Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/poMdDvWlnjTWIdYTto-b_7Upj80.cer
File: poMdDvWlnjTWIdYTto-b_7Upj80.cer (raw, json)
Hash identifier: Snzk2H/L2tvFM6Rzoao0Urwz64DJMYlXlRunLorra1w=
Subject key identifier: A6:83:1D:0E:F5:A5:9E:34:D6:21:D6:13:B6:8F:9B:FF:B5:29:8F:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42546C649F09F05F375E9ADD57E6062
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/271c6b-19d0-40b5-b58d-0de393171622/1/poMdDvWlnjTWIdYTto-b_7Upj80.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/271c6b-19d0-40b5-b58d-0de393171622/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.198.179.0/24
IP: 2a11:fc40::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 12:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:46:c6:49:f0:9f:05:f3:75:e9:ad:d5:7e:60:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6831d0ef5a59e34d621d613b68f9bffb5298fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:af:1c:49:53:e4:65:ce:e4:97:f5:12:06:
68:1d:c2:2b:be:b1:e4:71:0e:78:06:9d:bd:80:fd:
e1:da:9a:ab:ef:4f:1b:e4:22:66:98:3c:57:bf:64:
69:23:e0:0c:71:34:f6:7d:a0:32:e5:a8:00:8d:8e:
ef:77:49:de:8d:a7:aa:13:d5:b2:d9:66:83:e0:cd:
0a:69:29:f0:ef:0f:4f:5b:ea:66:4c:bd:8f:26:08:
51:75:8f:51:05:44:25:f8:0f:65:3c:ca:c3:f1:1c:
91:9d:17:03:1b:7b:dd:d9:97:1c:f2:02:1a:28:82:
85:89:08:17:96:8e:0b:88:71:62:c6:04:a4:89:94:
2b:8c:92:59:9d:ba:4b:63:fd:00:1f:e4:44:9d:6d:
ca:b2:a5:9e:7e:67:5a:3e:c8:68:23:c0:e4:da:fd:
86:9e:34:0a:67:bf:28:47:33:45:72:a7:86:63:da:
b6:98:f3:6f:40:c9:2a:e1:f9:7f:9f:04:f8:00:14:
a0:20:68:91:b1:b2:37:e4:f7:68:80:e4:d0:0d:bf:
83:46:d9:39:ab:e7:68:17:40:40:5d:5f:92:eb:f3:
f1:12:e6:c5:92:54:f8:1b:03:1f:9a:66:32:57:ae:
8a:59:ae:d2:03:0d:65:f1:51:43:73:90:5f:15:5b:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:83:1D:0E:F5:A5:9E:34:D6:21:D6:13:B6:8F:9B:FF:B5:29:8F:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/271c6b-19d0-40b5-b58d-0de393171622/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/271c6b-19d0-40b5-b58d-0de393171622/1/poMdDvWlnjTWIdYTto-b_7Upj80.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.179.0/24
IPv6:
2a11:fc40::/29
Signature Algorithm: sha256WithRSAEncryption
62:ee:3b:28:0a:1b:c6:71:4d:5a:7e:f3:fb:5b:7e:81:f9:72:
d4:5a:24:d3:2f:f2:72:43:ba:ba:50:4f:e4:49:b5:e8:59:9d:
59:ca:f1:bd:4c:d1:fd:7c:da:f8:c2:51:50:02:fc:ce:c8:4e:
17:2d:0a:6f:5e:e1:fd:7c:c9:1c:e7:a3:04:c1:27:85:9a:dc:
ff:c9:3e:63:9f:c6:a8:84:55:d2:5f:52:03:3a:e6:d7:72:2d:
bd:44:24:43:05:08:c7:82:f7:ac:c5:6e:42:cb:d3:51:ac:3e:
8f:4a:f8:34:00:56:ab:66:a9:f6:20:4a:90:d5:12:e3:4a:d7:
45:44:da:5d:f2:a6:9d:16:81:a1:f9:10:72:00:f7:88:da:d7:
ad:a9:a0:8c:e5:f4:aa:c3:28:6f:25:0a:7a:1b:c5:74:8e:6b:
90:11:fa:fe:20:3d:20:77:17:da:3b:aa:27:09:59:8b:3d:ac:
3d:d4:89:88:27:40:06:7c:32:4f:4a:d5:ba:f2:66:ad:7e:4d:
35:a3:db:f3:2b:67:34:92:45:7f:4d:d0:9b:88:94:dd:29:a6:
fc:20:ed:9e:9c:28:2d:4c:4a:40:8b:1a:bb:fa:77:68:0c:17:
82:b1:43:13:5c:45:f0:20:a6:5f:ed:93:ec:bf:23:a4:09:4c:
d1:cb:b9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:05 2024 by rpki-client on console-ams.rpki-client.org