Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ewqeoIbYHu1NKd5GPWApCI_jvsE.cer
File: ewqeoIbYHu1NKd5GPWApCI_jvsE.cer (raw, json)
Hash identifier: Qc2eJxU9fqNHmvfB18gmLf7Mz13ov1U7SLRFgvkCDk8=
Subject key identifier: 7B:0A:9E:A0:86:D8:1E:ED:4D:29:DE:46:3D:60:29:08:8F:E3:BE:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857168CDADA3CEA1F7C7132D6C1DD3D507
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/ewqeoIbYHu1NKd5GPWApCI_jvsE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.222.228.0/24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 16:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:cd:ad:a3:ce:a1:f7:c7:13:2d:6c:1d:d3:d5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b0a9ea086d81eed4d29de463d6029088fe3bec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:78:06:c8:6f:e0:ca:8b:04:b9:7d:04:f4:
6d:73:de:b3:77:0e:b9:10:fa:06:9c:1e:d6:00:e9:
d6:a0:20:dd:e3:85:91:d5:f0:b0:48:9b:b6:d5:fc:
dc:89:f2:66:7c:88:1d:47:ee:52:a0:de:05:c1:30:
c3:24:be:53:0b:de:12:75:9c:22:cf:60:38:59:6e:
42:90:45:3f:ed:bb:97:5f:1b:f2:ec:a5:b7:74:05:
84:65:3c:4d:d5:16:cb:26:32:8c:18:2a:09:a9:e2:
68:a7:6f:61:c5:c9:09:1d:c2:d5:9a:8b:d7:38:1f:
9f:86:18:f8:f2:64:f2:33:d3:ad:84:f6:b1:c0:34:
34:3e:3d:56:33:f6:b1:ed:14:42:ed:9e:31:26:fb:
e7:16:49:10:69:cd:1a:19:0c:4c:79:a4:57:56:3b:
c4:18:07:ba:17:44:41:80:2d:d4:c5:74:a2:69:59:
45:5e:76:88:26:fe:d5:1a:6e:4a:72:72:24:37:b5:
67:f1:3e:96:db:43:8b:d0:ed:37:f5:e2:f7:c5:c1:
ab:8a:2c:49:a8:d0:1b:c6:3b:c4:ef:8f:b2:69:07:
e2:7e:4f:6e:b3:fc:9d:b1:2b:29:c7:c5:52:31:5c:
79:3b:0f:65:d2:e4:e0:d4:ae:22:d5:79:b5:d6:57:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0A:9E:A0:86:D8:1E:ED:4D:29:DE:46:3D:60:29:08:8F:E3:BE:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/ewqeoIbYHu1NKd5GPWApCI_jvsE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.228.0/24
Signature Algorithm: sha256WithRSAEncryption
31:12:0c:64:07:4f:d5:1d:5d:54:65:69:d1:87:ee:40:3e:64:
e1:77:17:b7:86:ba:7e:2c:b2:fa:31:94:3e:fa:08:03:85:ea:
85:94:b4:95:33:b1:6c:55:cd:b7:3c:10:74:66:61:c7:bd:11:
24:d2:49:98:1e:99:82:5d:1f:33:5d:0f:41:0c:64:34:3f:1d:
6c:5c:14:16:df:45:02:0e:b3:7a:e4:68:e6:c6:6e:0d:dd:6d:
47:07:42:d4:4b:49:59:c7:36:99:ad:4f:d7:75:ca:f3:fe:f9:
8d:e4:b2:5a:e9:e9:be:22:38:76:57:99:42:1e:9e:ad:ab:c2:
4d:47:75:fa:b8:22:1d:38:b3:50:7f:3a:2c:63:33:e9:b1:65:
af:6f:b9:ea:50:cd:46:d9:e9:2b:47:98:b6:70:d6:a5:71:b0:
a1:dd:0e:1a:6c:53:20:e7:77:6b:be:11:35:f5:5d:0f:32:2f:
2b:4d:2e:8e:01:f6:1b:00:2e:3e:57:2c:19:40:0a:5c:fa:d7:
c6:95:67:3e:11:dc:6d:60:39:36:79:8e:2b:d9:4a:b5:b5:9c:
90:44:4c:40:f5:5e:e2:7d:a7:ea:a9:e3:e4:01:e3:f4:85:e7:
cc:97:85:67:9c:ec:fa:6b:b9:c1:00:db:4f:43:2e:bf:c7:ec:
b5:83:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:04 2024 by rpki-client on console-fra.rpki-client.org