Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v3L_THnG-BdbSDWrZWobzx5FdDI.cer
File: v3L_THnG-BdbSDWrZWobzx5FdDI.cer (raw, json)
Hash identifier: z7dRNc/oSpKEW0dqyDaRgKBJosxgryelJ4fg26+9vLw=
Subject key identifier: BF:72:FF:4C:79:C6:F8:17:5B:48:35:AB:65:6A:1B:CF:1E:45:74:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B91D7974BE530675FCA2D98E2647CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/v3L_THnG-BdbSDWrZWobzx5FdDI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.42.220.0/24
IP: 2a0c:2840::/29
Validation: Failed, certificate revoked on Wed 10 Apr 2024 08:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1d:79:74:be:53:06:75:fc:a2:d9:8e:26:47:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf72ff4c79c6f8175b4835ab656a1bcf1e457432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:0d:00:da:85:88:c1:8f:f1:c0:ef:28:ac:
5d:75:10:a2:75:67:a3:a8:d8:db:8b:cf:72:34:9b:
28:5f:61:86:2e:43:d8:d5:b9:94:db:0b:cc:44:76:
58:b2:4e:38:47:b7:68:37:17:ae:85:83:8d:50:68:
95:39:33:c7:98:36:45:07:4d:3b:2e:7a:55:5b:4b:
bf:d0:3b:45:0c:ce:ab:86:fc:f4:9b:38:87:1f:a1:
8e:3d:b8:98:bc:5d:4c:c7:76:36:7b:24:f9:55:89:
f4:9d:57:e2:12:da:67:9a:6f:11:30:8f:25:20:76:
c4:38:a2:b0:91:e9:2e:a2:8e:a2:65:96:ae:39:a2:
84:fc:56:3a:d1:6f:7d:2f:f6:76:d1:ff:09:52:41:
9b:2d:fe:50:25:c9:ba:37:c3:47:bc:65:53:6b:c1:
cf:96:73:b0:4c:c4:c4:98:78:95:3e:40:ac:64:fd:
a4:a2:d0:60:f0:93:7f:45:b5:da:8f:a9:fe:20:a1:
ac:26:d2:e6:50:a4:42:f2:14:b6:b6:b5:57:6b:80:
3f:96:2f:0a:df:a2:51:a9:5e:8e:6c:03:de:b7:ef:
28:98:0e:12:39:48:d4:ca:f0:8f:29:26:f4:3b:63:
e2:b5:1d:e5:72:c5:6d:de:00:b1:1c:85:35:19:37:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:FF:4C:79:C6:F8:17:5B:48:35:AB:65:6A:1B:CF:1E:45:74:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/v3L_THnG-BdbSDWrZWobzx5FdDI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.220.0/24
IPv6:
2a0c:2840::/29
Signature Algorithm: sha256WithRSAEncryption
7a:95:d1:08:03:dd:3f:2f:58:7b:c5:eb:45:37:a8:45:29:ec:
87:97:3c:e6:45:8c:a4:e2:ce:6b:9b:48:d0:ce:4e:2f:10:42:
9b:f8:61:58:bb:52:e6:b2:c2:d7:49:bc:64:21:d2:6b:92:31:
71:66:dc:72:7c:04:af:b2:6b:8d:d2:ab:d3:e4:4e:9e:af:c2:
03:0c:8d:8e:b9:4b:f5:88:ac:b9:62:08:7d:64:c3:21:cb:02:
cb:90:ab:97:7f:ec:e5:db:91:b4:c3:e5:55:70:72:eb:58:7a:
75:fb:8a:57:bc:be:a1:07:de:34:a9:37:8c:3a:be:65:f3:6f:
55:42:81:22:67:04:e0:60:25:6a:1d:ec:2b:94:30:a1:f8:08:
f6:52:d4:37:c6:85:1c:fd:bd:0a:e4:e9:e6:a3:4f:c1:8e:6d:
96:21:f1:71:d2:9d:92:f6:dc:11:b2:10:b7:9d:a4:f6:49:3c:
7a:d5:b0:80:df:62:fd:1b:e3:25:22:27:82:87:33:8b:1b:0b:
85:69:f0:c5:e8:47:b5:d5:f8:60:67:d5:22:5f:a3:e5:2a:98:
59:40:e6:1e:26:da:5a:b7:35:5b:7e:86:1f:a2:ea:29:d2:20:
b7:3a:e4:6f:1d:bf:91:dd:23:1e:5c:57:16:ea:53:b2:27:1d:
cf:90:a8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:37 2024 by rpki-client on console-fra.rpki-client.org