Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gpv6B56f-c8QJjHqmiwlNXbcK3k.cer
File: gpv6B56f-c8QJjHqmiwlNXbcK3k.cer (raw, json)
Hash identifier: 6L5b6uQvqiZYRIsZ08M/VK8JXoOfJDubaRlZ1mM1He0=
Subject key identifier: 82:9B:FA:07:9E:9F:F9:CF:10:26:31:EA:9A:2C:25:35:76:DC:2B:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAFDDE9303E434DBC4C779F7C387F83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/a4ae7b-6963-477b-a47f-e6abfea83043/1/gpv6B56f-c8QJjHqmiwlNXbcK3k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/a4ae7b-6963-477b-a47f-e6abfea83043/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.118.172.0/22
IP: 185.153.28.0/22
IP: 2a12:9240::/32
Validation: Failed, certificate revoked on Tue 07 Nov 2023 11:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:dd:e9:30:3e:43:4d:bc:4c:77:9f:7c:38:7f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=829bfa079e9ff9cf102631ea9a2c253576dc2b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:2d:03:f2:a4:74:4b:bb:b4:81:5b:cd:6d:
cf:11:09:a6:ee:68:80:8a:33:7b:70:b9:ba:fb:af:
0f:51:27:fa:e4:ae:f4:2a:e0:ec:22:5d:2d:6b:ad:
35:0a:cf:29:b5:fb:85:6b:c6:0c:52:29:e8:2b:08:
65:b2:4f:74:8e:eb:d7:b3:6c:f9:ab:65:05:cd:a2:
71:81:1d:e1:e1:b7:64:b0:39:be:99:e4:cb:dc:e9:
12:6f:dc:52:9a:a9:33:60:0a:5c:9b:76:5a:19:f5:
71:3f:42:aa:42:b4:d9:2c:dc:2c:6e:e1:82:da:3f:
32:56:e3:55:f9:94:3d:f7:23:e0:6e:46:9b:85:ba:
e6:3f:96:90:e7:98:c3:6a:05:44:da:75:38:c5:45:
88:c6:19:86:d0:30:19:a4:be:7a:dc:80:33:93:53:
39:f3:c9:aa:cf:01:98:ba:5a:7f:ff:2e:fb:89:64:
34:66:ab:39:29:45:ce:71:6a:a2:08:ef:cd:b4:f9:
e2:ac:4a:a4:ef:2d:04:a7:b8:be:e0:54:c2:04:d4:
b8:fc:a0:9e:7f:97:53:15:b6:4b:c8:dd:0a:e5:fe:
90:04:c1:3e:5b:fa:f8:02:49:4e:29:43:ef:12:b0:
28:ca:2d:59:06:ef:64:f4:69:46:47:ae:49:6d:49:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9B:FA:07:9E:9F:F9:CF:10:26:31:EA:9A:2C:25:35:76:DC:2B:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a4ae7b-6963-477b-a47f-e6abfea83043/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a4ae7b-6963-477b-a47f-e6abfea83043/1/gpv6B56f-c8QJjHqmiwlNXbcK3k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.172.0/22
185.153.28.0/22
IPv6:
2a12:9240::/32
Signature Algorithm: sha256WithRSAEncryption
88:99:7a:02:02:21:cc:9b:fd:8c:7d:88:a6:a5:9c:7d:7d:08:
b5:ac:82:7d:c3:4c:99:16:0a:53:bf:b8:0a:b7:37:08:6b:10:
ff:0e:92:93:86:f3:59:88:5f:4e:ec:2f:b0:f7:bb:32:af:02:
7e:f5:65:99:d0:58:16:bb:a3:c0:74:14:2c:78:b0:2a:ab:37:
e3:ac:b3:f6:4b:9e:9b:51:52:b6:b7:3c:fe:3e:3a:8c:8f:97:
eb:96:df:b5:f2:cb:c2:f2:48:bb:bf:ee:14:9b:63:a5:41:a6:
35:ca:28:c4:27:09:4d:f4:87:9a:75:6c:f5:7f:4c:82:a9:4c:
26:8b:cd:0c:b4:f6:1f:c4:14:78:d6:04:aa:b3:53:56:78:ce:
0f:56:02:39:a8:61:8d:7d:d7:b0:af:2f:02:3e:98:00:8d:ed:
69:c9:37:87:f5:77:46:a7:71:e0:b8:07:d8:78:b2:f1:eb:50:
b4:cc:3c:c8:60:e6:1e:be:83:8c:61:21:c9:89:ea:c9:f5:bc:
ef:2a:ee:07:d8:d7:3c:01:ab:10:8b:b1:bd:e1:50:f1:87:dc:
3d:35:79:76:df:8e:9e:c2:99:ea:9f:a0:8b:ba:97:c6:95:0f:
49:83:52:bf:da:9d:bd:2a:56:bc:b3:06:9c:de:5b:57:f1:5f:
51:d3:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:08 2024 by rpki-client on console-ams.rpki-client.org