Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5S3O0Fy-zG3a7nxRns25auaLt0.cer
File: f5S3O0Fy-zG3a7nxRns25auaLt0.cer (raw, json)
Hash identifier: eG+4m1eMDyjX6T4c3Q8kq3/uNV2SRO6B6n/mib0hWtE=
Subject key identifier: 7F:94:B7:3B:41:72:FB:31:B7:6B:B9:F1:46:7B:36:E5:AB:9A:2E:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B553F86F28261BAF026D706CE0251
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/f5S3O0Fy-zG3a7nxRns25auaLt0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 85.8.130.0/24
IP: 2a11:9a00::/29
Validation: Failed, certificate revoked on Mon 12 Jun 2023 09:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:55:3f:86:f2:82:61:ba:f0:26:d7:06:ce:02:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f94b73b4172fb31b76bb9f1467b36e5ab9a2edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:fa:06:69:ae:29:bc:ea:12:e7:24:d0:76:
68:e5:78:29:60:7b:29:de:03:a5:40:eb:35:b4:91:
f9:44:47:af:81:fb:69:7d:fb:ec:4e:97:1e:7c:3e:
df:4c:80:9c:e6:9f:1c:c9:56:3d:fe:09:73:d0:7b:
43:f2:eb:c8:40:76:d5:39:8a:c4:15:93:d7:51:86:
fe:25:32:42:9b:d7:04:e8:33:1e:c1:9d:22:a5:e8:
c8:83:68:73:ea:7c:fa:54:c5:71:3b:d7:f8:e9:64:
ca:4a:86:68:dc:0f:5d:9f:4a:1d:94:6c:ac:d1:d4:
dc:41:10:ac:61:bd:ea:85:58:12:db:c7:29:d0:e3:
2b:1d:9a:53:26:58:56:d2:f2:bf:4a:5a:2b:cc:b4:
06:56:27:13:b8:c6:69:50:88:e2:01:c5:53:2b:6a:
44:60:77:8c:ed:0b:76:94:1a:36:c6:9d:b5:1b:13:
0c:31:9a:79:fb:3e:7b:fb:1e:a3:4b:42:41:df:b8:
15:90:92:b6:6c:3b:4c:e3:9a:cc:e6:d6:57:ec:ad:
18:98:87:a3:b3:b4:7c:54:57:47:aa:df:15:ae:d4:
94:99:74:af:d2:c5:3a:c2:18:3a:cd:03:44:c3:66:
0a:44:86:97:ee:7e:cb:3b:b6:5b:13:0f:2d:65:bf:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:B7:3B:41:72:FB:31:B7:6B:B9:F1:46:7B:36:E5:AB:9A:2E:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/f5S3O0Fy-zG3a7nxRns25auaLt0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.130.0/24
IPv6:
2a11:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
61:e9:30:50:67:d4:f7:3f:d0:0c:62:a5:d0:a3:9e:1d:2a:9d:
6a:0a:6c:74:5c:05:9b:d1:ab:19:84:88:78:62:00:0e:20:b8:
b6:56:f5:3f:82:83:93:9d:fe:8d:c2:99:c2:96:fe:95:c5:58:
8c:11:07:18:e1:4b:6c:80:60:ea:56:d7:62:cc:6e:c3:50:82:
f8:34:45:7f:ad:27:e1:1e:f6:dc:2b:70:7a:e8:c3:ad:c8:ae:
b5:0a:3c:f9:18:25:67:6f:70:66:07:ed:17:93:64:3f:3a:b3:
3e:a6:9c:6c:b8:28:e1:2f:83:c8:77:01:e5:d3:82:8e:79:97:
11:6c:48:3e:3b:cc:a1:e7:4a:30:2f:8f:6c:b6:2a:49:ac:66:
c9:bf:d8:43:dd:de:99:fd:89:63:4e:2e:13:0c:39:3b:3e:b9:
74:0e:c1:71:0d:74:5b:12:13:bf:63:ee:c6:40:bb:64:ed:5c:
1e:0a:14:fa:ff:b3:ca:2b:1b:95:4e:c3:bf:db:bf:e7:38:cb:
95:d9:00:98:2d:50:75:f1:b3:1d:b7:1f:01:9e:39:01:da:55:
d5:2d:13:e1:b7:a6:73:12:8e:07:36:25:ea:81:b1:a5:bd:05:
a1:33:ce:44:b0:ef:1b:02:b1:48:de:c5:78:90:06:e2:24:f7:
39:77:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:54 2024 by rpki-client on console-ams.rpki-client.org