Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
File: lH5GdlRWWN4JqnePiwDppP2g0A8.cer (raw, json)
Hash identifier: DzXHz81H3RztODPiqLVV+CYL6THWDCfwmOZj1q8U9iE=
Subject key identifier: 94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B784DAE625ACC9A2C4C4E80D7B9333
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.93.249.0/24
IP: 2a12:7880::/29
Validation: Failed, certificate revoked on Thu 08 Feb 2024 10:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:84:da:e6:25:ac:c9:a2:c4:c4:e8:0d:7b:93:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:62:05:88:d9:33:31:1d:50:df:44:28:a6:
36:90:21:ca:85:3e:92:fa:35:82:22:35:64:7f:49:
c1:8c:60:1c:94:8c:32:6f:29:aa:6b:b1:ae:9b:ea:
75:1c:dd:56:98:82:05:5e:23:ae:e0:f4:dd:4a:fd:
83:18:c8:d1:7b:a5:08:25:fa:4d:0d:d9:aa:e3:44:
4d:e3:f4:ed:bf:03:d3:9e:b1:f4:81:ed:1b:64:20:
92:16:d9:fc:bc:c5:a3:ba:83:4d:58:66:e6:ac:21:
09:af:ee:f7:df:34:4e:26:fc:1f:7b:ec:db:5a:f6:
84:41:b8:ee:f2:a3:07:75:7e:41:ef:e8:3f:7b:38:
68:2f:7d:4b:02:8f:1a:3a:7e:67:92:54:e4:ec:4a:
9e:f0:e5:96:a4:d4:cf:24:93:58:75:37:e6:da:b1:
86:cb:d9:2a:87:c2:71:35:4d:c2:05:e5:ef:41:75:
17:ce:86:21:8c:9c:a7:bd:53:de:17:5c:1f:9e:e7:
e3:1b:42:e5:b4:79:41:8a:b0:bb:7d:74:b4:66:6e:
6f:8b:61:66:49:d6:e9:79:1e:84:b2:9d:0e:52:e6:
8c:60:a7:b6:03:27:d7:0d:2f:a7:54:0a:61:8f:f3:
5d:24:7d:ec:21:c0:c2:c5:b9:ff:f7:b1:85:a7:76:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.249.0/24
IPv6:
2a12:7880::/29
Signature Algorithm: sha256WithRSAEncryption
47:73:6e:6d:13:d3:4d:e1:9d:30:bf:0b:70:59:1b:ea:dd:b3:
bd:60:51:b8:d2:38:34:35:d1:f0:f5:0c:77:fe:9b:9d:90:e9:
be:aa:e1:e3:13:ff:08:af:20:42:c9:0c:e1:cf:c5:ae:13:9d:
ca:99:88:5b:06:ac:a8:b7:29:92:ea:ee:ed:78:f0:9b:89:c1:
71:18:df:8f:92:a1:00:22:f4:c4:0f:c0:0d:bb:ee:47:f9:f0:
47:d3:05:2c:d9:e9:30:4f:b0:8c:8c:e8:01:73:0d:1e:e4:ad:
cd:b2:5f:81:b2:4c:b8:45:34:d6:b0:04:cf:5d:93:4d:19:f9:
34:68:9f:ff:a7:77:ae:2e:62:d2:12:6f:2b:b7:62:bb:e1:16:
cf:40:5e:9a:90:11:97:2c:df:6d:aa:a3:c0:ac:73:40:99:48:
f6:36:ff:eb:cb:4c:1c:57:b2:50:2f:7a:b9:dd:47:a5:90:7b:
21:11:b4:b2:2d:7a:f1:36:02:46:9d:b6:4f:15:ba:35:82:50:
be:5f:2d:41:9d:ba:b0:69:cd:d2:8e:7c:c5:9f:36:d8:73:63:
09:27:7a:a1:a1:8f:e2:d2:6d:4d:90:f0:9b:b5:c4:45:33:e4:
bb:13:56:ed:18:ea:e2:96:10:20:94:32:91:79:b9:74:c7:6b:
97:8b:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:02 2024 by rpki-client on console-ams.rpki-client.org