Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vaBdbFcCeHBsLYN_fj-PVsyRMQU.cer
File: vaBdbFcCeHBsLYN_fj-PVsyRMQU.cer (raw, json)
Hash identifier: XlvQmCxW/LTSdHqBeUKquD4/uTfgTyaZW/+qJem0fX0=
Subject key identifier: BD:A0:5D:6C:57:02:78:70:6C:2D:83:7F:7E:3F:8F:56:CC:91:31:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B634A535367D5C23CBCEE1F53F4DBC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/97c23b-d3aa-47d4-8ad5-607646e0652f/1/vaBdbFcCeHBsLYN_fj-PVsyRMQU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/97c23b-d3aa-47d4-8ad5-607646e0652f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.191.188.0/23
Validation: Failed, certificate revoked on Thu 16 Mar 2023 10:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:4a:53:53:67:d5:c2:3c:bc:ee:1f:53:f4:db:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bda05d6c570278706c2d837f7e3f8f56cc913105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:ed:45:36:94:d5:24:42:ca:63:90:3a:04:
47:bf:e1:aa:e7:2e:b6:dd:40:2e:82:84:dd:52:b8:
27:d9:85:58:82:be:67:80:f7:dd:97:7f:50:c1:88:
e9:b9:41:af:2c:23:ab:64:f4:51:dd:b5:0e:cc:e7:
b1:43:14:85:6e:0a:56:8f:5a:7e:88:37:a0:3a:f9:
fc:62:8f:8e:b0:2d:89:d2:a4:87:ff:21:62:0b:48:
fb:2c:5d:af:1d:26:1c:5d:af:bd:9d:64:a0:f5:33:
9c:3d:cd:7f:c2:d9:e2:bc:f1:5b:04:9e:a5:25:5c:
49:3a:9e:8f:5c:54:8f:4f:49:46:90:2d:13:01:3c:
4f:e3:37:5c:31:af:8e:cb:5d:70:5d:43:3f:bc:d5:
72:f2:0a:0c:b7:ea:6d:f2:e0:7b:0d:a8:a0:fe:5e:
41:40:4b:c1:2b:8e:77:e2:f0:46:cd:d6:98:ec:1d:
03:1a:8f:0b:79:7c:63:42:15:cc:99:f3:f2:07:4d:
91:51:a8:59:d2:9c:d3:5c:20:ea:ad:3d:7f:2a:73:
cd:bc:71:c1:f5:83:c8:ea:f8:8d:50:8f:f7:97:cc:
df:a3:ad:84:d1:12:35:d4:35:f6:f2:fc:22:c1:43:
1d:66:f4:91:18:81:66:f5:e7:f2:6f:c3:9d:67:b9:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A0:5D:6C:57:02:78:70:6C:2D:83:7F:7E:3F:8F:56:CC:91:31:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/97c23b-d3aa-47d4-8ad5-607646e0652f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/97c23b-d3aa-47d4-8ad5-607646e0652f/1/vaBdbFcCeHBsLYN_fj-PVsyRMQU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:2d:a1:63:9a:93:ba:a0:36:cf:4d:cc:05:17:2b:d5:e4:2c:
79:de:62:b6:5d:9f:7e:eb:f2:98:5a:20:00:a8:4e:af:73:0b:
48:7a:65:2e:4f:e5:69:ed:5d:5c:b9:b5:40:9f:4a:de:51:d4:
42:1e:1f:45:24:2c:08:db:e3:bf:5a:1c:fd:9c:dd:9e:ea:79:
52:c9:f1:a0:ee:fa:d4:02:0d:78:f3:40:f2:6b:81:37:13:d6:
f4:ec:21:28:6e:c6:a3:92:08:6b:03:c4:ae:f4:57:dd:9f:c8:
b4:7d:ba:6e:17:20:8f:01:bd:fc:d2:cb:63:02:24:6d:47:a1:
65:96:a1:b1:da:9c:cf:7c:99:23:2f:21:1a:0e:d0:04:1f:59:
25:5c:8f:68:b0:a1:8c:3e:4a:6b:17:2d:08:13:4b:4d:8c:0f:
95:2d:99:8c:08:4e:b2:9f:ec:46:7b:43:ee:5a:d6:3e:7c:fa:
b0:68:fc:68:da:d4:9f:07:a1:ee:b2:b9:82:90:89:33:e0:f3:
54:e2:b3:75:ff:71:56:6c:75:d8:ed:3d:9d:41:2d:39:15:5c:
98:07:e3:4e:7b:ec:84:56:54:ef:26:c4:b4:89:0d:70:1c:fc:
cf:2d:fd:de:6b:ec:d1:1b:bb:4d:98:c2:a1:8e:0f:25:89:8d:
e6:5a:f2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:31 2024 by rpki-client on console-ams.rpki-client.org