Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
File: hz7BW5jibospu33PSmBSys5tJoM.cer (raw, json)
Hash identifier: Tl70A/rFk7ZhbZp7oZIuJr5yMxv8r+zPq14X4BmRWWg=
Subject key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A78374AA50C2D6F5B019D007FBCD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.53.147.0/24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 13:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:78:37:4a:a5:0c:2d:6f:5b:01:9d:00:7f:bc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:ac:c3:1f:ea:09:f7:63:b6:77:d1:32:89:
0a:e4:7f:27:da:fa:59:44:94:16:e5:2d:3c:b9:df:
4c:42:33:d1:28:46:d0:58:8d:4d:a2:10:fd:c9:cd:
a4:a7:2f:e8:8f:5a:7b:2e:78:8c:63:49:22:32:3c:
7c:ec:ef:03:7e:64:7e:aa:59:3a:4e:14:98:c8:d0:
ea:54:2e:8c:c8:36:ac:f3:29:27:67:e4:97:cf:02:
5c:2c:1b:bf:6f:df:c1:fe:95:08:e2:6f:ab:29:38:
4b:11:f9:63:bd:e3:8a:a2:31:0a:c5:84:12:d8:60:
c4:90:cb:f2:40:dd:1d:7d:cf:8a:e2:53:0d:69:26:
ef:bd:11:e4:a2:e9:be:c2:8b:7a:43:61:c2:b1:99:
5f:d8:0c:60:67:0c:8d:b6:eb:66:de:fc:b6:dd:35:
fa:99:cb:22:58:0c:e3:8f:96:49:b2:20:35:be:5d:
16:45:35:14:c3:52:7a:bf:22:bb:9d:b9:69:cf:e4:
63:95:95:c3:eb:8e:58:44:73:78:aa:d1:93:1b:16:
db:c9:08:df:b3:66:99:0b:3f:fe:96:a9:18:c2:57:
c2:90:05:78:7c:40:2a:2d:28:c7:f5:75:bc:1c:80:
d5:8e:b6:a0:51:f8:f8:f8:10:46:fa:b1:d4:f1:58:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0f:0c:d9:31:5f:5d:6f:4c:af:ec:4f:cb:26:c2:54:9e:ac:
ad:c5:01:2c:a8:d1:26:8f:9e:14:58:4b:f2:2b:1d:11:51:5f:
8e:3f:7e:76:fd:38:20:35:d2:d2:f9:57:99:3d:cd:f8:1c:dd:
08:cb:9e:04:2d:bb:97:62:c4:6a:f6:2a:11:b2:7b:43:75:8c:
d4:71:f5:8e:21:37:e0:1e:34:99:66:34:4c:54:97:1f:1b:88:
e7:6b:ab:96:ee:46:b0:74:9a:bc:7e:48:a4:77:b1:78:fc:b0:
15:99:48:1d:58:91:48:3a:3b:39:3a:58:4e:7e:5e:59:8f:1f:
8a:29:e4:90:2c:03:51:f0:83:3d:38:ef:06:10:c3:80:df:7f:
23:5c:71:c1:2f:6b:47:a0:b8:89:a2:cf:ed:5c:7a:8f:eb:ef:
c1:c0:69:91:ca:da:c3:be:29:30:90:55:fb:0b:ee:43:54:96:
a0:3c:b2:ac:b1:99:db:c2:17:d4:0c:74:86:ea:a7:25:93:4b:
cc:64:05:de:67:93:f2:5b:b4:80:94:e9:70:4b:da:ba:cd:a6:
11:5a:68:b8:3f:3d:77:fb:0f:f5:23:91:8d:2f:f5:5a:ed:38:
c6:e1:ef:dd:b1:4a:fe:8e:72:bb:6a:72:23:9e:9d:8e:98:d1:
a5:be:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:22 2024 by rpki-client on console-ams.rpki-client.org