Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
File: vNRtujT-ZiDXLZ5_V273qIpslho.cer (raw, json)
Hash identifier: n89qczqtVRygWGdAOWCzCOpsIGDNuPzf05T9CmzaRFw=
Subject key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887E24F47FB1CBC375BB2D41CBE239840A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 22:05:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.89.148.0/22
IP: 45.93.184.0/22
IP: 45.128.12.0/22
IP: 45.132.216.0/22
IP: 45.140.36.0/22
IP: 45.145.240.0/22
Validation: Failed, certificate revoked on Wed 27 Sep 2023 10:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7e:24:f4:7f:b1:cb:c3:75:bb:2d:41:cb:e2:39:84:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 22:05:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:bc:1f:cb:f1:15:f9:38:5a:f4:73:a7:ff:
f5:f6:38:6a:b2:c6:e4:aa:f9:a6:c2:71:9d:15:21:
8f:c8:cf:a5:4c:55:b3:a5:48:28:ba:b2:f4:23:6f:
71:72:93:66:e8:00:9c:c7:5e:f5:31:93:d6:cd:05:
03:bc:a4:91:97:ea:bb:98:25:11:9d:c6:62:56:30:
4f:f5:90:7e:af:7b:d9:59:9a:88:89:df:65:49:68:
91:24:ce:3f:d7:3f:c6:26:52:5a:6a:50:88:c0:cb:
22:ff:d9:3d:dd:40:5a:08:e9:86:17:ff:41:60:d5:
a0:cc:ee:6b:fc:13:d1:a7:5f:37:a5:af:59:a6:6c:
8c:2a:c8:10:47:95:ef:25:5c:70:70:e7:af:2f:06:
6f:2e:b7:e0:01:de:20:a2:4e:b3:d9:91:bb:ce:4a:
95:a0:67:d2:78:54:95:1f:43:85:1c:39:63:54:46:
ef:67:31:2c:7c:c6:80:66:c1:44:f5:36:03:dc:a7:
90:ca:8e:61:4a:ef:f6:85:0b:72:61:31:3b:cb:77:
d8:a3:63:40:8c:d8:d1:b1:a1:aa:90:91:4c:df:60:
ec:36:b7:b2:bd:f1:5e:5a:41:8d:4e:2f:9a:74:ef:
40:9d:b4:3b:2b:76:90:ca:d8:74:b0:7c:77:12:fb:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.148.0/22
45.93.184.0/22
45.128.12.0/22
45.132.216.0/22
45.140.36.0/22
45.145.240.0/22
Signature Algorithm: sha256WithRSAEncryption
24:6f:13:81:a1:56:3f:80:5c:a9:8d:77:51:0f:ae:19:81:11:
59:12:1f:d6:fe:54:dc:6b:c9:c3:5c:08:b7:f0:9d:c0:20:99:
55:06:a0:3e:df:1b:ca:d8:f0:1d:91:de:01:01:f0:09:e1:e4:
b7:54:a3:f4:80:4a:23:3d:43:64:fb:74:18:4c:05:4f:f6:f4:
83:ac:0c:48:74:d2:6c:41:a8:6c:50:16:a6:9b:17:7e:b7:27:
df:fa:60:f0:64:53:31:ac:94:cc:68:e9:74:9d:92:44:31:8e:
65:f7:64:75:e6:21:eb:91:7d:18:49:2a:82:40:bf:12:3a:07:
fd:f7:79:d8:c2:a2:97:d5:2e:0c:8c:e9:53:cc:d6:38:5e:43:
80:b8:67:6a:56:d5:23:f6:c2:0c:64:df:ea:bf:bd:51:91:b2:
08:b3:ef:29:20:c8:ff:7d:d8:db:c7:3d:ad:6b:15:10:de:76:
68:53:9a:4e:a8:43:9b:73:e4:cc:fd:4f:54:26:02:79:ae:c0:
aa:05:a4:7e:c3:7a:21:b4:79:e8:10:87:ef:4f:e9:fb:90:7e:
45:16:d9:7e:b3:5a:33:f4:5e:ca:36:98:5d:1b:f7:0b:a2:9b:
2f:22:d6:bb:2a:00:05:52:28:e2:26:66:15:b2:24:96:ff:6d:
57:dd:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:29 2024 by rpki-client on console-ams.rpki-client.org