Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jf6pd9sJ8EpEOZNI57FE-Rayfz8.cer
File: jf6pd9sJ8EpEOZNI57FE-Rayfz8.cer (raw, json)
Hash identifier: mT/JVKuFrCdjfHODCOT/RBpZm/VSqEA6ePrrenhETKQ=
Subject key identifier: 8D:FE:A9:77:DB:09:F0:4A:44:39:93:48:E7:B1:44:F9:16:B2:7F:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F4157EBCD71A98134701E6EF1661543
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/36e3d4-a717-4c0b-8f77-6d6d11114603/1/jf6pd9sJ8EpEOZNI57FE-Rayfz8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/36e3d4-a717-4c0b-8f77-6d6d11114603/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:33:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.143.0/24
IP: 2a12:c700::/29
Validation: Failed, certificate revoked on Fri 17 Nov 2023 10:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:57:eb:cd:71:a9:81:34:70:1e:6e:f1:66:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:33:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dfea977db09f04a44399348e7b144f916b27f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:14:04:51:ae:74:6e:e9:12:e4:5f:5d:16:
c2:27:e2:a8:3c:9d:5f:3c:16:03:91:d7:de:01:01:
25:07:81:29:d4:a7:90:78:1f:1c:94:c4:c1:f6:ed:
20:8d:27:9b:f3:ec:3a:b5:d4:26:ee:a4:e8:00:d5:
a7:b8:9a:2f:76:d8:ec:78:70:7c:59:a4:1e:50:f6:
4c:91:cb:00:62:82:ac:ff:81:ce:c1:97:98:a2:7c:
ba:d7:f8:6b:46:c8:9d:c5:1f:36:4b:04:56:83:5d:
a0:aa:a4:be:97:31:82:2c:ba:1a:5e:2c:04:de:9b:
c9:64:e8:a5:9d:35:7f:c4:a2:ed:9a:32:80:a8:13:
93:f5:3e:6d:85:92:e8:67:77:0a:b2:e4:40:f5:1c:
94:cc:ca:a9:9d:60:fa:bc:72:9b:bd:76:42:73:94:
6d:fe:48:7b:47:77:9d:6c:ee:91:29:9d:2e:60:20:
b5:33:80:55:97:18:a0:d6:be:91:56:28:85:e5:23:
18:16:82:cc:1e:c8:9e:9f:bb:02:5b:96:8b:4f:ad:
b7:69:2e:11:45:4b:f2:ca:ec:21:21:2c:2e:68:29:
07:1d:b6:4e:7f:2a:66:b5:f0:49:be:79:7e:71:40:
6c:25:93:10:8b:a6:e8:17:59:30:a4:91:c4:4d:81:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FE:A9:77:DB:09:F0:4A:44:39:93:48:E7:B1:44:F9:16:B2:7F:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e3d4-a717-4c0b-8f77-6d6d11114603/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e3d4-a717-4c0b-8f77-6d6d11114603/1/jf6pd9sJ8EpEOZNI57FE-Rayfz8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.143.0/24
IPv6:
2a12:c700::/29
Signature Algorithm: sha256WithRSAEncryption
63:be:d2:39:01:6d:10:14:f7:00:4a:6d:8c:d1:d7:1c:91:c2:
f1:f0:ae:6b:0d:31:dc:c1:0f:08:4b:d4:18:ea:ce:6b:88:4e:
b2:d5:7f:72:d6:c9:9f:04:d0:62:70:c4:4d:cf:b3:f2:43:be:
e1:da:a0:fb:40:cf:23:47:b8:de:a2:dc:b1:e9:cf:e2:fe:08:
98:bd:fa:36:cb:b1:3e:f0:ea:0a:2f:c2:7a:8d:00:af:25:e2:
aa:7a:24:89:8b:60:71:5d:ce:8c:bd:81:42:74:72:4b:dc:56:
05:fa:d5:e0:03:52:23:eb:99:a2:81:ef:36:2e:b8:01:c6:d9:
99:94:cc:00:35:9e:18:90:0b:30:bc:83:70:52:f0:e0:bc:85:
6d:b6:05:d2:33:af:9f:67:2a:2c:34:4b:a3:2d:e4:9e:2e:2f:
4a:eb:c4:a7:1f:50:05:25:b7:9b:8d:f4:79:00:a2:04:46:a7:
30:a4:c1:92:c0:9a:3e:1c:1b:92:a2:b1:f3:28:36:85:44:a6:
c2:1d:5e:8f:e0:1c:c8:a9:5f:56:c5:de:6d:cb:d4:2a:4a:c3:
d5:43:74:62:bc:43:73:43:46:60:e4:e3:12:14:e2:b9:86:f8:
aa:6f:f9:34:c9:03:7b:de:76:df:d2:e0:d2:4c:a1:ce:ae:b2:
94:75:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:51 2024 by rpki-client on console-fra.rpki-client.org