Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sNnmDX5Zck4Fqx2zoejqkn01Qjg.cer
File: sNnmDX5Zck4Fqx2zoejqkn01Qjg.cer (raw, json)
Hash identifier: dd8oTs3D7Sr7rCzOHZqxczIsD+1LiMoJ7MdoB130H+g=
Subject key identifier: B0:D9:E6:0D:7E:59:72:4E:05:AB:1D:B3:A1:E8:EA:92:7D:35:42:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB04F55756992DCF60778D399D86C50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/1efdc4-d8cc-4fba-af47-43fad1b5dc1d/1/sNnmDX5Zck4Fqx2zoejqkn01Qjg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/1efdc4-d8cc-4fba-af47-43fad1b5dc1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:03 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 217.28.64.0/22
Validation: Failed, certificate revoked on Tue 04 Apr 2023 08:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:4f:55:75:69:92:dc:f6:07:78:d3:99:d8:6c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0d9e60d7e59724e05ab1db3a1e8ea927d354238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:a6:f7:e1:f6:f7:ba:4f:df:25:f4:81:98:
cf:18:9d:9a:99:f5:32:23:64:ea:7d:8d:b1:08:87:
7b:e2:59:07:1e:50:38:6d:58:c3:a4:4a:bf:6e:76:
ad:af:87:5b:b5:c1:c1:c2:b7:d2:e9:35:af:0f:f6:
fb:04:80:b7:72:ac:e4:75:8b:31:db:ca:28:2c:00:
61:f4:12:87:f4:5b:0b:d3:76:e3:8b:36:3b:dc:92:
d7:f9:a9:e5:15:00:41:3b:55:6d:e5:91:cb:8c:0b:
57:8a:14:1f:b8:24:75:1a:7c:6a:25:ab:fb:69:0a:
83:e0:7a:c5:c5:d9:f7:dc:77:a9:31:78:70:87:34:
c4:57:2d:7f:47:35:8e:f0:de:2c:2c:9d:b8:5a:2e:
60:ad:83:64:73:10:76:53:92:e9:bd:97:f1:7e:fa:
af:06:58:31:18:20:69:4f:f4:b1:99:81:4a:d3:02:
86:81:79:68:30:7c:25:a4:e0:36:c2:7e:2f:d4:7d:
39:e7:cd:86:74:4b:38:3d:72:46:7d:43:5d:bf:48:
e5:44:c6:bd:cf:cc:e0:94:79:5b:6a:4a:9a:23:c1:
84:34:01:78:f5:7f:d1:7a:7a:9f:c0:37:0b:27:33:
4a:8b:07:3f:4b:10:71:e2:b8:78:f2:1b:40:4d:f1:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D9:E6:0D:7E:59:72:4E:05:AB:1D:B3:A1:E8:EA:92:7D:35:42:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1efdc4-d8cc-4fba-af47-43fad1b5dc1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1efdc4-d8cc-4fba-af47-43fad1b5dc1d/1/sNnmDX5Zck4Fqx2zoejqkn01Qjg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:85:84:4f:13:8e:96:e2:57:d9:c7:bf:26:1e:f7:9a:37:97:
e7:05:df:31:58:a0:99:81:ca:5c:85:7e:b3:26:00:70:6d:1a:
2a:cf:49:2b:6b:f8:47:e7:74:5a:2a:38:a8:af:d2:f8:25:8c:
31:d9:e2:e0:d2:17:ba:2b:94:d2:07:89:21:76:c1:66:c6:fe:
38:43:2d:a1:8a:09:58:52:e3:8d:ab:7c:a4:f1:ee:cc:2a:97:
00:5b:53:39:03:9b:5b:22:b3:dd:7a:68:d9:fb:fd:f9:b8:55:
33:2e:39:22:20:8b:69:e8:e7:ae:ad:49:03:87:1e:5b:c6:06:
75:db:f6:6f:f3:5d:99:8f:b5:b0:ca:ea:d0:60:19:d5:e3:3b:
5f:ce:03:10:56:90:f7:ac:dd:e2:90:a9:c2:cb:a6:90:8b:1a:
2c:d3:c9:be:c7:ed:44:8f:88:2c:31:dd:da:69:ca:1a:0a:f4:
a9:d5:85:41:ed:e7:fa:fe:cc:6d:ef:44:4c:8b:e6:3d:57:4d:
3d:c8:2b:71:4b:9e:9d:bd:d2:7e:ce:80:89:f4:f2:d0:8f:5d:
81:2e:f3:da:91:a2:d5:ec:77:18:98:95:d4:2a:1e:23:b4:96:
b8:65:83:65:29:4f:ba:be:96:de:69:1d:00:f7:ce:ca:f9:a0:
92:f6:02:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:51 2024 by rpki-client on console-ams.rpki-client.org