Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s2HEYJCGn73-4iQ2zoqUOTqhvmQ.cer
File: s2HEYJCGn73-4iQ2zoqUOTqhvmQ.cer (raw, json)
Hash identifier: 5JjzU8r/kD2jNJSN+D/r3L3qDkq2XwH+hKn8PpzYkIU=
Subject key identifier: B3:61:C4:60:90:86:9F:BD:FE:E2:24:36:CE:8A:94:39:3A:A1:BE:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C20A1CB9CBDE52596ED09FC340A4C9602
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/s2HEYJCGn73-4iQ2zoqUOTqhvmQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Nov 2023 14:28:43 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.137.44.0/22
Validation: Failed, certificate revoked on Fri 15 Dec 2023 14:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:a1:cb:9c:bd:e5:25:96:ed:09:fc:34:0a:4c:96:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 30 14:28:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b361c46090869fbdfee22436ce8a94393aa1be64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:fc:de:8d:21:e9:cf:12:a3:a2:d7:c0:50:
7e:76:f8:73:53:50:62:7c:6e:ce:65:20:5d:89:93:
09:ab:0e:61:58:a6:a0:17:ef:6b:d4:ec:75:00:9d:
80:62:5d:ff:3d:b4:21:2f:ca:69:e4:a7:a7:83:ad:
9f:70:53:47:10:88:ba:27:1f:8b:78:9b:f4:05:1b:
ba:df:75:3b:ce:70:9b:a9:ed:0a:b5:f1:46:f2:2a:
a9:42:52:e6:49:2e:c7:8b:2c:fd:f8:14:51:41:e7:
12:35:5f:f8:47:7f:d9:62:bc:b7:cc:10:51:fc:ff:
7a:68:f8:ab:51:61:48:b5:a4:b3:e5:1b:3a:65:8c:
ca:07:1b:3f:56:0a:03:1f:fa:d9:11:c5:ad:19:f8:
0b:d2:d7:d5:c5:9e:0e:39:1e:8b:dc:c7:6d:64:3e:
da:94:d9:e7:9a:a1:70:be:2b:fc:37:8a:8a:17:a3:
e1:00:cd:80:23:b8:86:7d:bf:61:fe:ba:31:e2:52:
c0:1c:65:cb:63:2c:43:bf:25:e3:fe:73:33:f4:e8:
12:83:b4:a4:82:74:dd:c8:3b:61:e0:99:ff:fe:5e:
09:03:e4:1f:67:0e:fd:45:27:aa:04:9a:1a:94:74:
2d:c7:2d:30:c4:7f:7c:e4:5a:2d:69:d5:d7:6e:da:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:61:C4:60:90:86:9F:BD:FE:E2:24:36:CE:8A:94:39:3A:A1:BE:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/s2HEYJCGn73-4iQ2zoqUOTqhvmQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.44.0/22
Signature Algorithm: sha256WithRSAEncryption
74:75:39:27:1c:c9:ef:aa:75:4a:09:56:ef:07:bf:a3:5b:54:
b2:f9:e1:80:b8:92:21:74:a4:b4:88:34:f5:ea:41:7e:86:26:
c8:38:ea:ac:df:23:1f:85:06:e2:03:28:69:70:55:c2:45:43:
a9:36:34:d7:e3:bb:ff:3b:40:2a:e9:90:04:b1:a5:ab:ac:8c:
63:2f:10:f3:47:8c:7b:22:2b:06:cf:aa:63:19:93:b3:74:9c:
00:59:70:8c:31:48:c0:74:f3:6a:63:00:56:52:c6:f0:90:65:
14:c9:6a:54:f6:12:b7:9e:cc:31:fb:e4:82:50:9f:05:4e:65:
81:70:0c:41:97:1d:6b:0a:cf:f6:24:e6:84:05:35:20:db:6d:
6a:a5:f4:48:98:d4:8c:c2:f9:6f:04:70:47:9f:2a:a7:53:6d:
8e:1e:29:4b:37:ce:70:77:ce:d6:9f:b4:96:f3:81:23:8b:fd:
32:c4:b6:be:72:7b:71:45:51:00:57:24:31:ea:cb:f4:8b:a4:
dc:f5:bf:56:25:96:bb:ae:5b:09:2b:a6:cc:ed:34:7e:d9:cf:
56:a4:95:bc:f1:7f:c0:93:36:fe:fc:61:83:de:fc:15:bb:39:
b6:51:be:08:1f:3e:fe:2d:b8:ce:8d:be:78:8b:0a:f3:db:0d:
13:ca:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:46 2024 by rpki-client on console-ams.rpki-client.org