Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dHvIGtbdDhwGqwe-aDtshv2KbAY.cer
File: dHvIGtbdDhwGqwe-aDtshv2KbAY.cer (raw, json)
Hash identifier: Ph7Us0S6NX/xy/EOBOLXhrzMGK4uaXiN8CpRWnTRmEs=
Subject key identifier: 74:7B:C8:1A:D6:DD:0E:1C:06:AB:07:BE:68:3B:6C:86:FD:8A:6C:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FB24C061726815627732FFBB07B4C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/dHvIGtbdDhwGqwe-aDtshv2KbAY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.246.54.0/24
IP: 2a11:bdc0::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 15:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:24:c0:61:72:68:15:62:77:32:ff:bb:07:b4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=747bc81ad6dd0e1c06ab07be683b6c86fd8a6c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:0f:f7:49:aa:33:80:97:e2:31:ec:27:d0:
5e:e4:06:38:b3:83:c3:6c:ff:94:38:a1:62:c7:10:
0f:d9:64:39:ec:86:fb:df:7c:f1:76:c8:6a:b5:f2:
81:d0:ee:ec:1d:66:2e:4d:5d:2d:63:4f:38:ab:dc:
0b:20:c2:4d:0e:6a:cf:a9:3e:5d:cc:b8:b7:5a:7f:
ab:2d:9e:cd:89:ed:dc:b8:d2:52:05:69:f6:e5:46:
7f:c1:dd:53:40:c7:83:d2:ee:ff:a6:e7:32:b2:4b:
59:82:37:cf:d3:11:d0:c3:91:1e:1e:53:66:05:f4:
fb:fc:e1:2c:17:6d:8e:24:30:ef:7e:db:0f:32:99:
6a:d8:3d:20:dc:6d:af:7d:13:b4:7a:4b:6c:ea:d3:
e7:1a:43:67:53:b8:7f:b5:52:ae:4d:1b:19:57:33:
c7:2c:a4:31:95:84:16:e5:e0:54:6c:56:51:21:1d:
4f:08:9e:38:5d:73:79:0a:47:ff:f7:af:34:9e:10:
36:72:e2:0a:9c:75:8f:07:d6:ac:2c:08:c6:a8:50:
13:ad:f6:aa:22:d1:f5:6d:f2:20:b2:51:f9:c7:81:
6e:63:9a:e2:4a:02:0e:a5:3a:c4:41:e6:34:4a:38:
5b:5e:af:a3:a2:be:3c:84:3d:cd:c7:3e:db:0c:76:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7B:C8:1A:D6:DD:0E:1C:06:AB:07:BE:68:3B:6C:86:FD:8A:6C:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/dHvIGtbdDhwGqwe-aDtshv2KbAY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.54.0/24
IPv6:
2a11:bdc0::/29
Signature Algorithm: sha256WithRSAEncryption
50:51:d8:f3:29:53:9a:90:07:37:24:db:0a:fc:84:de:52:96:
cf:70:c1:f3:86:17:8d:0b:98:c0:bb:a2:ed:83:3e:00:e7:8a:
28:59:0c:bb:3f:f1:e7:23:b7:4d:39:bc:cb:83:7c:83:ba:48:
01:58:41:22:f6:01:43:78:44:3a:7b:7b:5c:65:bb:bf:23:5a:
45:35:af:43:e9:cf:67:41:dd:e1:b1:86:9d:93:95:dc:8c:d6:
4c:91:8b:a2:8b:6c:4f:2c:2d:e0:39:44:be:f2:cc:b0:91:36:
88:c3:54:68:1e:5d:29:be:6b:e1:06:e2:f7:42:86:26:30:45:
b8:ec:7e:48:45:9c:f6:d9:e3:17:76:8b:2e:f2:9d:08:30:5a:
eb:f9:79:79:b2:e0:3d:d9:fc:7c:c1:02:73:56:b6:f1:5d:1f:
cf:66:f7:14:0b:cf:86:dc:63:49:04:c1:1f:31:be:f6:92:c8:
47:43:4c:ce:68:b8:d6:c5:64:f6:a9:93:4a:af:bd:b6:57:f0:
e5:ba:0c:36:26:56:1a:bd:7c:29:7f:bd:41:19:f8:69:97:5e:
42:7d:34:d3:51:8e:98:a4:b5:0f:0f:7a:bd:ff:65:3b:e3:c0:
e7:c1:91:fe:a1:68:5b:ed:1d:5e:6b:f3:85:3e:88:29:7b:ab:
04:76:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:58 2024 by rpki-client on console-fra.rpki-client.org