Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jtbrETp4kpAXt9CcLvF7F3QZlB4.cer
File: jtbrETp4kpAXt9CcLvF7F3QZlB4.cer (raw, json)
Hash identifier: 3zu1p1ALzZjnJqI1AW1oJ2St1A+az8ua4enRBsmzazA=
Subject key identifier: 8E:D6:EB:11:3A:78:92:90:17:B7:D0:9C:2E:F1:7B:17:74:19:94:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B78ADE154670DDE8C3EB4E5D196FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/bc801e-dcd6-40f4-ae79-de037ed612fa/1/jtbrETp4kpAXt9CcLvF7F3QZlB4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/bc801e-dcd6-40f4-ae79-de037ed612fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 88.151.10.0/24
IP: 2a11:5280::/29
Validation: Failed, certificate revoked on Fri 10 Nov 2023 16:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:78:ad:e1:54:67:0d:de:8c:3e:b4:e5:d1:96:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ed6eb113a78929017b7d09c2ef17b177419941e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:8d:1a:7c:3a:27:aa:fb:4a:e0:e0:4e:7a:
3f:87:4c:04:13:2d:4f:54:c9:2e:bb:51:13:5f:76:
0f:97:f2:06:49:5e:da:d2:79:c2:e4:ea:b5:d9:4e:
92:ba:a9:8e:8c:f4:08:76:9d:9d:5f:b4:31:7b:bf:
66:b1:6b:5a:1c:79:9d:d4:87:fb:9e:39:40:10:3b:
c4:66:86:06:0c:3d:07:e2:42:bb:64:68:fc:73:af:
d0:be:b4:d1:ad:ab:6d:3e:3a:2c:11:d1:51:11:29:
62:0a:0b:65:ed:bf:db:b0:5b:0e:a4:45:a9:ce:d5:
01:19:b0:dc:21:65:c2:aa:86:7d:13:a1:b4:25:79:
21:d0:9f:37:f0:b3:3e:fc:b6:8c:45:82:7b:02:9b:
48:d3:1e:c6:03:c5:a7:52:28:10:40:e9:da:df:49:
a4:73:a5:45:b7:3d:3d:fc:96:1f:09:9d:d0:42:c9:
08:5f:1b:42:e3:ce:68:47:9d:a2:b1:dd:1e:0a:a3:
cd:ea:20:16:2d:64:f5:40:2f:fc:da:69:e7:5f:1b:
9d:9f:2c:7c:e9:4c:bb:f6:12:ca:ae:b5:e9:c7:03:
a3:c8:af:c7:86:1d:91:c4:f2:c5:03:06:a7:24:91:
64:91:14:6a:30:ae:ff:d0:3b:a7:3d:8c:f5:cb:57:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D6:EB:11:3A:78:92:90:17:B7:D0:9C:2E:F1:7B:17:74:19:94:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bc801e-dcd6-40f4-ae79-de037ed612fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bc801e-dcd6-40f4-ae79-de037ed612fa/1/jtbrETp4kpAXt9CcLvF7F3QZlB4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.10.0/24
IPv6:
2a11:5280::/29
Signature Algorithm: sha256WithRSAEncryption
20:25:dd:4e:9a:be:6b:5a:44:d8:60:c5:b9:af:e0:07:fb:73:
b8:c6:c6:e0:cc:f4:37:6d:77:57:2e:93:02:e7:eb:db:47:26:
a5:ac:64:8a:ac:f2:db:14:5e:38:f4:04:fa:f7:1c:48:84:c3:
9e:c7:4e:28:c9:ed:b1:81:d7:a5:66:67:71:fd:a0:4e:ec:64:
d2:e9:ef:74:4c:45:07:1d:fe:a5:af:34:9d:74:c1:70:f2:6d:
c6:bf:0b:ae:a7:2b:f7:e0:ca:77:7c:4f:07:96:da:58:60:aa:
da:33:dd:0b:46:d1:74:b2:77:9d:01:6c:e8:ba:d0:e4:ca:00:
57:33:94:ac:5c:a4:9e:ca:b3:f1:c7:96:5e:27:62:c9:37:aa:
91:52:8d:f6:74:36:b8:b5:58:0e:7a:a2:13:10:23:08:20:4f:
1a:2c:68:db:b3:e9:a1:41:25:46:7a:4f:ed:95:b7:7c:51:f8:
5f:e2:4a:99:89:63:7f:f1:79:12:a6:d7:00:74:37:1b:2d:7e:
2f:1c:71:55:d5:eb:b0:da:f6:2b:ca:8f:2b:3f:22:6e:b4:da:
0a:a0:2b:31:1c:cf:f7:23:73:be:e5:04:47:d0:79:de:33:95:
9b:a3:0f:86:82:bf:13:bf:d0:e4:33:a1:c7:85:4c:8d:68:5e:
17:ca:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:53 2024 by rpki-client on console-fra.rpki-client.org