Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/puYrNF7XzeiRVDjYlLFk2NsKDms.cer
File: puYrNF7XzeiRVDjYlLFk2NsKDms.cer (raw, json)
Hash identifier: nuo28hdhwv/hDhdBMHTfbz8tuwEbMBx1OMjV1ko8umg=
Subject key identifier: A6:E6:2B:34:5E:D7:CD:E8:91:54:38:D8:94:B1:64:D8:DB:0A:0E:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1A74F8052BE144E552D6392D4733F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/puYrNF7XzeiRVDjYlLFk2NsKDms.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.247.163.0/24
IP: 2a12:4f80::/29
Validation: Failed, certificate revoked on Tue 14 Nov 2023 15:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:74:f8:05:2b:e1:44:e5:52:d6:39:2d:47:33:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6e62b345ed7cde8915438d894b164d8db0a0e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:c7:e7:9b:92:ee:9b:cc:fd:b3:3f:c5:96:
32:96:37:44:e8:3a:28:75:1f:25:35:ab:73:88:a9:
87:79:2d:9d:a0:7b:48:86:2d:bf:8b:60:72:49:a1:
ba:a2:03:94:f3:76:b6:1a:13:69:6f:c5:29:52:6e:
92:15:3a:26:40:18:90:f5:c0:9e:8c:30:f0:af:f3:
5f:f6:9c:32:04:b1:95:1b:d5:14:77:cc:31:16:b7:
ba:84:37:36:13:5a:2e:a5:cd:65:58:a6:27:5c:c2:
ff:0b:56:3e:9f:25:11:c0:9c:31:29:1e:dc:61:19:
d2:62:3e:f5:a4:23:fd:17:5a:a0:3c:dd:62:5b:aa:
f8:d3:e5:2a:15:31:7d:66:76:fb:f1:9a:d4:55:d2:
64:2e:cb:d7:0f:77:ed:65:18:79:1d:67:b8:25:83:
4c:63:72:f6:11:77:46:7e:2a:60:0c:37:a6:21:71:
e0:86:05:33:f1:41:f4:08:32:c3:2d:a3:ba:a3:73:
a6:a0:95:01:d2:c8:93:e9:53:d4:f5:50:04:6f:52:
b0:b4:24:a7:5e:63:1a:74:d9:4d:a7:47:2e:d4:61:
a6:54:4c:68:45:19:bb:49:8a:37:5e:01:4f:aa:58:
33:a2:ac:45:82:a9:1f:fd:c9:4d:fe:28:fd:2a:43:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E6:2B:34:5E:D7:CD:E8:91:54:38:D8:94:B1:64:D8:DB:0A:0E:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/puYrNF7XzeiRVDjYlLFk2NsKDms.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.163.0/24
IPv6:
2a12:4f80::/29
Signature Algorithm: sha256WithRSAEncryption
07:41:a1:46:81:d8:74:3e:a0:3f:01:90:a7:1e:2a:7c:cd:7e:
c4:27:9d:f8:21:5c:f2:2c:df:10:f0:e0:bb:51:34:a1:4c:15:
3e:83:4e:d8:02:74:91:79:20:b6:a1:24:2e:95:2d:e4:78:8c:
f1:cf:06:33:d7:19:0e:88:bc:8f:de:22:d7:6a:4c:d5:4a:53:
0b:83:cd:4c:4a:ab:32:fd:1f:8c:4e:9a:18:08:5e:59:f2:aa:
a4:f5:2a:45:07:54:4e:85:ed:ee:9d:84:33:aa:14:f5:f8:7c:
93:16:fc:17:1d:3e:77:1a:ee:87:f4:30:f9:33:f4:65:99:cc:
b9:bc:62:eb:15:c9:ea:5d:1d:bb:91:d9:d3:fa:e4:ab:bc:ec:
8f:be:e3:4d:3f:06:41:6b:91:f3:7e:b7:d5:19:af:83:57:ff:
1d:97:b2:63:be:8c:2a:21:57:b2:29:b8:72:09:81:35:ae:05:
6d:a7:72:0f:b7:e5:16:05:d2:f1:70:20:33:26:8c:82:7b:d9:
51:94:e3:dc:63:9e:17:90:ca:f8:40:a9:5e:57:57:f8:e5:1d:
59:cf:46:5b:42:a3:51:2f:cd:0e:d4:f2:3c:3c:ba:9e:b6:a7:
f1:af:1a:56:c6:6e:7b:ea:60:f9:71:24:cf:f8:11:c4:84:36:
ef:85:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:06 2024 by rpki-client on console-ams.rpki-client.org