Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iphVmbI9Ql0mfFoudWYJ85W2kjY.cer
File: iphVmbI9Ql0mfFoudWYJ85W2kjY.cer (raw, json)
Hash identifier: Hl4H4O9EtHHMaEubwzFPjZmUgjp68ss+L9qcrQEvHnA=
Subject key identifier: 8A:98:55:99:B2:3D:42:5D:26:7C:5A:2E:75:66:09:F3:95:B6:92:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CACBD12ACC5D88D5AF2E17026D4681E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/iphVmbI9Ql0mfFoudWYJ85W2kjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:18 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.86.36.0/24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 07:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ac:bd:12:ac:c5:d8:8d:5a:f2:e1:70:26:d4:68:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a985599b23d425d267c5a2e756609f395b69236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:55:26:3a:99:76:70:d0:b9:0d:6d:b8:d4:
6b:88:e7:59:52:19:73:34:02:f9:68:40:46:53:a9:
81:d1:84:c4:b9:35:2c:c2:ba:82:4c:4e:38:d5:9f:
d0:c0:a0:d7:74:cc:e0:f0:c3:bc:9c:b2:f8:f4:ec:
21:33:ce:15:92:aa:11:31:9a:59:2a:7f:55:0f:6e:
aa:b1:05:92:6d:0e:65:79:db:9e:a3:48:10:78:80:
4a:44:12:df:65:23:a0:76:ff:cf:d0:df:50:07:74:
04:d4:0b:31:6c:12:20:84:f4:96:01:70:50:88:1e:
97:08:31:80:15:4c:a8:f4:78:84:21:9c:a9:94:be:
67:ab:3c:2d:cb:cc:62:5e:fe:66:2d:a7:c9:4b:ea:
0c:12:bf:bb:8f:c9:f3:67:3f:14:ad:9f:b5:7b:c1:
35:81:e4:20:84:22:bf:f2:71:08:8d:19:20:b3:90:
9f:33:42:fe:17:09:29:4d:e7:8e:42:7e:34:50:b3:
2f:6f:e1:42:bc:01:2e:be:55:45:da:7b:31:26:ce:
be:e9:86:31:42:35:f6:f6:f1:80:29:b7:61:c5:c2:
8d:6b:4c:8a:3d:a3:57:2b:1a:6e:33:b2:37:f6:d4:
76:28:b4:af:86:c6:57:0a:34:08:a2:db:b6:17:60:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:55:99:B2:3D:42:5D:26:7C:5A:2E:75:66:09:F3:95:B6:92:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/iphVmbI9Ql0mfFoudWYJ85W2kjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.36.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:2a:ba:8d:52:45:37:2b:03:6d:bd:2b:87:5f:34:c2:6b:4a:
4f:8a:16:ae:1f:71:6a:18:69:06:40:db:f7:c2:39:5b:71:e6:
1d:e3:92:43:0c:fb:d2:32:e7:32:0e:8e:e4:e4:48:8d:5c:04:
64:be:5f:d3:9a:28:02:69:1e:ac:0c:82:5c:8e:23:e3:57:75:
e3:90:5b:ef:d1:11:0a:e3:e7:c1:90:a7:61:26:b4:f3:e5:de:
ce:ce:23:ba:0f:d1:df:c7:9a:40:2d:2b:6f:7f:d4:2a:05:0a:
3c:ad:3d:27:3f:00:c5:cd:ae:77:3d:82:63:24:d9:78:c6:70:
2a:99:71:66:21:3c:90:a7:07:0b:18:6b:cd:2f:12:ae:2d:8d:
9b:44:2e:39:05:6c:f0:b7:e2:2f:37:2c:e6:b1:ed:2a:be:c1:
0c:95:22:a2:22:8c:31:fe:07:0b:a6:e4:59:7a:93:3f:1b:5b:
a6:9a:f3:d7:7a:a7:df:67:95:48:14:1e:65:8c:cb:f6:f8:8b:
1b:61:d3:8f:43:24:8c:bb:42:34:c1:0e:c1:7c:36:05:8e:f8:
8b:f3:60:03:07:3a:79:1f:3a:7a:2a:6c:7c:72:50:62:11:17:
f2:10:75:02:93:e9:54:37:c7:6f:17:8a:29:d7:55:1d:2c:08:
9a:b0:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:44 2024 by rpki-client on console-fra.rpki-client.org