Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
File: jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer (raw, json)
Hash identifier: 2Ef+3oY2GFLSfeIINaKRu8meAHWaxj0LSSeO/kWpJPA=
Subject key identifier: 8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D59A961B369BF62104F95BE6DE3334
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 178.212.76.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d5:9a:96:1b:36:9b:f6:21:04:f9:5b:e6:de:33:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:e6:d7:76:27:13:e2:d7:cf:2d:c4:23:f8:
78:91:ec:8c:86:9b:07:20:8b:e9:6b:96:50:27:16:
1a:7c:d8:00:c5:d8:29:56:01:e0:88:23:25:fe:73:
57:f0:b8:aa:60:d6:53:18:65:db:d1:89:07:47:f4:
65:43:f6:90:a0:44:ce:f3:6d:ab:d4:cd:58:a3:47:
59:83:1a:b9:9d:cc:56:cc:fa:7e:bc:d6:06:9a:63:
c1:fe:22:b8:4a:34:17:1f:78:a2:3b:1b:88:11:0f:
1d:0b:af:6e:35:85:cc:ae:3b:d9:aa:39:d2:64:9e:
df:16:c7:63:4a:90:ac:af:a5:ff:ea:cf:ca:ca:2f:
f0:55:50:7e:ef:35:92:d5:cb:ee:d7:47:db:72:75:
ae:f1:7a:58:c4:8e:bc:e2:90:b2:e6:3e:37:bc:92:
ef:7d:a0:ca:19:a2:93:fa:4d:f4:99:18:5c:36:27:
3c:16:ed:d1:ca:4e:8e:b7:27:95:a1:c8:c6:50:b5:
62:e8:0b:53:d6:1e:f4:b1:a6:21:b0:79:f9:a4:e6:
3d:51:65:e3:d5:3b:51:70:cf:43:58:f7:dc:2b:a4:
0d:e6:55:05:f4:76:78:0b:8f:c7:d0:d6:c8:c3:d6:
4f:51:3e:db:04:13:bb:88:3b:a4:b1:ae:f1:31:a1:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0e:d9:cc:bc:b0:b9:f1:46:35:8c:c8:f0:74:47:8b:07:2e:
b3:71:2f:99:15:06:ba:a9:f9:ea:5d:3d:85:87:88:51:68:12:
a4:a5:4f:fb:5d:d0:a8:ef:95:31:eb:89:05:15:a2:5c:08:45:
2c:10:ba:fa:fe:f8:b8:a2:ca:68:ee:84:12:f6:a3:fe:43:bd:
4f:50:85:6b:8b:ed:27:23:8a:34:b9:ff:f5:d6:3e:b6:70:8c:
46:5c:8c:0c:dc:7c:48:9a:e0:c6:81:c5:bc:9c:be:a3:1f:56:
d8:0c:8d:2e:ad:92:ea:1b:a9:25:03:32:39:39:81:6b:a5:2f:
45:10:cb:5c:d7:51:c3:f2:b3:4b:b6:9b:c1:7f:48:0d:a0:be:
bb:34:14:38:44:59:e5:48:d4:7e:eb:7f:fb:10:b2:db:95:93:
46:0b:b2:b9:64:77:44:88:e7:5c:97:23:2b:3f:bf:8f:9b:c5:
6e:f4:cd:08:d5:01:81:af:b1:a9:10:69:94:ed:13:0b:c8:99:
c2:eb:e3:18:d9:3f:1c:40:d2:b3:3a:09:fc:59:de:ec:6f:e3:
e5:fe:cd:ee:c2:92:c5:da:1c:ad:6d:c3:9d:4a:0e:72:5a:df:
81:66:8f:a1:3a:1c:cf:83:34:e8:69:6f:85:6c:3b:de:4e:76:
d6:1f:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 11:58:06 2023 by rpki-client on console-fra.rpki-client.org