Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wB0tTnQyiZE9FPTnKYzaK-cfMwc.cer
File: wB0tTnQyiZE9FPTnKYzaK-cfMwc.cer (raw, json)
Hash identifier: m/1U/axRF6F2NWsEv3IYL2P+QohbrMkI0Yg1G1Q475s=
Subject key identifier: C0:1D:2D:4E:74:32:89:91:3D:14:F4:E7:29:8C:DA:2B:E7:1F:33:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01867DEB1FD31CF4EDF404F82BAE01152B40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/44bc09-8564-44e3-abe6-a8028fc444e5/1/wB0tTnQyiZE9FPTnKYzaK-cfMwc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/44bc09-8564-44e3-abe6-a8028fc444e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Feb 2023 10:56:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 87.239.0.0/21
IP: 193.0.148.0/22
IP: 195.64.156.0/23
Validation: Failed, certificate revoked on Mon 13 Mar 2023 17:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:eb:1f:d3:1c:f4:ed:f4:04:f8:2b:ae:01:15:2b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 23 10:56:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c01d2d4e743289913d14f4e7298cda2be71f3307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:f3:15:c1:e2:f1:39:65:95:df:1e:75:b7:
5b:7e:da:e1:13:f0:c4:e9:29:fc:43:49:06:8a:35:
58:84:71:cd:3e:32:2e:ea:e2:5f:cd:bf:45:d5:9a:
86:a7:4f:9b:d4:6c:97:7a:fd:c6:59:45:e8:be:5d:
63:19:8e:2b:c4:af:0e:ae:af:bb:02:5e:9f:d1:45:
c2:4e:3b:ce:f3:d5:f3:fe:c5:f0:53:24:d1:cf:b8:
65:62:1d:2f:85:ab:b1:1b:6a:ad:18:31:f4:64:7d:
66:4d:87:ca:fe:9c:4a:82:cd:d9:75:2d:d6:db:ff:
b5:be:fb:4f:2d:88:90:9c:31:e5:9c:01:f6:66:c1:
1a:cf:50:e2:c1:76:50:ef:cd:87:5f:1c:12:52:12:
c0:d0:4c:2e:0c:33:58:7e:1e:bf:fb:9e:1b:79:20:
7d:15:1a:84:82:9f:77:06:8f:84:1f:05:d8:f3:fb:
8b:33:f5:0c:02:1b:db:ee:f8:46:1e:21:58:1e:7f:
e9:e3:30:ea:5a:0a:dc:a9:ae:b8:a7:0b:77:fb:de:
4a:ce:84:45:85:7d:28:2e:0f:b0:ce:5d:9a:27:32:
ec:d2:1a:b3:41:00:cf:0f:1b:0c:7b:5a:b1:8a:af:
2b:80:3a:59:66:c0:21:95:42:8f:97:a9:36:5d:fc:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1D:2D:4E:74:32:89:91:3D:14:F4:E7:29:8C:DA:2B:E7:1F:33:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44bc09-8564-44e3-abe6-a8028fc444e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44bc09-8564-44e3-abe6-a8028fc444e5/1/wB0tTnQyiZE9FPTnKYzaK-cfMwc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.0.0/21
193.0.148.0/22
195.64.156.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:b1:f9:32:98:42:66:d2:89:9f:9e:99:ec:51:dc:d1:bd:71:
c9:8d:a9:f6:a1:02:e8:56:1e:2d:5b:8d:53:f4:a2:ff:95:23:
9c:67:f4:9b:86:34:20:45:b5:6b:1d:84:de:9f:4a:d0:1c:ae:
d6:3a:d3:f2:75:68:bd:46:11:50:0c:23:11:07:14:cf:14:c0:
21:52:cf:d0:2f:d1:a2:3e:31:dd:5b:52:e5:08:e2:d7:76:0b:
f6:44:e0:47:c3:32:ec:2b:c1:41:72:73:4c:ee:d6:40:c4:68:
f8:7e:82:5b:37:d6:f7:f3:14:39:6e:f9:c7:67:82:29:38:ed:
f4:3f:85:b4:d0:8c:93:6b:dd:b3:87:7b:05:74:33:2f:10:57:
89:87:e1:f2:6a:03:6e:da:73:21:80:6b:29:0d:46:3e:8a:7d:
27:3d:a3:29:74:db:4f:bc:34:6a:78:ce:d1:0b:31:f2:2a:c2:
51:44:58:65:ae:a5:88:1a:29:14:e3:83:f1:dc:f8:58:df:d1:
e6:d6:17:d8:99:84:f3:ed:0e:53:b8:09:2c:f8:7c:00:64:df:
99:2c:61:20:d2:6d:46:2d:16:60:41:99:36:cf:62:c3:e8:b4:
d8:e5:8a:4f:65:66:c4:9a:06:d8:0b:b9:5e:d7:70:6e:16:0e:
87:f5:ad:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:48 2024 by rpki-client on console-fra.rpki-client.org