Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nji8LhQvvr5b1Vdequ77n3iQ3Ws.cer
File: nji8LhQvvr5b1Vdequ77n3iQ3Ws.cer (raw, json)
Hash identifier: XRzY80Wij3UmI9hwnFRcNv3vTWqSGa6LGA3c7RY5AXs=
Subject key identifier: 9E:38:BC:2E:14:2F:BE:BE:5B:D5:57:5E:AA:EE:FB:9F:78:90:DD:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD08C9ECBB17CF7B5AB20A22127D300
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/nji8LhQvvr5b1Vdequ77n3iQ3Ws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:31:47 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.157.232.0/22
IP: 185.254.96.0/22
IP: 194.48.217.0/24
IP: 2a0c:4ac0::/29
IP: 2a0d:1180::/29
IP: 2a10:93c0::/29
Validation: Failed, certificate revoked on Fri 21 Apr 2023 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:8c:9e:cb:b1:7c:f7:b5:ab:20:a2:21:27:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:31:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e38bc2e142fbebe5bd5575eaaeefb9f7890dd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:c5:ef:20:92:c9:ff:6f:88:f9:78:7d:8c:
2a:3c:1a:61:a6:69:b1:e1:f5:a1:cd:1d:a2:c5:e4:
39:96:e3:5a:05:37:db:81:7e:0e:33:6a:65:87:c8:
88:0d:b9:79:b9:39:b7:ed:21:b3:32:1d:79:90:fb:
d8:2f:63:70:23:af:ee:00:d7:d8:6c:ed:70:15:dc:
74:7a:f9:e2:41:85:7f:92:72:0d:f2:0a:59:7c:20:
c8:0e:38:35:27:43:8f:60:09:68:f3:25:25:f4:eb:
04:7f:92:af:5d:43:a4:93:c0:89:5c:b9:fd:4b:d3:
9e:fe:fc:57:38:b5:04:52:51:b7:68:f1:bf:3b:8d:
85:2f:02:7a:30:1a:58:fb:92:06:47:9f:75:8c:a0:
e6:21:a3:84:ad:0b:14:86:58:83:15:fa:ac:c3:9f:
53:97:70:06:4c:ce:53:f7:23:11:21:91:25:68:af:
47:8c:27:6d:53:20:2a:43:fa:66:69:93:24:25:60:
ac:02:d6:63:e2:56:16:80:25:de:5e:4d:9e:f4:ba:
19:f1:41:58:0a:8d:a1:56:8b:e7:79:ad:2b:01:61:
dd:ac:ca:c3:2b:3b:8e:6d:c8:04:0f:f3:da:2c:ac:
66:a7:83:63:d1:db:54:57:96:46:0b:1b:61:27:f7:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:BC:2E:14:2F:BE:BE:5B:D5:57:5E:AA:EE:FB:9F:78:90:DD:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/nji8LhQvvr5b1Vdequ77n3iQ3Ws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.232.0/22
185.254.96.0/22
194.48.217.0/24
IPv6:
2a0c:4ac0::/29
2a0d:1180::/29
2a10:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:3a:89:e9:04:59:a1:52:17:71:4a:43:ea:86:3c:7e:4d:e7:
b2:28:c5:bf:ac:ae:11:3d:b9:4c:77:0e:c2:6e:1a:3f:da:5a:
fd:fc:c5:76:d8:db:df:13:f6:34:d4:6c:33:20:2a:51:69:be:
97:61:e7:01:2f:1c:c8:06:ed:42:e0:01:cd:10:51:79:26:3a:
66:52:f7:b1:64:14:75:f2:84:00:67:83:c4:63:55:e9:28:77:
f9:64:c9:1c:4a:f4:2b:2a:e1:2b:7a:5f:cb:a1:02:95:90:ec:
1e:0d:ea:44:5b:87:b8:47:6f:0c:bf:50:00:16:93:a2:79:ba:
3b:0a:d5:8e:49:0a:ce:c1:2e:ab:5e:5f:5c:ba:59:17:c6:2d:
6e:da:e0:48:4b:64:94:07:fc:a1:1d:06:43:2c:ec:fc:43:a4:
fa:df:b6:8e:5b:e2:26:d6:60:42:10:53:17:80:61:9a:3b:d6:
89:f2:0d:ef:18:9e:54:ff:9b:da:66:51:a8:cb:09:fd:9a:5a:
84:b5:02:44:b9:53:b6:9d:51:40:5d:8b:94:78:75:83:c5:ee:
06:15:10:af:6c:ff:c0:07:03:29:c9:39:f7:3b:66:4c:e4:84:
39:aa:3a:ad:f0:1f:af:32:be:45:43:53:2d:4a:a7:fa:92:e7:
84:dd:25:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:36 2024 by rpki-client on console-ams.rpki-client.org