
6b:ee:85:4f:37:a3:bf:f6:1d:b8:fe:c2:90:a6:e2:fb:a8:68:
bd:c9:c5:d2:5f:b1:19:84:e1:96:6c:b3:ef:53:66:4f:b4:0d:
3d:ca:10:64:92:7d:50:2a:3d:a2:54:dc:6e:ff:f1:8d:3c:10:
bc:eb:47:f7:40:99:b5:85:df:86:1a:c7:75:37:98:81:29:d2:
2b:48:0a:23:3d:ec:8e:a5:37:48:94:c5:60:ac:73:ab:fd:75:
17:e2:09:bd:1e:c6:41:a8:57:79:f5:38:2f:b4:fa:00:a4:89:
4c:e3:f7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:15 2024 by rpki-client on console-ams.rpki-client.org