Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vwdqhz2Ei42jbbP8VVILQAxYu0U.cer
File: vwdqhz2Ei42jbbP8VVILQAxYu0U.cer (raw, json)
Hash identifier: uSnF0j5scH9zByK2+xNOXepbdRmNPd+LBHZ6+E3tuio=
Subject key identifier: BF:07:6A:87:3D:84:8B:8D:A3:6D:B3:FC:55:52:0B:40:0C:58:BB:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3489BCB56BA2D29331F4E829CF82B05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/vwdqhz2Ei42jbbP8VVILQAxYu0U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.157.139.0/24
IP: 2a12:9a80::/29
Validation: Failed, certificate revoked on Wed 31 Jan 2024 09:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9b:cb:56:ba:2d:29:33:1f:4e:82:9c:f8:2b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf076a873d848b8da36db3fc55520b400c58bb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:bb:86:01:0c:eb:4a:42:28:c2:0c:d4:f1:
4c:1b:89:29:54:ce:45:7e:57:22:09:bb:99:02:3d:
9c:3b:68:69:70:f5:0b:c2:a9:3f:0a:59:b9:e8:a5:
0b:5f:04:3b:9f:ba:1f:cc:0f:73:98:2c:32:d2:65:
01:60:1f:6f:3c:46:ec:8a:b9:bb:bc:8e:6e:35:79:
bf:e9:2e:ac:ae:c8:7d:e3:95:60:bb:c8:1c:0c:7b:
ba:dd:41:cd:9e:b1:ac:87:49:69:79:2d:6e:c3:20:
23:98:92:98:ad:63:48:64:fa:78:bc:7e:86:07:17:
c4:eb:7a:8c:9c:6b:f8:55:83:a2:1c:0b:88:4c:34:
5d:7b:7b:7a:0c:8b:52:4e:1e:67:b9:d5:55:fc:4d:
d7:68:eb:ce:ea:d9:a2:d2:eb:59:0b:57:54:45:a3:
9c:a3:22:41:2e:8a:1f:21:d9:21:a6:84:69:67:3c:
76:a8:f1:3b:ca:8c:fc:fb:79:89:c0:55:da:17:d7:
ed:d0:b6:f1:cb:02:b2:2b:3d:c5:05:bf:48:3f:31:
cd:00:3a:1a:11:bc:04:c3:d0:22:ea:bc:12:96:64:
9b:28:31:61:75:e9:2a:61:c7:f9:2f:04:46:30:a2:
ef:31:a3:83:77:e8:47:7f:da:85:e5:68:85:cd:b6:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:6A:87:3D:84:8B:8D:A3:6D:B3:FC:55:52:0B:40:0C:58:BB:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/vwdqhz2Ei42jbbP8VVILQAxYu0U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.139.0/24
IPv6:
2a12:9a80::/29
Signature Algorithm: sha256WithRSAEncryption
18:ab:05:11:65:6c:ea:66:e8:6e:3e:79:92:d0:f9:ba:2a:6f:
82:bf:1a:a3:df:d5:2c:75:cd:cc:31:8c:e8:d4:6c:36:5c:27:
6d:a2:2a:51:cc:14:d0:13:03:13:dd:fb:c1:6a:e3:0e:85:ed:
94:ff:44:26:4d:eb:cc:39:95:ff:59:07:bf:4e:b2:8b:93:98:
3f:dd:81:ed:b1:f1:be:52:ed:58:8f:1b:78:4b:9f:e5:cb:c8:
00:1a:b8:9b:19:33:ef:41:f0:87:e2:74:79:ea:dd:b8:62:05:
1a:3a:ad:d8:ba:ea:73:38:5e:c7:26:10:0a:b1:cb:4d:f2:71:
21:cc:05:ab:80:31:96:e6:43:70:3a:ab:60:26:25:bd:67:4f:
68:ef:77:1e:8c:d2:12:e0:6b:37:d8:2a:8d:a5:01:3a:63:7e:
d9:2f:f6:09:a8:cb:5a:88:fb:eb:a6:1a:b9:6f:17:80:b3:62:
9d:36:64:19:57:9a:42:32:80:16:58:15:7c:6c:e8:c4:6a:20:
15:89:3e:39:8c:a6:38:97:67:01:e8:2c:3d:81:7e:4b:68:5f:
b1:2e:8d:79:d1:fe:a5:e9:e5:36:7a:96:a5:4a:48:cf:2d:8b:
79:d6:13:1a:98:8f:7a:b9:71:5d:ff:e9:e5:52:1b:e1:5e:83:
ad:60:a8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:37 2024 by rpki-client on console-ams.rpki-client.org