Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pV9HeHttIaXZWWAjL-8vTbK5jsM.cer
File: pV9HeHttIaXZWWAjL-8vTbK5jsM.cer (raw, json)
Hash identifier: bTAki9rPjqTQW7uDXRd0eSrCAjr1+owtTT8G2RADj0o=
Subject key identifier: A5:5F:47:78:7B:6D:21:A5:D9:59:60:23:2F:EF:2F:4D:B2:B9:8E:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F41BBEC38C2404DE41681BCA1EC2C3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/pV9HeHttIaXZWWAjL-8vTbK5jsM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.233.39.0/24
IP: 2a11:9e40::/29
Validation: Failed, certificate revoked on Mon 11 Dec 2023 13:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:bb:ec:38:c2:40:4d:e4:16:81:bc:a1:ec:2c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a55f47787b6d21a5d95960232fef2f4db2b98ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:13:89:fb:e1:5a:87:70:16:7e:97:57:50:
43:ed:31:8b:fc:a8:fa:17:e1:24:1e:a4:39:89:7b:
e9:2a:10:2a:4f:f3:29:06:7a:11:a7:f3:6c:85:91:
f4:a2:37:c5:ef:e9:29:fa:b7:98:2a:fc:ca:5a:ee:
28:cf:b3:3c:d2:95:be:a5:cc:8a:28:b2:fa:f8:20:
bb:80:15:ee:6a:b4:a9:09:5e:a5:e7:19:ea:50:b9:
c7:a2:66:bf:ee:d9:1f:c8:72:af:5d:52:f8:6f:3d:
a3:d8:06:52:8a:7f:13:90:9d:51:3e:e8:6c:e2:87:
72:91:05:52:b1:1c:41:3a:9c:65:7a:f5:6b:8b:2a:
69:d3:b9:5a:45:a8:80:9c:50:96:82:39:e2:11:b7:
e3:c1:d8:07:4f:22:f9:b8:9d:28:97:65:3c:85:93:
76:e4:ec:f6:b8:80:4b:cf:b6:8b:ba:d4:fa:6b:14:
1d:01:dc:1a:5b:de:83:da:b7:6d:03:07:84:e3:0e:
07:27:54:d0:90:04:7b:24:e8:c1:91:44:c2:9b:0c:
6f:85:4d:bf:7e:28:13:64:02:44:ca:07:87:d6:2f:
2a:cf:54:d1:84:77:a9:89:75:e7:40:10:cb:2a:4c:
7c:f5:e4:fc:7d:61:c2:bf:23:0a:69:78:4b:4e:91:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5F:47:78:7B:6D:21:A5:D9:59:60:23:2F:EF:2F:4D:B2:B9:8E:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/pV9HeHttIaXZWWAjL-8vTbK5jsM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.39.0/24
IPv6:
2a11:9e40::/29
Signature Algorithm: sha256WithRSAEncryption
75:00:e4:9c:9f:c6:5c:9d:a5:ad:1c:fc:b5:26:37:9b:ca:4b:
f6:52:07:1e:f2:45:27:7d:47:0d:43:70:d2:ff:cc:c6:14:82:
c7:a8:de:d1:e4:a3:23:73:51:95:fb:93:07:45:73:6e:3c:e3:
91:f1:36:da:96:6c:95:c0:08:1d:f0:1d:b2:83:2f:3a:19:0a:
e1:0f:8d:1b:31:cf:07:f5:fd:b2:b7:3a:ac:bc:0b:e4:16:b2:
47:24:a7:aa:58:b1:1f:88:96:44:bc:cd:f3:ce:8d:75:6f:fb:
5b:40:44:ff:75:0a:c7:58:1d:be:6c:50:ab:22:1a:49:e4:2d:
68:da:30:75:0d:9a:5c:3d:42:78:ba:17:9f:81:f0:9a:c0:36:
59:8b:8d:86:05:00:43:8c:59:4c:0f:c5:ea:cc:7d:4f:1d:fc:
e1:ce:27:79:65:67:5e:d6:0c:68:20:10:2e:3f:c3:a0:66:db:
f6:7d:be:c6:df:af:b9:df:6b:bd:63:1f:1b:8b:c7:5c:af:57:
3a:8e:c5:28:bb:33:1e:f1:a7:4c:ec:e6:05:c1:48:d3:c5:69:
a4:61:02:38:8b:55:81:f6:84:79:5f:3a:72:e3:9b:a4:ca:8e:
0b:11:b8:26:bf:0c:ac:4c:c3:17:12:d2:97:bb:54:67:25:ef:
c2:4b:58:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:45 2024 by rpki-client on console-fra.rpki-client.org