Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/giMTkMv-1D4j7QtE_9NBOYWaZXE.cer
File: giMTkMv-1D4j7QtE_9NBOYWaZXE.cer (raw, json)
Hash identifier: ubZITLY88iOpyCpVoLFvS23A3Qh4BDyr6rjCturL1aE=
Subject key identifier: 82:23:13:90:CB:FE:D4:3E:23:ED:0B:44:FF:D3:41:39:85:9A:65:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F41AF50E242203BAC02A41215059AAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/giMTkMv-1D4j7QtE_9NBOYWaZXE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.26.204.0/24
IP: 2a12:1800::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 08:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:af:50:e2:42:20:3b:ac:02:a4:12:15:05:9a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82231390cbfed43e23ed0b44ffd34139859a6571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:1d:30:3e:ea:a1:cf:69:a9:e1:f5:bf:25:
37:6e:64:c8:e7:fd:c9:17:b9:00:b2:0e:89:2c:f9:
93:72:38:22:eb:9a:70:24:0c:58:0f:ed:a0:f7:d3:
16:f8:c0:15:e7:08:c7:68:93:a3:67:d2:ad:23:f8:
7a:e1:be:b3:84:a3:f2:ed:e8:a0:72:e6:17:11:46:
4b:89:9f:45:c7:8b:24:dd:b5:6c:8a:cc:8a:fc:ec:
ca:6b:c7:61:41:e8:9e:0c:6d:89:ec:c5:65:a5:01:
65:16:cd:cd:0a:5f:ab:5d:c6:59:e0:eb:c8:db:3a:
df:81:56:b2:bc:a2:91:21:27:6e:e1:b6:8a:ee:e0:
2e:ad:da:5e:f6:26:0d:57:aa:02:c4:28:35:9e:42:
68:70:ad:fd:4e:24:68:ab:5d:25:b3:1d:14:f1:ba:
a2:a7:f0:57:04:d9:b4:71:82:4a:ea:52:b5:bb:54:
76:c5:bc:ed:16:20:3e:f6:9e:7b:47:04:3b:c0:29:
76:24:62:47:1f:e2:72:83:69:7e:29:04:e5:3e:9b:
ad:32:20:52:43:21:4a:b1:7e:cb:bc:d0:06:4e:d6:
2a:6a:86:e8:f6:b5:3a:95:ab:53:81:dd:a0:7c:41:
fb:52:ff:85:91:a1:d5:f4:80:32:0a:68:5d:33:57:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:23:13:90:CB:FE:D4:3E:23:ED:0B:44:FF:D3:41:39:85:9A:65:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/giMTkMv-1D4j7QtE_9NBOYWaZXE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.204.0/24
IPv6:
2a12:1800::/29
Signature Algorithm: sha256WithRSAEncryption
67:06:4b:b1:96:1c:02:40:68:9e:68:06:cf:51:a0:aa:ae:57:
2f:29:e5:4d:8c:dc:23:ee:6a:47:6d:23:c9:6c:c2:7b:0e:51:
43:d6:09:69:fb:42:6a:41:d9:08:66:ac:42:34:77:d2:4d:1d:
62:2b:95:e4:07:c7:9a:fd:78:82:85:c6:c7:d0:af:aa:98:7c:
d3:c4:eb:36:bc:88:c9:24:ee:95:c8:92:56:89:91:d1:c5:4f:
93:a7:d6:8b:56:ee:4b:2d:5d:8e:df:20:a6:55:ba:26:48:ef:
18:bf:3a:88:fd:18:9e:2d:18:ef:8e:13:af:b0:55:84:e2:87:
1f:0d:78:c8:56:de:cd:dd:11:ba:b8:09:53:86:e5:dd:4c:9d:
e0:1b:c8:cd:22:a7:60:13:b3:f2:30:63:54:4b:c1:35:dd:0c:
12:20:3d:9e:e9:56:56:a3:2e:46:83:a5:22:d3:81:3f:b3:36:
ec:42:37:70:fc:6b:1c:68:b0:26:9d:5f:92:80:c8:31:a0:4f:
5e:7c:9b:89:2a:29:97:64:28:7c:b6:36:a8:a7:6d:4a:1a:1a:
33:ed:c5:39:3a:88:bd:7b:e5:2c:55:d8:81:66:d7:ab:58:a9:
32:58:c0:af:02:ff:56:9b:9e:2b:1a:4c:1a:ae:7b:9f:d5:fa:
03:6d:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:27 2024 by rpki-client on console-fra.rpki-client.org