Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rwgYI4Z9bsuld82kAXSN3-aDKm0.cer
File: rwgYI4Z9bsuld82kAXSN3-aDKm0.cer (raw, json)
Hash identifier: 9CkNdxUYl+pI45sXcrawoPGBxf0K538BUYkaRGq+/tE=
Subject key identifier: AF:08:18:23:86:7D:6E:CB:A5:77:CD:A4:01:74:8D:DF:E6:83:2A:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD1256AB8266340D5543A27E15B51D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/rwgYI4Z9bsuld82kAXSN3-aDKm0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.10.0/24
IP: 2a12:1f00::/29
Validation: Failed, certificate revoked on Tue 14 Nov 2023 08:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:25:6a:b8:26:63:40:d5:54:3a:27:e1:5b:51:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af081823867d6ecba577cda401748ddfe6832a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:c3:4e:cf:16:89:e1:12:9a:ce:22:60:6b:
55:33:c8:f7:d0:d9:d2:2b:ac:1f:c8:df:47:96:64:
f8:db:52:15:3b:eb:b1:9e:e5:30:90:ce:61:92:e6:
1d:2b:c4:ef:f3:8e:53:25:4e:8b:a9:85:37:68:f7:
a5:3b:b7:79:86:76:36:6b:8f:22:d8:40:dc:e2:0d:
ef:88:37:e8:4f:f2:99:51:88:14:a2:63:65:61:17:
7f:7e:fa:12:b2:90:c8:3f:a1:c4:1d:12:8b:f2:8f:
85:34:20:68:b2:f6:36:9a:c3:ef:00:6d:b7:c9:29:
df:7b:4c:57:7f:b3:7a:a3:94:9f:fa:06:e6:4a:2b:
ec:ec:2e:07:ba:8d:4d:5c:ef:f9:6d:1f:a9:d4:31:
42:a6:e3:ec:15:5a:14:e4:56:67:7b:a3:fa:cf:db:
f8:5d:b7:b4:76:f8:9e:78:ff:63:e3:d5:5e:bf:05:
ee:93:9f:d6:bf:77:c6:f5:65:8e:d4:ac:1c:85:ba:
c5:f1:3a:b7:c2:cb:31:7f:47:9d:df:c2:ca:c4:3e:
4f:c8:eb:0a:75:69:a4:ab:e2:f1:03:f6:3f:cb:da:
95:19:78:ca:00:85:94:54:fe:fd:97:de:fa:4f:a6:
dd:c3:8c:62:fc:dd:36:4f:9e:51:b2:58:fb:03:58:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:18:23:86:7D:6E:CB:A5:77:CD:A4:01:74:8D:DF:E6:83:2A:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/rwgYI4Z9bsuld82kAXSN3-aDKm0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.10.0/24
IPv6:
2a12:1f00::/29
Signature Algorithm: sha256WithRSAEncryption
54:64:6e:9d:95:90:20:41:56:f3:9a:93:0f:af:e2:5c:37:da:
e5:3f:4c:0e:bd:17:f3:3d:63:9b:81:19:ed:3f:1a:4d:3b:d3:
b5:0e:c1:c3:5e:05:78:c5:c1:4a:61:22:30:da:16:d3:f5:6c:
91:2f:48:47:ed:89:3f:03:0a:b8:41:15:84:5d:c9:3c:bd:15:
d7:22:7d:52:d3:4c:de:34:24:8d:51:1e:c7:b7:d9:25:0a:86:
e3:fe:bf:3d:c0:fb:e2:dd:a6:ad:fe:75:96:4c:9b:ab:52:68:
6a:63:cf:30:de:b1:0d:61:1c:c5:ea:67:f8:5c:3f:ca:fc:73:
12:3d:c1:f4:76:6e:a2:17:40:fd:d9:54:fa:c6:bb:e5:e9:d9:
46:ef:a2:b8:f4:46:76:5e:f6:cb:0f:33:da:e1:67:e3:7c:f8:
f2:3e:4a:80:8e:32:d9:48:b7:61:b2:22:11:04:35:24:60:03:
db:d8:08:40:7c:2b:f0:ca:d8:ce:fc:be:71:8a:32:52:8f:ce:
61:cc:0b:5d:7d:c6:c1:74:bf:61:31:94:35:cd:fe:f0:1d:1a:
68:50:7e:18:5c:71:05:b5:c2:98:b2:57:e4:23:d6:2a:9d:af:
9c:f3:76:16:f7:80:21:d8:8b:1c:e8:67:bd:3b:30:1d:c8:02:
35:cb:db:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:45 2024 by rpki-client on console-ams.rpki-client.org