Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i3dX2RZfCCEijHQq2ns_tqMiP1g.cer
File: i3dX2RZfCCEijHQq2ns_tqMiP1g.cer (raw, json)
Hash identifier: ZF7Be0IdKXwISSUkRvOqGcVHzL929fwUPnL0K12987U=
Subject key identifier: 8B:77:57:D9:16:5F:08:21:22:8C:74:2A:DA:7B:3F:B6:A3:22:3F:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E00C55983025F84C464A4043E10E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/d679cd-4b00-4fbd-82f4-b28dc2b6a46b/1/i3dX2RZfCCEijHQq2ns_tqMiP1g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/d679cd-4b00-4fbd-82f4-b28dc2b6a46b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.56.35.0/24
IP: 2a11:bf80::/29
Validation: Failed, certificate revoked on Mon 04 Sep 2023 06:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:00:c5:59:83:02:5f:84:c4:64:a4:04:3e:10:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b7757d9165f0821228c742ada7b3fb6a3223f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:41:d7:b7:4d:74:99:60:f8:be:4d:54:8b:
a6:53:4d:21:c9:7e:0d:33:ce:01:ac:3c:fd:c6:7e:
c9:5a:51:5c:87:5d:aa:4d:e6:b4:3d:64:da:cf:b0:
06:0d:07:b2:ef:6f:da:31:56:0a:d2:1d:1d:2c:75:
f4:b8:54:e3:f9:2b:49:9e:04:6b:71:93:b3:b0:84:
c2:74:47:78:e7:ab:ab:e0:f0:38:4f:14:df:97:10:
36:59:84:9a:ac:22:59:5f:b1:65:20:e8:46:33:0d:
a7:eb:73:91:ff:dc:39:99:b5:28:b0:1a:81:4f:fd:
30:24:58:ec:a8:39:de:38:93:62:2e:ce:d6:04:90:
8f:44:54:e1:ba:8f:cb:37:cf:73:80:b0:b5:86:0f:
5d:96:14:7e:ed:80:e1:95:fa:ad:31:17:55:3a:dd:
7e:62:bd:ee:23:ee:28:2c:10:ca:36:a0:75:07:b3:
67:e5:2d:e6:8b:e4:1b:c7:0b:06:f6:03:b6:a9:2a:
d8:ee:80:b9:bd:b1:a1:1c:7e:e7:7b:9c:4e:46:e8:
d6:f2:db:92:06:34:1a:9a:1f:fe:8a:17:c2:3c:f1:
ab:a1:7d:25:61:30:7a:6f:45:02:bc:e7:9d:8b:bc:
90:bd:78:87:2e:88:b8:8c:3a:e1:23:ab:ff:0e:78:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:77:57:D9:16:5F:08:21:22:8C:74:2A:DA:7B:3F:B6:A3:22:3F:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d679cd-4b00-4fbd-82f4-b28dc2b6a46b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d679cd-4b00-4fbd-82f4-b28dc2b6a46b/1/i3dX2RZfCCEijHQq2ns_tqMiP1g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.35.0/24
IPv6:
2a11:bf80::/29
Signature Algorithm: sha256WithRSAEncryption
06:4d:e2:55:c3:20:8d:a6:c1:91:d8:24:4e:96:1b:05:e3:89:
f5:3c:e8:d8:2a:03:be:a0:02:23:b7:93:f3:5b:2e:04:e5:ec:
8a:80:a1:0d:03:9c:7a:15:53:40:80:56:04:05:5c:3a:14:b2:
14:78:bf:aa:ca:af:5e:23:31:8c:c8:05:bb:63:4c:72:81:4b:
6c:07:89:62:29:ff:17:47:21:79:f7:93:49:67:7b:31:70:7b:
e3:7e:87:fd:7c:3d:f1:1e:25:48:2b:f8:79:8a:17:1c:9a:d1:
b7:04:6c:36:79:2c:7f:50:95:6b:4e:92:d2:85:6e:6f:6c:db:
23:a9:a8:3c:0d:a8:91:42:8c:29:f2:75:bc:c0:fe:6b:ac:9c:
42:a8:e9:8d:0e:1c:5c:21:84:85:2b:f3:75:02:4d:85:ee:8d:
b4:60:5b:d7:db:a7:46:d2:f5:bc:fb:fd:50:fa:df:0a:b2:57:
a6:b3:9c:6f:e5:ba:ed:76:4a:4d:4a:63:20:a8:14:9b:5b:6d:
80:cb:2d:dd:a0:7b:37:9e:0f:2b:ac:00:e6:ed:59:f3:db:ef:
4d:de:85:46:a7:70:4e:8f:25:4d:3b:81:bb:4f:04:78:76:81:
9f:e8:54:ae:8f:e9:55:4c:c0:07:b3:be:1d:1e:23:68:88:da:
46:9e:d8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:23 2024 by rpki-client on console-ams.rpki-client.org