Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sB_78i43x65CwD9uY_Mhcjmc_gc.cer
File: sB_78i43x65CwD9uY_Mhcjmc_gc.cer (raw, json)
Hash identifier: iUDWEGbPGQqJZ3RjL2FYyXTdgS0dX0eB4RFXl9GB+zU=
Subject key identifier: B0:1F:FB:F2:2E:37:C7:AE:42:C0:3F:6E:63:F3:21:72:39:9C:FE:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50081DD8A59F11C1BC609E84406791D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/sB_78i43x65CwD9uY_Mhcjmc_gc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.92.76.0/24
IP: 2a12:5e80::/29
Validation: Failed, certificate revoked on Tue 06 Feb 2024 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:81:dd:8a:59:f1:1c:1b:c6:09:e8:44:06:79:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b01ffbf22e37c7ae42c03f6e63f32172399cfe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:f5:dc:5c:c0:8f:2b:ab:4e:38:2d:12:21:
0e:eb:97:a8:c7:0a:7c:17:a8:71:d7:bc:91:09:0d:
8f:87:dc:94:45:9e:22:88:61:70:1a:a7:4f:69:6f:
21:4a:18:2b:63:4a:b3:43:68:e5:9c:eb:eb:ee:35:
97:b3:43:1f:92:d4:a4:d6:99:41:d0:46:09:5a:0e:
c7:e1:0f:09:3c:16:91:12:c0:20:5e:4c:00:be:11:
f7:e5:4a:6d:88:77:c8:2b:9d:d0:c5:c3:9a:41:0c:
41:c3:bd:e0:a2:e5:37:51:26:3d:8b:70:f9:eb:83:
52:c5:c6:1e:ba:e7:42:f8:2e:57:1e:98:83:39:0b:
b9:4d:da:7c:28:08:5a:53:80:52:ec:1e:75:ea:a7:
e2:66:8d:2e:0a:89:86:e8:75:46:62:18:c1:a7:b4:
99:55:0b:08:df:72:9a:5b:f9:99:c5:62:e8:d4:1f:
7a:60:22:19:73:eb:78:4d:27:cd:0c:dd:34:2c:ed:
8e:70:14:a4:70:ae:8c:69:c1:52:73:27:87:7f:af:
14:63:c3:16:c2:70:62:b1:d4:be:b9:eb:a4:5c:1f:
73:e0:51:f6:eb:f2:e5:a3:67:7f:2a:af:53:44:4c:
2a:dd:c8:e1:2a:fc:de:80:af:59:45:dd:b0:1d:2e:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:FB:F2:2E:37:C7:AE:42:C0:3F:6E:63:F3:21:72:39:9C:FE:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/sB_78i43x65CwD9uY_Mhcjmc_gc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.76.0/24
IPv6:
2a12:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
67:b5:ba:5a:6e:2d:36:69:c6:66:40:59:bb:0b:a7:c6:99:0e:
b5:24:62:2a:05:f9:ba:7f:b4:62:25:20:fa:95:21:82:6a:b1:
ea:8f:84:6c:1c:73:26:0e:41:7c:f4:59:70:e1:a1:f6:d2:3b:
b4:c0:65:b8:fc:87:d4:37:6a:3c:f3:e5:87:95:93:85:6e:14:
7c:80:98:fe:e4:86:3b:d7:47:ee:30:bd:ce:b3:27:ef:43:95:
0a:ff:9e:69:4c:03:13:bb:1d:10:59:f2:84:b2:0e:ac:7d:87:
c4:a4:83:96:f1:d4:1c:2a:55:42:fd:b1:fa:8b:a9:e9:63:62:
27:fa:11:ed:23:5d:05:4a:b4:24:f1:72:55:2d:b3:cb:4c:b7:
27:c3:10:18:f8:d2:b2:5a:d3:43:21:06:cc:fa:4c:25:77:6e:
ff:37:0f:cf:0c:d7:16:61:cd:7a:ac:31:25:04:0b:d9:35:5b:
a5:18:bc:88:ba:a6:09:b1:37:88:1b:73:a8:b8:16:b4:07:52:
69:30:3b:24:4b:13:4e:80:99:1d:69:0f:1b:81:47:5b:b1:7d:
2a:b8:7a:c4:25:00:cc:5f:f5:eb:95:13:28:df:ec:1c:6e:2c:
2a:4d:bc:b9:a6:c9:44:4d:b1:f8:63:f9:c3:96:ad:7b:b2:39:
ef:e6:eb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:11 2024 by rpki-client on console-fra.rpki-client.org