Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vYq1gF13uGFO-tL5rLg-ME1M36w.cer
File: vYq1gF13uGFO-tL5rLg-ME1M36w.cer (raw, json)
Hash identifier: qw8zx5AXj//fJDbkGjK8xDsaqQk1xPF+3F7+htSiVts=
Subject key identifier: BD:8A:B5:80:5D:77:B8:61:4E:FA:D2:F9:AC:B8:3E:30:4D:4C:DF:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B85A1DB90CFB8C3F48416523CA22453D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/vYq1gF13uGFO-tL5rLg-ME1M36w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 31 Oct 2023 12:07:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.180.112.0/24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 14:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:a1:db:90:cf:b8:c3:f4:84:16:52:3c:a2:24:53:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 31 12:07:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd8ab5805d77b8614efad2f9acb83e304d4cdfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:89:8c:26:72:66:3d:5d:e0:3e:d0:fa:4d:
ae:2b:21:d1:9c:78:c8:b1:7b:6a:1b:1a:02:b6:e0:
7c:41:01:60:cb:b6:e4:dc:27:44:95:90:bb:af:19:
9e:d8:29:cf:32:25:59:2c:f6:69:e9:d2:d6:83:1c:
29:ac:c6:a5:06:bd:e4:0c:45:f0:61:f1:e8:8c:c5:
5d:cb:fc:26:e7:88:6a:40:93:dd:c8:f2:65:64:e3:
bd:4d:d5:8a:cb:02:f2:a3:1f:d8:5e:73:01:45:89:
d7:b5:ab:35:2f:f0:69:b8:f6:fc:84:70:25:b6:16:
0d:57:0d:53:60:3f:ee:da:96:ae:3a:0b:dc:9f:79:
53:e6:03:36:06:1d:89:42:ca:4a:24:1f:3e:63:e5:
f3:2b:43:15:2b:b1:00:8e:9a:3f:33:d5:6b:a6:85:
33:2e:93:5a:5a:37:1b:6e:31:ad:be:06:82:85:e9:
96:dd:ec:a4:65:65:18:51:93:d9:8d:b5:83:00:9a:
64:41:b7:e5:52:8f:ff:f5:de:a4:87:81:a6:35:4d:
c4:9f:96:96:9f:c6:58:c6:98:cb:d8:e3:b6:28:e9:
a8:ae:c8:50:7e:59:b6:8f:e9:61:e1:b3:6a:4f:6d:
80:82:e6:93:4c:9b:d1:3d:e1:34:96:37:cc:24:91:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:B5:80:5D:77:B8:61:4E:FA:D2:F9:AC:B8:3E:30:4D:4C:DF:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/vYq1gF13uGFO-tL5rLg-ME1M36w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.112.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:24:95:b5:71:e6:4b:6a:9b:ae:84:61:4f:9c:ae:fd:db:be:
81:c0:29:bc:3e:a4:9f:06:af:0b:ec:ef:06:fd:cd:41:68:86:
31:e9:3a:d2:e7:8c:50:45:11:63:3f:3c:48:4c:c2:0c:c7:3c:
11:a8:ca:10:b8:01:c3:1a:95:3e:45:3c:a1:85:30:e9:14:86:
db:49:ba:62:de:03:d0:9e:5f:f1:ca:54:d6:47:8c:5d:1f:aa:
f7:d5:98:66:83:df:d3:ee:5f:39:9c:67:2e:21:d0:9a:d6:0c:
05:96:35:ed:f8:62:7d:4a:e5:f5:36:f8:b3:b0:ad:da:85:38:
cb:04:06:b3:c3:91:df:78:f9:ed:d7:60:87:47:1e:66:79:3d:
5a:1c:cc:ff:78:df:5d:fd:3b:04:90:8a:8a:88:6e:5b:11:2e:
cd:0a:d8:97:bc:da:43:d7:3a:e5:92:63:56:b2:a7:ff:f5:b1:
a7:0c:2f:4a:0b:c4:c5:9e:fe:c7:96:9e:a4:45:fe:12:2f:cd:
89:c6:80:f0:4b:81:da:e2:6f:4d:11:ca:ab:b3:74:91:94:74:
55:d8:ca:43:27:8d:b9:15:f2:f8:2a:61:1c:aa:b8:c8:c0:6a:
94:04:1f:0b:90:99:06:e7:e4:1c:9c:d2:d5:f9:83:6a:4a:be:
d4:1c:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:31 2024 by rpki-client on console-ams.rpki-client.org