Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ihSfdtOUQVHwreTeeDHT1Cy26N8.cer
File: ihSfdtOUQVHwreTeeDHT1Cy26N8.cer (raw, json)
Hash identifier: ja3/ac7//E6lzCnvSNNONZUZ8hvcVZyyEa543S39xKk=
Subject key identifier: 8A:14:9F:76:D3:94:41:51:F0:AD:E4:DE:78:31:D3:D4:2C:B6:E8:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBAB1863F3445ED90ACFCBA8533912
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/ihSfdtOUQVHwreTeeDHT1Cy26N8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.213.138.0/24
IP: 2a12:8780::/29
Validation: Failed, certificate revoked on Mon 12 Feb 2024 15:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ab:18:63:f3:44:5e:d9:0a:cf:cb:a8:53:39:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a149f76d3944151f0ade4de7831d3d42cb6e8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:0f:5a:46:2c:68:70:01:81:1c:90:b7:ff:
14:8d:9d:31:7d:8f:86:c3:fd:ef:b2:3f:37:5a:f0:
cd:90:fd:b9:2a:e2:82:1d:cc:76:a1:1a:ff:62:65:
5b:bb:cb:4b:8c:a9:92:d4:74:da:4f:99:90:f1:cc:
c1:d2:ed:e0:61:f6:10:bb:87:7c:58:00:57:cc:c5:
a6:b7:35:87:53:e0:9e:b8:ec:bd:22:7f:c1:7a:92:
66:e0:bc:b1:e5:25:5f:16:49:05:b0:b3:9a:25:02:
a2:2c:fe:d0:64:38:05:64:b3:b9:24:21:56:32:0c:
77:33:4c:45:b1:b9:26:59:e9:4d:7a:f2:90:df:f0:
62:be:df:66:0f:43:ae:72:90:d6:3e:74:0d:90:d7:
a1:4c:8d:3f:1e:ad:36:61:87:20:53:02:5a:02:37:
7d:ea:cd:97:43:fc:d9:1a:0c:47:ad:85:51:c4:51:
dc:79:35:fd:82:0f:9c:52:aa:dd:a1:04:36:bc:00:
26:e4:be:82:bb:cc:f4:e0:c6:8d:50:c9:fa:25:da:
34:97:2f:20:3d:88:a6:29:6f:a7:16:e4:f4:92:4e:
ea:09:14:6f:dc:2e:32:16:6b:88:00:27:76:01:94:
a0:36:4e:d7:33:38:73:53:6e:55:34:e5:31:1f:da:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:14:9F:76:D3:94:41:51:F0:AD:E4:DE:78:31:D3:D4:2C:B6:E8:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/ihSfdtOUQVHwreTeeDHT1Cy26N8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.138.0/24
IPv6:
2a12:8780::/29
Signature Algorithm: sha256WithRSAEncryption
90:a8:61:e9:79:7a:76:92:4c:e2:a2:d1:4e:82:f9:c0:53:db:
73:de:22:93:fe:49:a0:e8:de:ef:a9:f3:84:85:94:25:6b:93:
ba:59:ba:4f:a1:94:80:a6:6c:36:da:d9:b0:f7:53:98:5a:7c:
56:43:de:33:d7:ad:5a:43:9c:1c:44:9f:ea:61:8f:f7:f3:ae:
70:82:b2:4e:fd:46:0c:7e:32:91:81:8d:c4:eb:93:87:22:49:
3a:23:7f:ac:5c:43:f8:0a:b2:fa:58:a0:1a:a7:c2:47:fc:13:
29:6d:fb:4f:dd:d5:bf:4e:46:a1:c4:35:c2:30:c5:b5:51:76:
82:54:0c:e1:93:e9:e7:36:2b:bc:9a:3e:26:69:b8:7d:39:e8:
77:da:a5:c4:61:80:eb:13:65:3f:01:d9:3c:0d:58:0d:2a:b3:
d1:29:c3:ad:4f:8e:db:cb:2b:6a:33:4f:10:bb:79:94:dd:7d:
db:a8:10:62:a6:5a:63:14:9a:bf:7d:70:fe:f1:05:68:b2:8d:
31:b5:be:2f:61:61:c1:1e:ce:c2:c0:57:76:ff:a0:c6:74:cd:
d4:a7:23:fe:aa:3d:7c:5a:f9:70:47:1a:7a:76:96:27:e5:b4:
4a:15:9a:8d:07:cb:2b:10:e8:f0:22:81:0e:6c:81:ea:d1:c3:
fc:01:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:43 2024 by rpki-client on console-fra.rpki-client.org