Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
File: vFWxyjckJV1goKHvKVcn3wjjsUw.cer (raw, json)
Hash identifier: DNku9F8+q2LLytSu9NXNFKROm0Q6j6eN/njZvIeejJA=
Subject key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857167E7EF5B6F9A97844195DCA0048667
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 178.212.230.0/24
IP: 2a07:f240::/29
IP: 2a0b:a4c0::/29
IP: 2a0f:63c0::/29
IP: 2a0f:89c0::/29
IP: 2a0f:9bc0::/29
IP: 2a0f:e3c0::/29
IP: 2a10:3e80::/29
IP: 2a10:a9c0::/29
Validation: Failed, certificate revoked on Wed 01 Nov 2023 13:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:67:e7:ef:5b:6f:9a:97:84:41:95:dc:a0:04:86:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:07:86:df:9b:59:81:1f:80:78:3a:79:32:
de:14:2a:89:3b:3a:8e:9b:36:36:9b:39:55:1e:7d:
24:e3:bb:05:17:78:48:3d:de:f7:a6:73:df:fb:22:
cd:92:f1:66:64:70:74:c1:f6:5c:d0:8c:12:65:d2:
65:43:a7:b7:59:0e:17:fd:80:9f:bc:96:99:8c:9c:
0d:48:90:af:70:5d:66:ba:ec:a7:51:51:db:07:d7:
16:d6:d3:b9:fb:ad:88:96:f0:c2:3c:13:22:29:09:
a2:ac:6e:60:26:2f:3e:c4:05:51:69:d4:83:62:a8:
c3:bd:0a:fc:a4:96:e7:5a:1c:59:7e:5b:5b:07:ce:
25:24:31:80:ca:18:bb:c0:bf:1b:e5:06:93:40:47:
9e:1b:6c:6b:e9:0a:7a:fc:95:8d:e0:84:4d:73:07:
48:82:78:8a:76:c8:e7:cc:a2:a0:fc:13:7f:10:47:
f8:d6:bd:ac:82:af:95:45:ee:ef:59:9f:bf:7f:67:
45:ec:ae:02:86:df:c1:d9:7d:91:b6:7c:3b:f9:7f:
7d:c4:46:cd:3e:d0:56:36:35:7b:85:8c:f0:27:82:
c1:7f:87:a6:2f:39:52:5a:4f:84:ec:1e:9c:42:1c:
bc:51:12:63:02:58:e6:b8:ae:3e:3a:9d:df:62:62:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.230.0/24
IPv6:
2a07:f240::/29
2a0b:a4c0::/29
2a0f:63c0::/29
2a0f:89c0::/29
2a0f:9bc0::/29
2a0f:e3c0::/29
2a10:3e80::/29
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
35:41:e7:c4:e6:40:49:b5:65:ee:ad:89:03:08:d8:af:4e:56:
35:66:34:e8:2b:62:6e:cf:21:61:8c:2a:b7:0d:df:f0:e6:ba:
04:bb:94:5d:4c:a6:1c:6c:7c:6f:47:43:e1:76:84:66:0b:1f:
56:1d:f8:4e:0d:72:04:1d:8c:55:9f:c8:f5:cb:93:e3:b1:e6:
ab:93:f8:d2:7e:e0:85:a6:eb:2f:9d:5f:b9:fd:b4:59:59:de:
5c:b8:93:c9:bf:2a:d8:41:c4:11:f7:22:d0:5b:b7:8c:58:78:
3b:77:87:c2:75:2c:b0:74:99:46:0a:72:eb:d7:16:86:92:4f:
8d:b2:ca:c3:c0:57:78:73:92:c0:f7:19:8b:ae:dc:26:1a:42:
9e:47:80:35:da:a8:3e:b5:a2:e6:fb:09:b1:4b:33:3d:56:9c:
d5:c5:f2:49:26:8a:e8:c8:af:d0:8b:bc:b0:0c:e6:96:d3:70:
ea:61:64:6e:0d:2e:63:7c:57:74:0e:db:97:3a:d9:a1:35:e7:
34:2b:73:6b:53:b6:48:dd:21:d5:2e:9d:a9:63:1e:2e:89:04:
6b:c9:6a:c5:0e:59:b8:91:f9:01:7d:27:dc:7e:39:21:3a:0f:
aa:55:3a:13:31:63:95:04:6c:9e:2b:b9:6d:62:ba:c3:fc:ac:
1d:b4:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:38 2024 by rpki-client on console-fra.rpki-client.org