Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer
File: hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer (raw, json)
Hash identifier: 5Aie6GtUwob1HkyION8//oazZ2uyJ6A5fmewQ1xix6I=
Subject key identifier: 84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED3EC07FBEEB12AE1507BD4BE0D3971
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/hGoboC5DkGbvV5AQ6jCAVKyL-d8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.28.0/24
IP: 2a12:2f00::/29
Validation: Failed, certificate revoked on Tue 21 Nov 2023 14:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:ec:07:fb:ee:b1:2a:e1:50:7b:d4:be:0d:39:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=846a1ba02e439066ef579010ea308054ac8bf9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:21:7d:68:25:7d:2d:6b:0a:e9:07:50:a0:
1f:51:df:bc:04:4e:e9:83:e8:a7:e8:8d:40:6b:f1:
5f:20:ca:65:fa:bd:3e:64:48:25:e1:ff:ab:2b:87:
8f:d5:b6:b6:81:b3:23:c2:3e:ab:58:f3:7f:5e:71:
10:ef:15:9d:8b:b6:5d:ff:15:79:1d:cc:7d:36:97:
d3:3f:c6:0b:05:e9:19:2c:37:40:83:c5:6a:fb:71:
58:b4:f7:d3:32:97:63:82:0e:9f:c6:c4:96:90:8e:
23:01:7e:b3:36:19:b8:04:24:0f:c9:fa:d1:1e:9c:
3f:ce:b4:65:dc:95:38:88:38:8a:44:55:f7:a6:42:
7c:bc:c6:9e:38:1b:27:a5:fe:58:4b:65:4f:4a:1a:
08:2a:77:e0:af:b4:66:d0:23:ab:03:a4:8d:b7:c2:
f7:de:55:92:c4:fb:aa:f9:6d:ca:31:56:fc:b2:f7:
e4:66:90:56:4c:09:b8:0f:a2:06:cf:60:38:a9:a5:
dc:49:0a:ae:ee:e0:72:e8:75:a6:b4:fc:62:2f:65:
25:26:82:06:aa:e6:20:7c:3f:1e:81:f4:39:4a:43:
a6:1a:df:6d:5a:f1:38:4a:5c:24:21:43:6c:5b:65:
4f:b8:20:fb:15:ef:ee:8e:f3:8c:22:ab:a0:30:19:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/hGoboC5DkGbvV5AQ6jCAVKyL-d8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.28.0/24
IPv6:
2a12:2f00::/29
Signature Algorithm: sha256WithRSAEncryption
b0:3f:a6:4e:ff:84:7a:ff:70:87:1b:5b:d9:cf:0b:28:2b:98:
b4:40:f0:29:ff:9f:f1:0a:33:78:53:dc:46:94:6e:1e:b9:85:
a7:90:22:d7:c8:70:31:3e:2c:0b:a7:9f:d0:37:ec:1d:ff:50:
92:ef:02:21:12:d5:de:dc:bc:1e:4b:6f:e7:27:87:7b:91:55:
3c:a0:7f:6c:e5:62:0c:65:48:b4:51:97:33:c7:17:da:2a:38:
ba:1e:99:24:e4:33:b9:c8:be:67:4a:76:1e:6a:4d:a5:9d:af:
d6:b5:b6:ec:53:30:e6:ca:65:b9:4e:82:40:a2:6f:22:6b:9c:
c3:18:99:38:85:6e:20:42:73:b9:ed:4a:36:d8:29:d6:20:44:
84:39:ed:45:ff:37:07:96:90:02:7d:39:71:c5:8c:fc:d4:11:
73:0a:aa:1d:f4:6d:f8:ad:54:99:34:d0:75:0e:7f:89:b3:44:
84:10:23:91:03:6b:a4:0e:a8:eb:70:b0:a6:e4:77:ee:e0:65:
e3:30:18:f8:88:fb:19:35:5a:66:f4:3f:f0:82:c8:26:cb:e5:
cc:80:6a:10:84:56:42:61:57:3c:60:8e:eb:b1:c1:2e:38:a9:
31:5c:15:93:4e:17:b0:17:67:52:a6:28:77:d2:a3:90:2b:c5:
4f:6d:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:15 2024 by rpki-client on console-ams.rpki-client.org