Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pfYh7rK_3pk_tsDnis7R7Ab7VsI.cer
File: pfYh7rK_3pk_tsDnis7R7Ab7VsI.cer (raw, json)
Hash identifier: FgE5DKkyG01h/FDjH7aTeQ2HqK2Tq9OGbGM5kix7s3w=
Subject key identifier: A5:F6:21:EE:B2:BF:DE:99:3F:B6:C0:E7:8A:CE:D1:EC:06:FB:56:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D8980DB4F5014F2CB1E540A59D41F35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/pfYh7rK_3pk_tsDnis7R7Ab7VsI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.231.180.0/24
IP: 2a11:2400::/29
Validation: Failed, certificate revoked on Mon 04 Dec 2023 10:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:80:db:4f:50:14:f2:cb:1e:54:0a:59:d4:1f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5f621eeb2bfde993fb6c0e78aced1ec06fb56c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:77:bf:d6:e6:9d:d7:f7:cc:6a:fc:61:d2:
60:24:8b:68:75:c8:cf:8c:fa:d5:95:fb:a4:19:83:
8b:db:4b:aa:43:d8:b8:19:6a:4c:22:f6:89:03:5d:
80:0e:46:3d:c8:d1:67:ae:b6:fc:64:c1:77:95:99:
74:e2:ce:f6:67:de:bf:6c:41:fb:71:1b:f1:b4:11:
3c:84:b0:c7:de:17:33:24:e4:bd:c8:52:df:f6:29:
07:4d:8e:1f:74:8c:fb:46:a4:a5:21:80:83:ef:cd:
f9:a9:d2:3a:bb:7b:94:91:a5:9d:6f:f5:32:81:e6:
3d:e6:81:82:2f:d1:93:50:5c:41:f3:4b:ec:1b:ab:
f3:81:af:78:27:21:d2:9c:69:18:77:25:21:3d:26:
64:c4:3b:f7:bb:c1:2d:6e:66:bb:ab:77:3b:45:bb:
68:a3:83:49:a7:ab:01:42:c1:c8:bf:ab:9f:57:1f:
25:dd:1e:82:0b:c4:33:e1:f5:e8:79:b3:2d:8d:78:
19:0d:00:92:e3:71:58:dc:bf:b0:37:7a:a8:cf:a4:
23:ed:37:17:97:a8:de:46:e4:75:87:89:f0:e2:71:
6a:d4:15:30:c5:d4:b0:6a:b9:4a:e1:33:c9:30:45:
74:6e:d0:5f:37:19:d2:91:29:87:af:3e:07:68:af:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:21:EE:B2:BF:DE:99:3F:B6:C0:E7:8A:CE:D1:EC:06:FB:56:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/pfYh7rK_3pk_tsDnis7R7Ab7VsI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.180.0/24
IPv6:
2a11:2400::/29
Signature Algorithm: sha256WithRSAEncryption
22:03:49:73:54:a9:ef:06:63:8d:fb:fe:72:80:87:02:f6:56:
c9:b6:25:ff:76:06:fc:c6:6c:73:70:9a:52:76:7d:94:17:8f:
fc:53:db:01:45:f3:50:a8:86:2b:0a:96:16:0a:37:4c:ba:f6:
97:ee:ab:bd:9d:ce:89:5e:78:d3:63:ec:2c:d8:7b:60:83:1e:
3b:22:04:34:be:a5:15:8f:5e:6b:6e:21:0e:93:ed:ae:71:82:
1a:c4:f8:63:93:27:a7:99:5a:b1:c0:f9:53:71:3b:4b:55:f5:
8c:2b:45:c8:2e:16:73:15:b6:98:5c:91:f5:7f:cc:34:3c:7d:
80:26:7d:32:fc:ee:b2:17:d4:41:9d:1c:62:23:d5:c1:11:dd:
1c:4a:7b:da:a6:87:92:72:82:1d:e7:f2:b0:f2:85:5a:56:5e:
f8:58:d9:1c:ef:39:7e:24:3d:b7:b2:99:07:8c:c0:ca:4b:92:
0b:32:de:8e:dd:01:46:4a:09:bf:78:3f:3b:c6:f6:16:5e:ae:
e0:d2:90:1b:4a:eb:82:0e:88:70:cc:46:ea:81:9b:4a:75:b6:
ca:79:e8:5c:72:21:b4:c0:5b:ca:49:d7:33:ab:14:d5:db:bd:
ac:a1:4d:dd:bc:e6:5e:2f:ef:4b:bc:69:a9:6e:c6:6f:55:3d:
cf:4a:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:03 2024 by rpki-client on console-ams.rpki-client.org