Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hfWcGyUHeRRr5G992NJ1qy0IoqE.cer
File: hfWcGyUHeRRr5G992NJ1qy0IoqE.cer (raw, json)
Hash identifier: FSUw22y6h1qprE6TKYNfZaSymhMqlRvrh5WfCD6fKog=
Subject key identifier: 85:F5:9C:1B:25:07:79:14:6B:E4:6F:7D:D8:D2:75:AB:2D:08:A2:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFB37D7464041B693BC8C5713B91390
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/hfWcGyUHeRRr5G992NJ1qy0IoqE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.72.0/24
IP: 2a12:7f00::/29
Validation: Failed, certificate revoked on Tue 14 Nov 2023 08:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:37:d7:46:40:41:b6:93:bc:8c:57:13:b9:13:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85f59c1b250779146be46f7dd8d275ab2d08a2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:73:6d:1a:f4:51:7e:9f:78:53:5b:3b:cb:
8e:1f:f5:4d:c7:15:f2:dd:1b:8b:2f:52:b2:65:cd:
68:6a:4f:7c:88:86:6a:c2:13:4c:37:03:e5:77:da:
41:5f:92:03:1b:0f:ef:cb:f0:6a:89:f5:43:07:d3:
88:ab:3b:d0:7b:d3:b3:8f:a5:35:c9:b5:cd:88:52:
35:a3:5d:75:a1:06:8a:fe:1e:ea:ad:28:83:ca:d2:
68:02:d2:21:c5:ba:aa:79:2c:fe:e3:9a:37:3b:d2:
ab:29:44:26:c8:9f:84:81:ea:ba:05:8b:6c:c2:d0:
dd:9a:31:71:cc:90:e6:01:9e:c1:ec:40:22:e1:52:
85:96:af:f9:5c:f4:9d:a7:52:bd:73:d1:ec:65:2f:
e5:3d:bc:73:2f:1c:db:15:73:f2:90:d3:c7:16:5b:
c0:c5:56:f8:c1:d0:c4:6f:d7:6f:03:f0:e0:3a:24:
9f:84:5d:6d:b1:fa:ff:2a:82:4e:02:d4:81:6c:a1:
64:98:97:db:44:24:1a:59:0c:69:61:5e:eb:f4:ee:
ec:27:8c:ea:6b:e1:d4:a4:79:53:fd:52:9a:d3:98:
e1:62:df:03:ad:08:d6:f4:a4:c3:65:47:b3:95:67:
fd:0b:63:7e:88:43:25:07:e3:b0:10:42:4d:e1:29:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F5:9C:1B:25:07:79:14:6B:E4:6F:7D:D8:D2:75:AB:2D:08:A2:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/hfWcGyUHeRRr5G992NJ1qy0IoqE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.72.0/24
IPv6:
2a12:7f00::/29
Signature Algorithm: sha256WithRSAEncryption
1d:c3:52:a0:c6:a5:c4:21:57:0a:42:47:79:e1:47:ad:24:b3:
da:55:98:b9:72:bd:49:75:a5:e8:90:f2:e7:25:b0:d6:b0:66:
8e:d1:34:c6:f2:84:a9:c0:9d:41:8c:fe:be:06:eb:ef:ad:fb:
1c:58:80:3c:e7:dd:1c:78:cb:09:13:da:67:95:fc:92:af:72:
aa:3e:56:59:cf:f1:cb:08:5e:0f:eb:23:8d:17:d1:67:ad:fb:
12:fd:5c:35:b8:5f:0f:e2:6e:48:ab:e8:8d:a6:8a:10:98:4f:
70:16:08:3d:50:4e:ad:f5:b4:77:8a:b1:8b:95:e2:49:8a:97:
85:7c:6b:84:b3:b7:b5:22:e4:79:e8:c3:b8:0f:d4:e5:bb:21:
48:de:2c:2a:9e:c0:77:0b:3d:95:21:3f:32:a6:77:88:17:dc:
67:46:2a:de:45:70:67:b8:b4:a4:bb:bb:00:32:63:b0:50:c8:
ef:21:db:ba:69:f4:1b:c3:cd:e2:91:fc:3f:ef:02:78:58:a0:
56:45:e9:5c:a8:ae:3b:b5:64:f8:0f:20:5a:8a:fc:ce:bd:3c:
01:0a:da:f3:1b:9e:2c:58:25:eb:cc:11:c8:02:01:46:89:fd:
3d:ab:b2:96:89:24:83:29:a1:1c:8c:51:28:e6:36:47:a3:96:
a9:03:fd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:19 2024 by rpki-client on console-ams.rpki-client.org